$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa File: 17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa (raw, json) Hash identifier: lI64KziffzpRhnI7AANRANpU5iFy31ZR0++brKdlr1A= Subject key identifier: CF:6B:D7:C9:FC:C2:E3:31:D0:F7:71:F8:52:AF:1E:87:93:A7:18:EE Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584AEF8BC700B118C365AA887880 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 54994 IP address blocks: 2607:3f40:ff29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c7:00:b1:18:c3:65:aa:88:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=e43d6189-24c2-458d-afd4-b044cce986dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:c4:a1:1a:90:c5:7c:fe:ea:4c:8b:46:df: 12:60:14:dd:b9:63:00:e7:9a:00:65:c7:86:b7:01: a4:ed:e8:03:5f:d7:70:c3:fb:e2:f7:72:e1:3b:29: 22:9a:59:e2:de:9a:82:9d:df:23:04:04:9b:52:6b: f1:4f:fb:40:5d:f9:df:fd:cc:fe:08:bc:ab:4f:bb: 60:d3:40:05:85:e1:ac:81:4c:99:84:31:a8:57:a5: 32:c5:56:69:02:fb:d6:52:03:ff:27:d9:27:2b:a6: 96:57:21:51:97:44:e2:51:62:df:31:8e:23:82:68: 08:cc:02:cf:44:4c:fb:c3:6f:5d:52:c3:0e:cc:8e: 77:2d:95:cc:96:e9:79:7f:40:36:cf:cf:96:9c:b0: 04:ec:ba:5a:0f:46:40:95:49:3e:a0:d1:73:1f:5b: 54:78:b6:c2:1d:5a:eb:08:3b:6c:f1:ea:e6:39:4e: 2b:26:3f:47:f7:5e:f7:1e:94:7c:32:76:39:91:7c: 0d:97:90:6e:60:f4:c9:aa:45:60:d1:ca:ea:6a:12: 50:99:16:83:df:af:75:d8:44:95:cc:5b:76:e4:80: 3b:55:1b:2e:d1:d5:62:57:54:bd:52:a3:5f:37:b7: 12:45:8b:26:ba:ce:b2:92:56:2e:04:9a:e7:71:3b: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:D7:C9:FC:C2:E3:31:D0:F7:71:F8:52:AF:1E:87:93:A7:18:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:27:d8:60:f8:19:c9:25:b7:9b:ee:9d:91:aa:65:41:a4:af: 43:79:20:a3:2b:5c:d0:d8:d0:36:07:62:e2:ee:0b:8f:81:01: 68:d5:92:eb:03:e0:9e:c5:8b:a0:29:b8:90:95:e8:4d:6b:ec: ca:29:3b:3c:de:b4:2f:91:76:50:2a:c3:b8:e5:c0:c4:75:36: 5c:fc:21:2e:2a:14:82:90:9c:0d:e1:b8:61:6b:36:92:29:6e: fd:24:d6:d4:aa:01:87:97:f3:c5:cc:88:eb:27:4f:12:23:7a: ca:27:54:5b:9c:27:1d:a5:e5:d4:a8:7e:5b:cb:39:f0:d4:56: 7b:b9:83:26:c8:57:35:7b:8d:24:e5:bc:b6:58:83:f8:fe:95: 44:65:40:a7:9d:91:cd:78:54:7a:26:50:e7:ef:d5:28:72:a7: 25:99:9a:ec:7b:b3:bc:24:d5:de:a8:38:83:da:e6:af:c2:c6: 32:9c:7f:1f:1c:80:28:9d:65:10:65:11:69:71:57:09:0f:b9: 4e:73:8a:38:94:b6:da:d3:b3:0d:7b:9b:6d:e2:3e:87:be:d3: 68:e3:63:62:0a:36:50:0f:89:8c:61:90:23:c7:a9:e4:06:89: 74:8a:25:79:0d:6a:85:68:4b:78:92:68:54:6f:38:89:9e:74: e4:1a:3e:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvi8cAsRjDZaqIeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTQzZDYxODktMjRjMi00NThkLWFmZDQtYjA0NGNjZTk4NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJTEoRqQxXz+6kyLRt8SYBTduWMA55oAZceG twGk7egDX9dww/vi93LhOykimlni3pqCnd8jBASbUmvxT/tAXfnf/cz+CLyrT7tg 00AFheGsgUyZhDGoV6UyxVZpAvvWUgP/J9knK6aWVyFRl0TiUWLfMY4jgmgIzALP REz7w29dUsMOzI53LZXMlul5f0A2z8+WnLAE7LpaD0ZAlUk+oNFzH1tUeLbCHVrr CDts8ermOU4rJj9H9173HpR8MnY5kXwNl5BuYPTJqkVg0crqahJQmRaD36912ESV zFt25IA7VRsu0dViV1S9UqNfN7cSRYsmus6yklYuBJrncTvm+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM9r18n8wuMx0Pdx+FKvHoeTpxjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTdhMjFlN2UtZjFjYy0z ZjQ0LWI1OTMtMjUzNGRhMmVlM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8p MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADEn2GD4Gcklt5vunZGqZUGkr0N5IKMrXNDY0DYHYuLuC4+BAWjV kusD4J7Fi6ApuJCV6E1r7MopOzzetC+RdlAqw7jlwMR1Nlz8IS4qFIKQnA3huGFr NpIpbv0k1tSqAYeX88XMiOsnTxIjesonVFucJx2l5dSoflvLOfDUVnu5gybIVzV7 jSTlvLZYg/j+lURlQKedkc14VHomUOfv1ShypyWZmux7s7wk1d6oOIPa5q/CxjKc fx8cgCidZRBlEWlxVwkPuU5zijiUttrTsw17m23iPoe+02jjY2IKNlAPiYxhkCPH qeQGiXSKJXkNaoVoS3iSaFRvOImedOQaPo8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:22 2025 by rpki-client