$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ddd09766-3616-3709-9504-d594cba811dd.roa File: ddd09766-3616-3709-9504-d594cba811dd.roa (raw, json) Hash identifier: hlWxyvXnyGiLQfxvdW/TSwczFTgRKW/dCz6LeWaCESU= Subject key identifier: 14:82:93:5D:5B:CE:C6:C2:59:33:2B:03:6E:5D:FB:0C:8E:8F:47:54 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DAC4577318C6F950893F77960 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ddd09766-3616-3709-9504-d594cba811dd.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54994 IP address blocks: 2607:3f40:ff22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:77:31:8c:6f:95:08:93:f7:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=e31644be-e661-48b4-9372-4d435dd508a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:70:e3:3b:2a:dd:d6:ee:bc:c0:4b:da:32: f3:e3:a4:1e:e9:d7:77:d8:27:4c:4f:c0:1c:f9:19: 80:65:9a:7f:10:43:76:c1:33:2c:f7:31:75:07:16: 2e:bb:7f:fd:b2:a8:15:7b:a1:6e:f2:f0:ab:c8:3f: 9c:e5:ac:bd:72:41:07:cb:6a:61:ef:28:0e:d6:2b: 6d:7f:27:fb:8e:37:a6:95:78:45:72:75:00:af:25: d5:64:e2:8c:52:8e:ce:0d:64:e4:6e:e1:9e:cd:ac: 29:7e:8a:66:a8:dd:0a:6f:c1:4d:8d:f7:24:20:cd: f8:17:e3:63:65:c4:a9:3c:c3:3f:87:46:5a:c6:96: 39:37:66:36:4a:2d:99:de:c0:c7:6c:93:27:35:43: e5:1d:8b:b4:67:47:ae:aa:b3:ad:65:7f:cf:81:13: 81:a7:47:3a:ea:3e:ac:8c:55:73:9c:e4:15:d5:e9: b7:11:24:9b:87:74:bf:e7:ce:e5:e2:07:94:8a:40: 6b:ed:b1:cd:8b:de:6d:2e:2d:ac:ed:2c:4b:fe:5e: e6:07:5b:48:54:12:69:ee:39:67:c1:5a:ec:6f:7b: 06:50:be:f1:ae:16:73:3f:a3:dd:fa:0f:fd:75:8a: 29:6c:5d:5a:bd:b0:86:b3:bb:44:e3:a0:d0:10:5c: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:93:5D:5B:CE:C6:C2:59:33:2B:03:6E:5D:FB:0C:8E:8F:47:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ddd09766-3616-3709-9504-d594cba811dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:05:49:c6:77:4f:09:ff:80:23:0e:e5:61:36:08:61:30:a0: 0f:ed:1b:89:43:0a:2d:e2:83:06:28:bd:9b:b8:28:1c:45:8f: b1:4b:03:54:18:fb:64:00:08:bd:9b:11:80:c4:6a:23:ac:f0: 23:fb:22:d9:4c:f5:9b:b1:58:a5:fe:e4:1d:27:1a:0e:0d:8e: ad:ef:db:4b:a6:8f:dd:72:f2:de:60:21:f9:f2:16:2d:59:da: f1:6e:71:64:cb:95:22:3d:c1:fa:6e:c9:87:cf:07:f1:ff:1a: 82:3f:73:b7:a0:90:6a:7e:09:d5:13:57:fd:55:80:58:99:46: 19:46:40:84:85:6e:c0:50:a2:5e:19:41:15:64:fa:2f:2e:ca: e9:91:01:0b:8f:e4:6d:71:00:a1:6e:a6:76:a8:bd:ce:c3:b6: 7e:50:95:e8:8c:a3:ae:53:40:ca:75:57:b9:81:fc:68:af:c1: f4:fc:d9:21:96:af:23:71:d6:e1:00:ff:b2:81:a7:10:31:01: ee:1f:6d:f4:b6:88:80:00:1a:05:0c:4c:9e:c9:16:5c:7f:cd: e9:3c:f5:95:01:3d:3c:3d:82:df:85:c7:3a:4e:ea:bf:e0:2a: a9:72:e8:a1:7b:f0:6e:78:c3:93:95:0b:fa:9a:65:b2:cc:d5: dc:db:ef:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2sRXcxjG+VCJP3eWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZTMxNjQ0YmUtZTY2MS00OGI0LTkzNzItNGQ0MzVkZDUwOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Jw4zsq3dbuvMBL2jLz46Qe6dd32CdMT8Ac +RmAZZp/EEN2wTMs9zF1BxYuu3/9sqgVe6Fu8vCryD+c5ay9ckEHy2ph7ygO1itt fyf7jjemlXhFcnUAryXVZOKMUo7ODWTkbuGezawpfopmqN0Kb8FNjfckIM34F+Nj ZcSpPMM/h0ZaxpY5N2Y2Si2Z3sDHbJMnNUPlHYu0Z0euqrOtZX/PgROBp0c66j6s jFVznOQV1em3ESSbh3S/587l4geUikBr7bHNi95tLi2s7SxL/l7mB1tIVBJp7jln wVrsb3sGUL7xrhZzP6Pd+g/9dYopbF1avbCGs7tE46DQEFyTuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBSCk11bzsbCWTMrA25d+wyOj0dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZGRkMDk3NjYtMzYxNi0z NzA5LTk1MDQtZDU5NGNiYTgxMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8i MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHEFScZ3Twn/gCMO5WE2CGEwoA/tG4lDCi3igwYovZu4KBxFj7FL A1QY+2QACL2bEYDEaiOs8CP7ItlM9ZuxWKX+5B0nGg4Njq3v20umj91y8t5gIfny Fi1Z2vFucWTLlSI9wfpuyYfPB/H/GoI/c7egkGp+CdUTV/1VgFiZRhlGQISFbsBQ ol4ZQRVk+i8uyumRAQuP5G1xAKFupnaovc7Dtn5QleiMo65TQMp1V7mB/GivwfT8 2SGWryNx1uEA/7KBpxAxAe4fbfS2iIAAGgUMTJ7JFlx/zek89ZUBPTw9gt+FxzpO 6r/gKqly6KF78G54w5OVC/qaZbLM1dzb74k= -----END CERTIFICATE-----Generated at Wed May 13 12:15:36 2026 by rpki-client