$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa File: c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa (raw, json) Hash identifier: d6Qovpl9HQFdAKPMj07BlPVhX+QXO1z1ooqnAd+qGKI= Subject key identifier: 82:6B:DF:55:5C:AD:61:4A:B6:90:70:89:F9:7E:B3:7C:F6:10:2D:06 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D7F9A822756943BE3CFA45F80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 54994 IP address blocks: 2607:3f40:ff2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:82:27:56:94:3b:e3:cf:a4:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=85e6ee9c-6094-449f-8423-f0d878e550f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:ef:5f:1e:83:3e:a0:a8:eb:55:f9:7c:fd: 2b:76:4a:21:b3:a8:ee:fb:68:bb:fe:62:25:52:9d: 5b:06:9f:df:ef:a3:db:c1:22:32:be:73:7d:50:5d: ef:a8:f9:e6:8b:3d:c9:8f:97:e1:35:3e:8d:1f:45: 42:5b:98:80:4b:db:53:fb:37:f9:29:6b:d3:cf:44: 8c:5f:7a:92:1a:d7:d7:6a:b7:5d:c5:59:00:33:c9: 3e:fe:60:19:ed:61:59:5b:7b:db:b4:20:41:ef:50: ec:ce:56:b2:bd:2d:51:7d:d2:3e:c2:15:d5:e9:4c: a3:4b:39:ce:d3:b1:29:ce:d9:0d:09:b7:fc:b7:8e: a1:a6:cc:8e:52:d9:3d:25:6e:30:90:4f:4f:de:d4: 61:fe:21:87:b9:17:4b:30:41:c4:af:62:d2:b2:86: 3a:92:35:a8:6f:de:0f:77:81:83:6b:6e:8f:26:f6: 19:7b:7f:7d:99:e9:d0:aa:15:2b:45:85:60:b0:45: 34:c5:9c:55:da:01:ac:61:af:59:c0:25:81:b2:d0: a7:f7:b5:ef:77:63:26:06:75:a2:f4:73:db:3a:ac: e6:c6:57:34:21:6b:1c:ea:9a:8e:b5:7c:36:cd:3a: d3:c4:26:8a:da:81:d1:02:e7:97:2e:6f:9e:a9:cd: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6B:DF:55:5C:AD:61:4A:B6:90:70:89:F9:7E:B3:7C:F6:10:2D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cb:09:fe:0d:45:5f:1a:eb:72:94:ca:9e:30:fb:c1:36:45: 10:64:02:64:5b:6a:4c:45:f1:b8:1d:b2:aa:a2:cb:fa:47:a7: ff:86:5a:25:5e:c5:9d:0e:92:b8:b9:34:d2:25:d8:39:a5:3b: af:c8:4b:60:1f:69:93:2e:7e:01:df:86:85:35:03:5e:41:78: d2:1e:11:f6:50:94:06:ba:6f:12:78:2b:58:e5:54:8d:cf:4a: 06:90:02:32:d3:93:0b:76:e6:ff:24:94:d7:53:81:33:f9:ec: 06:e8:c8:0b:1e:27:da:86:12:49:5e:39:f4:8c:8a:39:16:90: d4:05:00:5e:d3:10:e0:a0:b7:34:08:1c:fb:36:cc:38:26:ca: 7d:cf:1b:4e:32:cd:cb:0d:13:3f:4f:37:ea:1e:f2:19:14:8e: ad:0a:12:9a:ec:b0:63:24:29:3c:79:56:54:18:ef:56:92:5f: a2:fe:08:dc:af:ef:bb:3d:6f:b2:33:87:4c:a0:47:b4:1b:c3: 4a:5e:78:ab:ae:13:38:b7:f9:ee:29:49:08:42:9b:76:b2:50: ba:5e:d5:ab:6e:ae:d6:f3:d4:fd:29:7a:0a:ac:d6:7d:53:80: 82:30:29:88:5c:58:8b:c1:3b:1b:78:ac:2e:ba:a7:17:1f:86: df:1a:5e:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1/moInVpQ748+kX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ODVlNmVlOWMtNjA5NC00NDlmLTg0MjMtZjBkODc4ZTU1MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUDvXx6DPqCo61X5fP0rdkohs6ju+2i7/mIl Up1bBp/f76PbwSIyvnN9UF3vqPnmiz3Jj5fhNT6NH0VCW5iAS9tT+zf5KWvTz0SM X3qSGtfXarddxVkAM8k+/mAZ7WFZW3vbtCBB71DszlayvS1RfdI+whXV6UyjSznO 07EpztkNCbf8t46hpsyOUtk9JW4wkE9P3tRh/iGHuRdLMEHEr2LSsoY6kjWob94P d4GDa26PJvYZe399menQqhUrRYVgsEU0xZxV2gGsYa9ZwCWBstCn97Xvd2MmBnWi 9HPbOqzmxlc0IWsc6pqOtXw2zTrTxCaK2oHRAueXLm+eqc3bkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIJr31VcrWFKtpBwifl+s3z2EC0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzI3MDRiZDUtZDQzNS0z MWIxLWI0YWItYjBjN2FhOTM4OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8v MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/LCf4NRV8a63KUyp4w+8E2RRBkAmRbakxF8bgdsqqiy/pHp/+G WiVexZ0Okri5NNIl2DmlO6/IS2AfaZMufgHfhoU1A15BeNIeEfZQlAa6bxJ4K1jl VI3PSgaQAjLTkwt25v8klNdTgTP57AboyAseJ9qGEkleOfSMijkWkNQFAF7TEOCg tzQIHPs2zDgmyn3PG04yzcsNEz9PN+oe8hkUjq0KEprssGMkKTx5VlQY71aSX6L+ CNyv77s9b7Izh0ygR7Qbw0peeKuuEzi3+e4pSQhCm3ayULpe1aturtbz1P0pegqs 1n1TgIIwKYhcWIvBOxt4rC66pxcfht8aXgQ= -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:26 2026 by rpki-client