$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/908a8323-dcd2-3e13-af20-3f4ed232c666.roa File: 908a8323-dcd2-3e13-af20-3f4ed232c666.roa (raw, json) Hash identifier: frGxKoSf14iCf/AkSvQYMLxhl6EvGaebYQ8X4wUMCmY= Subject key identifier: CC:B3:28:67:B2:CF:3F:15:98:1B:5D:FB:0B:E4:1D:65:0C:CD:01:CC Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D1F4A3F3BC2023C897F1FB680 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/908a8323-dcd2-3e13-af20-3f4ed232c666.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 54994 IP address blocks: 2607:3f40:ff21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:3f:3b:c2:02:3c:89:7f:1f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=3dd74b06-9570-455e-be3e-c2fb41f50ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:93:0d:37:cf:2a:79:aa:b3:9a:a6:68:6a: b8:8a:3c:f7:05:0c:d8:1f:c9:e9:f5:2a:c8:cd:58: 17:0d:7e:d9:a0:45:22:18:f6:66:a8:54:5e:d4:78: 20:bd:77:d0:55:80:7a:39:0f:81:88:06:f2:11:14: a3:50:77:a0:9b:45:c5:ea:d1:b6:20:d3:45:cf:38: d9:12:86:55:f7:d0:20:23:a0:c3:5f:35:d3:b0:92: 4b:38:8c:20:68:ad:f9:cd:38:73:b9:fa:b4:e1:49: 0f:03:7d:6c:e8:29:b8:fb:67:b4:20:49:6a:56:53: ad:79:d0:f5:b2:d3:a4:f9:a0:44:a7:3c:d7:e7:ed: 71:c8:ba:c5:eb:d0:46:2d:d2:59:98:17:cb:83:48: 74:b7:89:7f:83:80:a6:6f:ad:57:f0:dd:37:d7:f7: 3c:67:06:51:9a:26:68:39:83:5f:b1:8c:48:26:49: d1:3c:bf:29:a5:1c:13:4e:c2:09:4d:71:2c:8f:9c: bc:c0:c1:cf:23:ab:7a:17:b4:6d:26:28:cb:87:58: 37:45:74:10:8b:5a:bc:bf:95:3f:20:f3:c0:27:f3: b2:b3:66:0d:96:07:a3:31:d1:3a:4c:cb:8e:37:1a: 2f:46:07:0e:66:af:f4:12:21:e9:81:f3:f3:f4:88: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B3:28:67:B2:CF:3F:15:98:1B:5D:FB:0B:E4:1D:65:0C:CD:01:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/908a8323-dcd2-3e13-af20-3f4ed232c666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:24:7b:d2:b8:62:32:03:42:9b:5a:46:2b:2c:79:40:fe:c4: 41:ad:fe:27:2b:8c:16:0d:7e:7b:f3:d6:76:ed:9e:b0:f9:80: 21:b4:12:bd:d0:8a:a1:d6:92:77:14:f7:31:eb:67:32:e0:27: 84:49:02:a6:4d:53:0f:eb:b1:07:28:d7:ff:9b:eb:48:ab:c1: a9:de:46:21:12:72:b9:09:3c:3d:05:fe:9a:fc:8d:8e:bc:b2: 59:64:86:fb:72:ab:63:5b:ee:09:f1:92:ea:ca:fb:bd:55:61: fe:58:43:e0:8c:4e:91:98:7d:0d:05:b8:75:b7:a3:15:59:f3: 57:98:6b:f7:03:4a:61:c7:31:44:6b:3a:05:76:13:d7:dc:f7: 10:ff:62:00:da:f0:01:51:b3:15:a4:b3:57:11:42:df:55:ec: 7e:4c:f3:40:2e:3b:6a:5e:57:a7:6e:4a:df:6c:81:9f:3b:86: 6d:65:71:4d:18:20:64:91:8b:6a:58:2d:e0:c7:d9:94:4a:0d: c7:e8:a2:45:ca:2f:06:fa:83:09:b1:82:93:01:0f:8e:27:da: 87:8f:1a:3b:0f:cf:ba:a3:ce:e4:f6:62:de:1a:e8:70:a9:c6: 95:ec:e5:0b:9b:c2:3a:b6:66:0b:45:c1:4e:ae:55:0f:54:f5: 2f:48:eb:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSj87wgI8iX8ftoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk M2RkNzRiMDYtOTU3MC00NTVlLWJlM2UtYzJmYjQxZjUwYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz+TDTfPKnmqs5qmaGq4ijz3BQzYH8np9SrI zVgXDX7ZoEUiGPZmqFRe1HggvXfQVYB6OQ+BiAbyERSjUHegm0XF6tG2INNFzzjZ EoZV99AgI6DDXzXTsJJLOIwgaK35zThzufq04UkPA31s6Cm4+2e0IElqVlOtedD1 stOk+aBEpzzX5+1xyLrF69BGLdJZmBfLg0h0t4l/g4Cmb61X8N031/c8ZwZRmiZo OYNfsYxIJknRPL8ppRwTTsIJTXEsj5y8wMHPI6t6F7RtJijLh1g3RXQQi1q8v5U/ IPPAJ/Oys2YNlgejMdE6TMuONxovRgcOZq/0EiHpgfPz9IgXnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyzKGeyzz8VmBtd+wvkHWUMzQHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTA4YTgzMjMtZGNkMi0z ZTEzLWFmMjAtM2Y0ZWQyMzJjNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8h MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQke9K4YjIDQptaRisseUD+xEGt/icrjBYNfnvz1nbtnrD5gCG0 Er3QiqHWkncU9zHrZzLgJ4RJAqZNUw/rsQco1/+b60irwaneRiEScrkJPD0F/pr8 jY68sllkhvtyq2Nb7gnxkurK+71VYf5YQ+CMTpGYfQ0FuHW3oxVZ81eYa/cDSmHH MURrOgV2E9fc9xD/YgDa8AFRsxWks1cRQt9V7H5M80AuO2peV6duSt9sgZ87hm1l cU0YIGSRi2pYLeDH2ZRKDcfookXKLwb6gwmxgpMBD44n2oePGjsPz7qjzuT2Yt4a 6HCpxpXs5Qubwjq2ZgtFwU6uVQ9U9S9I60I= -----END CERTIFICATE-----Generated at Thu Mar 26 10:58:57 2026 by rpki-client