$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/043b390b-fe8f-3900-907b-aae441f72174.roa File: 043b390b-fe8f-3900-907b-aae441f72174.roa (raw, json) Hash identifier: bti8QB/UOvYPawXjfjHLQTbeOdMx4aFzXXexICqYscM= Subject key identifier: 8E:D8:79:5F:BF:EC:C7:B5:2A:15:A2:E2:A1:C9:BB:F3:81:C7:56:19 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F6F22FC5663D4A6E3FE032AE0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/043b390b-fe8f-3900-907b-aae441f72174.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 54994 IP address blocks: 2607:3f40:ff43::/48 maxlen: 48 2607:3f40:ff44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:fc:56:63:d4:a6:e3:fe:03:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=d7a8f9d4-98a9-4a7b-b7df-4816e7329a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:fd:e2:60:d1:ba:88:f0:c5:58:92:f3:b2: 2d:e6:ee:7b:d7:7c:b9:28:51:6a:50:b0:10:e1:ca: da:ab:2f:ea:40:6e:4f:75:62:fd:e6:02:6d:2c:7a: 96:db:34:99:03:71:ae:88:cc:46:1b:1f:a7:dd:a0: 90:40:4d:37:5b:90:2e:5e:ac:38:13:9b:15:5a:7b: e3:92:9a:b6:3c:da:f5:81:e2:33:57:ff:b1:d9:81: 2f:82:af:b0:fe:8a:81:b3:51:f2:49:11:97:37:82: ee:b3:c3:ba:58:01:71:98:88:5a:03:d2:87:e1:4e: e3:be:b7:7d:76:38:c1:0a:ef:0c:89:3e:68:61:d2: a5:21:85:5f:1f:d7:35:c0:1c:bc:b0:73:ac:b1:1b: 9f:f0:4f:73:37:14:29:59:c3:5e:a9:e0:76:95:c8: 61:1c:2b:bd:90:fa:aa:73:ca:75:bc:c4:49:ab:38: 42:4d:78:c7:15:2a:d1:5f:5e:86:cd:fa:8f:c5:3d: d8:32:1e:e5:d8:f3:8f:a5:64:de:8c:6c:ac:df:9c: be:b3:48:de:1b:e8:26:66:7a:8c:ab:c9:1d:e2:9d: 53:14:d8:58:f5:db:ed:fb:8f:ca:04:f2:4a:eb:60: ab:41:26:9c:5b:0e:38:9b:da:22:8e:e4:8d:af:81: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D8:79:5F:BF:EC:C7:B5:2A:15:A2:E2:A1:C9:BB:F3:81:C7:56:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/043b390b-fe8f-3900-907b-aae441f72174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff43::-2607:3f40:ff44:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:db:28:6d:5f:cc:73:0f:53:fc:4a:3a:ae:83:15:8d:b8:aa: 1b:c5:a8:c7:80:46:4b:62:d2:a7:d0:c7:55:3b:95:7b:02:a3: ed:43:83:77:e6:ed:9e:5c:ae:50:6e:71:d2:ba:a6:ef:02:7c: d9:99:b6:ca:8b:d8:9b:af:17:41:8a:0e:a5:4a:f6:c0:7b:e1: 2a:9a:ba:c9:0c:6e:19:2a:9e:36:93:04:7a:e7:c8:43:b0:97: 01:7c:9e:bb:3d:36:9b:1b:14:5d:36:08:b7:f6:5c:91:c2:db: 38:86:9d:74:f9:78:3c:3d:77:17:a3:1e:d2:0a:17:94:22:f3: ac:cf:ab:17:7c:4f:1e:a9:14:02:f1:38:96:d5:1b:1f:1a:49: 2f:4d:6b:a5:82:25:ed:3a:ed:37:d7:05:fa:fa:3a:45:b5:46: 35:a2:1f:9b:80:03:7c:90:96:f5:38:ab:09:aa:1e:d1:f9:f4: 04:e9:59:c2:7b:63:19:b0:4e:18:09:c6:d9:94:d9:cf:f8:83: f6:0d:d9:f6:c4:cf:82:d1:ee:dd:26:a6:c2:cf:25:ee:30:2c: 92:4b:d1:8c:4b:df:89:72:94:37:8a:ad:bb:56:85:51:02:b9: 9b:62:c9:c3:46:18:88:a9:38:e4:64:e2:a1:35:c7:68:8b:58: 4a:c8:53:03 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9vIvxWY9Sm4/4DKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDdhOGY5ZDQtOThhOS00YTdiLWI3ZGYtNDgxNmU3MzI5YTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYv94mDRuojwxViS87It5u5713y5KFFqULAQ 4craqy/qQG5PdWL95gJtLHqW2zSZA3GuiMxGGx+n3aCQQE03W5AuXqw4E5sVWnvj kpq2PNr1geIzV/+x2YEvgq+w/oqBs1HySRGXN4Lus8O6WAFxmIhaA9KH4U7jvrd9 djjBCu8MiT5oYdKlIYVfH9c1wBy8sHOssRuf8E9zNxQpWcNeqeB2lchhHCu9kPqq c8p1vMRJqzhCTXjHFSrRX16GzfqPxT3YMh7l2POPpWTejGys35y+s0jeG+gmZnqM q8kd4p1TFNhY9dvt+4/KBPJK62CrQSacWw44m9oijuSNr4HnQQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFI7YeV+/7Me1KhWi4qHJu/OBx1YZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMDQzYjM5MGItZmU4Zi0z OTAwLTkwN2ItYWFlNDQxZjcyMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBz9A /0MDBwAmBz9A/0QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAW9sobV/Mcw9T/Eo6roMVjbiqG8Wox4BGS2LS p9DHVTuVewKj7UODd+btnlyuUG5x0rqm7wJ82Zm2yovYm68XQYoOpUr2wHvhKpq6 yQxuGSqeNpMEeufIQ7CXAXyeuz02mxsUXTYIt/ZckcLbOIaddPl4PD13F6Me0goX lCLzrM+rF3xPHqkUAvE4ltUbHxpJL01rpYIl7TrtN9cF+vo6RbVGNaIfm4ADfJCW 9TirCaoe0fn0BOlZwntjGbBOGAnG2ZTZz/iD9g3Z9sTPgtHu3Samws8l7jAskkvR jEvfiXKUN4qtu1aFUQK5m2LJw0YYiKk45GTioTXHaItYSshTAw== -----END CERTIFICATE-----Generated at Tue Oct 20 02:50:54 2026 by rpki-client