$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa File: c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa (raw, json) Hash identifier: 4Ms6iOhdIab1Oc6VV880Fo2OOeqUbRECE2Wwe7fjkjw= Subject key identifier: C7:52:75:DE:A4:32:EF:3C:BC:FC:51:DD:AD:3A:EF:0F:71:E3:D1:57 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E5FDF58A2435F289CE0E19FC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 54994 IP address blocks: 2607:3f40:ff2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:58:a2:43:5f:28:9c:e0:e1:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=a31538a6-0396-40c7-9c17-bf7c08b3719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:56:b7:49:39:5d:ea:42:c0:86:f7:ba:04: 62:bf:c1:b8:c1:05:bb:bb:16:db:4e:e9:2e:21:0a: 7f:de:64:c3:b0:dd:16:26:24:8c:98:cc:8e:34:7e: dd:e1:47:93:35:db:1a:12:47:82:51:5e:f5:d5:49: 96:da:ee:29:81:91:b9:b2:41:24:91:b5:a2:e3:6c: 91:3f:64:4f:f2:92:14:5f:a6:a0:1b:0d:08:7c:a4: 75:49:3d:c9:f7:ae:5e:e6:1b:54:fe:07:07:47:93: d1:cd:69:7f:3e:54:39:c1:3e:ab:d5:65:1c:18:9c: 34:86:f1:c0:f9:43:33:32:3b:87:25:40:22:43:e4: fd:c0:c3:a5:bf:91:9b:36:6e:19:74:35:9f:41:6d: e8:85:34:ec:bf:68:aa:34:1d:22:7a:ee:b7:e2:40: 0f:94:70:e2:7e:a5:f2:93:a6:1c:03:ba:28:05:bd: a8:b4:6c:0f:39:66:11:07:23:a1:9f:3e:5c:22:15: f6:8b:e7:5d:06:0b:ff:0c:d6:48:c0:b9:5c:62:e2: bb:9c:bb:56:cc:b7:14:95:2e:21:22:c4:86:92:99: 42:df:94:36:c7:bd:b9:32:aa:9a:a9:19:9a:10:08: 1c:85:62:bc:c2:dd:bb:9e:55:4d:c3:a4:24:64:bc: bd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:75:DE:A4:32:EF:3C:BC:FC:51:DD:AD:3A:EF:0F:71:E3:D1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2704bd5-d435-31b1-b4ab-b0c7aa93893a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d1:73:05:1d:72:ee:76:8a:5c:f7:08:b4:a5:dc:9c:bb:2f: ad:5f:ea:0d:16:9d:73:cb:8b:6d:2d:18:24:c7:5d:c9:cc:64: 3b:e8:84:b5:51:a9:c0:39:fe:0f:3c:5d:1a:e5:dc:04:64:69: 56:d5:e1:42:da:a3:24:1a:a9:c1:42:bf:62:93:32:0c:9d:fc: 37:ce:3d:f8:8d:6a:81:ae:64:c4:e7:05:ba:e0:4b:f9:10:3b: 42:43:50:de:ec:13:30:40:0d:14:89:1c:a0:2a:36:23:6d:f7: af:18:a8:98:d4:3b:e4:4c:3d:43:f1:dd:61:36:74:e6:66:30: ae:1d:3d:89:a4:91:0a:b9:a4:53:b4:e3:c8:04:29:b1:aa:2a: e2:39:6b:8e:67:dd:13:4c:09:00:23:36:28:b0:94:d5:fc:4e: ec:3a:f7:de:45:5b:1c:1f:0f:ec:bb:0a:d1:9e:b6:d2:9f:b8: ad:6c:79:f3:f4:48:b9:3c:1d:d3:7f:97:05:b6:bf:93:fd:52: f0:31:b5:7b:52:6d:2b:b4:66:98:93:9d:f9:ed:b7:00:79:0b: 40:20:bf:c3:9b:b0:66:3e:d8:95:f8:43:64:89:65:e1:29:32: 69:5a:fb:a9:f2:51:ed:d1:76:5e:08:e4:d8:23:0a:b3:2c:0a: 51:81:bd:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5f31iiQ18onODhn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk YTMxNTM4YTYtMDM5Ni00MGM3LTljMTctYmY3YzA4YjM3MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBFWt0k5XepCwIb3ugRiv8G4wQW7uxbbTuku IQp/3mTDsN0WJiSMmMyONH7d4UeTNdsaEkeCUV711UmW2u4pgZG5skEkkbWi42yR P2RP8pIUX6agGw0IfKR1ST3J965e5htU/gcHR5PRzWl/PlQ5wT6r1WUcGJw0hvHA +UMzMjuHJUAiQ+T9wMOlv5GbNm4ZdDWfQW3ohTTsv2iqNB0ieu634kAPlHDifqXy k6YcA7ooBb2otGwPOWYRByOhnz5cIhX2i+ddBgv/DNZIwLlcYuK7nLtWzLcUlS4h IsSGkplC35Q2x725MqqaqRmaEAgchWK8wt27nlVNw6QkZLy94QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdSdd6kMu88vPxR3a067w9x49FXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzI3MDRiZDUtZDQzNS0z MWIxLWI0YWItYjBjN2FhOTM4OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8v MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPRcwUdcu52ilz3CLSl3Jy7L61f6g0WnXPLi20tGCTHXcnMZDvo hLVRqcA5/g88XRrl3ARkaVbV4ULaoyQaqcFCv2KTMgyd/DfOPfiNaoGuZMTnBbrg S/kQO0JDUN7sEzBADRSJHKAqNiNt968YqJjUO+RMPUPx3WE2dOZmMK4dPYmkkQq5 pFO048gEKbGqKuI5a45n3RNMCQAjNiiwlNX8Tuw6995FWxwfD+y7CtGettKfuK1s efP0SLk8HdN/lwW2v5P9UvAxtXtSbSu0ZpiTnfnttwB5C0Agv8ObsGY+2JX4Q2SJ ZeEpMmla+6nyUe3Rdl4I5NgjCrMsClGBvbA= -----END CERTIFICATE-----Generated at Tue Jul 21 19:43:40 2026 by rpki-client