$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa File: 17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa (raw, json) Hash identifier: xAHEdrJY+RWqoMhFVpCZ+HNCc9jE6hMRAwGDv4gh4r0= Subject key identifier: 84:2D:B4:00:C0:F1:89:49:5D:23:6E:B7:6B:90:08:04:2E:14:7F:05 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D905A9DDD01E29825A385CE40 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 54994 IP address blocks: 2607:3f40:ff29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9d:dd:01:e2:98:25:a3:85:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=e801df67-cb81-4f77-9751-dd29fedd1b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:65:e2:a1:46:d4:62:02:dd:34:fe:de:a6: ab:66:e1:f1:fd:66:2b:73:68:55:63:ad:e7:9c:40: 6b:c6:c4:d6:73:fc:41:d0:46:51:ae:f1:b6:93:7f: 69:61:fd:8b:e5:e9:b4:1f:8e:dc:fe:35:31:c6:2e: 84:3f:6f:a4:0d:05:c5:3b:bc:cb:c6:b0:59:1b:69: 7f:5b:6a:50:9e:46:3f:96:62:1b:99:c2:dd:4f:b0: bd:33:d4:df:89:31:56:84:e0:4c:9f:6d:9b:fe:52: 22:14:e6:48:bf:5f:49:2f:32:0f:2e:e7:ac:70:55: 0e:19:56:2c:5e:76:cf:b7:ba:6d:e6:da:17:cf:41: 1a:d2:ad:08:a5:cb:a3:ce:53:e9:8a:2a:6f:45:95: 0a:8b:c0:43:6d:13:5a:37:99:5b:ec:ec:ed:e5:d0: d3:29:74:bb:85:af:43:d1:42:ef:65:73:0e:28:5c: f8:59:79:e5:e0:41:98:46:d2:af:19:63:15:91:e0: 44:6a:64:80:5c:c3:81:7e:20:c8:d3:5e:92:df:c3: 90:96:f7:40:7b:fd:1d:0a:3e:ad:ba:18:15:cd:73: 52:b8:83:e5:77:2f:11:df:33:9f:d0:de:53:4c:25: dd:b8:63:bb:bf:44:81:f8:50:5a:af:a7:d4:e2:04: 44:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2D:B4:00:C0:F1:89:49:5D:23:6E:B7:6B:90:08:04:2E:14:7F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/17a21e7e-f1cc-3f44-b593-2534da2ee3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bd:43:81:28:c6:bf:cf:6f:78:76:f3:48:09:ae:4b:b1:01: dc:f3:1d:3e:b6:09:c2:dd:a4:13:8d:67:c4:49:8a:e3:c3:5c: 4f:8b:16:a9:2e:18:93:09:43:2d:2c:75:af:8d:94:38:99:e1: e4:ba:bc:d9:0d:97:10:69:60:c8:c2:cb:1a:eb:d2:d6:4b:03: f6:63:f7:cc:21:f8:8f:ea:91:79:3f:26:0b:33:dd:f8:52:3c: b5:d5:1b:b0:01:bd:fd:83:5e:d5:0b:6d:28:aa:13:07:d8:a5: 66:32:88:1b:ce:60:f7:85:eb:98:57:38:e1:0f:09:e9:0a:57: 73:0e:06:ca:22:cc:fb:bf:57:94:0e:e7:53:f8:81:e1:48:24: b4:c5:ae:51:c5:86:30:23:29:56:a9:bf:df:86:87:61:c2:61: f3:f1:cd:f2:49:d7:45:90:44:11:d1:f6:d0:08:dc:e5:68:1a: a1:fd:a1:6b:0e:3a:11:3c:da:ab:31:54:ae:20:fe:40:10:cc: 84:c4:c0:c3:cc:44:f6:3c:16:a2:59:49:49:f8:1a:01:48:c4: 82:60:14:88:d5:19:40:52:8d:d2:e0:5c:28:1d:6e:9d:0a:5b: 59:54:16:18:3b:b6:33:3e:a1:2e:33:ca:52:91:5d:17:76:4c: 1d:f4:1f:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWp3dAeKYJaOFzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZTgwMWRmNjctY2I4MS00Zjc3LTk3NTEtZGQyOWZlZGQxYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsshl4qFG1GIC3TT+3qarZuHx/WYrc2hVY63n nEBrxsTWc/xB0EZRrvG2k39pYf2L5em0H47c/jUxxi6EP2+kDQXFO7zLxrBZG2l/ W2pQnkY/lmIbmcLdT7C9M9TfiTFWhOBMn22b/lIiFOZIv19JLzIPLuescFUOGVYs XnbPt7pt5toXz0Ea0q0IpcujzlPpiipvRZUKi8BDbRNaN5lb7Ozt5dDTKXS7ha9D 0ULvZXMOKFz4WXnl4EGYRtKvGWMVkeBEamSAXMOBfiDI016S38OQlvdAe/0dCj6t uhgVzXNSuIPldy8R3zOf0N5TTCXduGO7v0SB+FBar6fU4gRElQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIQttADA8YlJXSNut2uQCAQuFH8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTdhMjFlN2UtZjFjYy0z ZjQ0LWI1OTMtMjUzNGRhMmVlM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8p MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFW9Q4Eoxr/Pb3h280gJrkuxAdzzHT62CcLdpBONZ8RJiuPDXE+L FqkuGJMJQy0sda+NlDiZ4eS6vNkNlxBpYMjCyxrr0tZLA/Zj98wh+I/qkXk/Jgsz 3fhSPLXVG7ABvf2DXtULbSiqEwfYpWYyiBvOYPeF65hXOOEPCekKV3MOBsoizPu/ V5QO51P4geFIJLTFrlHFhjAjKVapv9+Gh2HCYfPxzfJJ10WQRBHR9tAI3OVoGqH9 oWsOOhE82qsxVK4g/kAQzITEwMPMRPY8FqJZSUn4GgFIxIJgFIjVGUBSjdLgXCgd bp0KW1lUFhg7tjM+oS4zylKRXRd2TB30HyU= -----END CERTIFICATE-----Generated at Wed May 13 10:30:40 2026 by rpki-client