$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa File: b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa (raw, json) Hash identifier: gKg5NT11ZTBtEKnLeV5NnUNlb1LnUB0IbIBMfQgP0Ow= Subject key identifier: DA:AA:74:87:D4:48:0A:11:99:9C:AA:49:35:09:1A:C9:B1:C3:80:98 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4973452071A10E106200B2C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 2607:3f40:ff45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:45:20:71:a1:0e:10:62:00:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d029248b-5c76-4bed-a81b-879ca3c43b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:97:ba:8e:62:a9:10:6e:64:ca:73:4d:26: 17:c9:b1:8c:8a:81:4f:81:0c:8f:1c:61:d0:7f:3e: 00:0f:5e:71:86:90:4d:6e:33:25:25:60:46:e1:ef: fe:09:6e:bd:bc:55:0b:f9:8e:87:19:2a:c0:df:f9: 4a:77:7e:6e:9b:57:2f:cf:a9:95:b0:d6:6f:78:d0: 3b:6f:cd:a3:74:f3:8d:de:ff:f4:fa:17:5f:f6:70: d6:10:c2:f5:89:89:f9:7c:1a:f2:61:36:dd:0b:08: f1:3f:2e:2d:b1:c6:c3:88:70:43:d4:4a:9d:55:13: c0:0f:a0:b4:d0:8e:fd:c8:63:15:81:b5:47:89:a1: b5:ce:53:50:42:20:7a:0d:55:06:ca:8f:ec:60:38: 94:21:a8:56:ac:fb:91:29:9f:fd:0e:7e:36:04:0e: 7f:9a:3e:cb:e0:08:07:31:e3:4d:2d:49:70:ff:09: 7c:97:74:d3:e7:ad:ec:b9:bd:ea:f9:bc:d0:7a:7d: f0:ab:69:6f:06:10:63:ae:38:b1:f3:c3:2a:8f:dd: 7d:13:b5:5c:1f:d3:32:83:ca:25:da:e3:ac:6a:02: 6b:f0:16:7d:c7:ac:12:16:07:81:7b:9a:67:9a:f7: cc:06:76:bd:71:75:a0:f3:9b:2b:ae:0b:9f:c8:c1: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:74:87:D4:48:0A:11:99:9C:AA:49:35:09:1A:C9:B1:C3:80:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4c2b32f-cd6e-31e1-b787-3155ac4df6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:11:9c:25:f6:91:73:ab:90:97:1d:63:3a:17:83:47:23:69: fd:27:75:18:0d:e7:10:5e:72:76:53:49:f6:d1:c0:b3:be:dd: bf:36:bb:63:fb:74:59:63:eb:10:46:5a:95:2e:e5:bd:61:ca: 99:82:97:60:ec:f6:f5:f9:d5:c5:5d:83:6f:da:95:b6:bc:9c: df:66:53:02:b0:8a:6a:bb:3d:4e:6b:ac:f0:ac:82:80:49:2a: 72:5b:b4:b6:06:21:a2:1b:0d:11:c8:4a:ab:bb:88:7f:c5:ba: 95:a0:a0:87:21:05:3a:f1:ee:19:75:91:9e:2d:f6:5b:6b:23: bc:39:2a:a9:9f:08:95:50:35:cf:5e:91:34:98:47:49:df:80: 34:4f:4c:3a:4c:70:80:5c:e4:e8:d1:dd:57:b1:e9:c9:24:88: 79:91:af:1b:6a:dc:a7:a8:03:eb:78:69:9b:c0:fb:b6:1a:27: 49:2f:ca:25:61:67:08:40:e7:c6:de:1b:c1:34:3e:fa:87:a8: 99:26:13:19:64:15:e1:a3:c2:43:31:de:b3:b7:6f:4b:25:55: de:37:fd:f9:da:cd:7e:8c:78:c1:f6:8c:b1:31:63:fb:63:ed: e0:15:af:d9:4b:71:9a:9b:62:15:ab:13:e6:5e:a3:6e:e2:ba: f3:95:92:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc0UgcaEOEGIAssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAyOTI0OGItNWM3Ni00YmVkLWE4MWItODc5Y2EzYzQzYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpWXuo5iqRBuZMpzTSYXybGMioFPgQyPHGHQ fz4AD15xhpBNbjMlJWBG4e/+CW69vFUL+Y6HGSrA3/lKd35um1cvz6mVsNZveNA7 b82jdPON3v/0+hdf9nDWEML1iYn5fBryYTbdCwjxPy4tscbDiHBD1EqdVRPAD6C0 0I79yGMVgbVHiaG1zlNQQiB6DVUGyo/sYDiUIahWrPuRKZ/9Dn42BA5/mj7L4AgH MeNNLUlw/wl8l3TT563sub3q+bzQen3wq2lvBhBjrjix88Mqj919E7VcH9Myg8ol 2uOsagJr8BZ9x6wSFgeBe5pnmvfMBna9cXWg85srrgufyME4fwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqqdIfUSAoRmZyqSTUJGsmxw4CYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjRjMmIzMmYtY2Q2ZS0z MWUxLWI3ODctMzE1NWFjNGRmNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP9F MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGIRnCX2kXOrkJcdYzoXg0cjaf0ndRgN5xBecnZTSfbRwLO+3b82 u2P7dFlj6xBGWpUu5b1hypmCl2Ds9vX51cVdg2/alba8nN9mUwKwimq7PU5rrPCs goBJKnJbtLYGIaIbDRHISqu7iH/FupWgoIchBTrx7hl1kZ4t9ltrI7w5KqmfCJVQ Nc9ekTSYR0nfgDRPTDpMcIBc5OjR3Vex6ckkiHmRrxtq3KeoA+t4aZvA+7YaJ0kv yiVhZwhA58beG8E0PvqHqJkmExlkFeGjwkMx3rO3b0slVd43/fnazX6MeMH2jLEx Y/tj7eAVr9lLcZqbYhWrE+Zeo27iuvOVkmk= -----END CERTIFICATE-----Generated at Fri Sep 25 23:38:52 2026 by rpki-client