$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/043b390b-fe8f-3900-907b-aae441f72174.roa File: 043b390b-fe8f-3900-907b-aae441f72174.roa (raw, json) Hash identifier: SKArBMDMFiTbjQsBwCYbaWXCcXWA3aetCGgrlW5daKE= Subject key identifier: 04:EC:82:95:58:B3:96:32:BB:DF:3D:EC:33:D7:C5:88:EB:D8:2C:30 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D4B61DEC55360EDF62F7A23A0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/043b390b-fe8f-3900-907b-aae441f72174.roa Signing time: Thu 26 Mar 2026 08:04:24 +0000 ROA not before: Thu 26 Mar 2026 08:04:24 +0000 ROA not after: Wed 24 Jun 2026 08:04:24 +0000 asID: 54994 IP address blocks: 2607:3f40:ff43::/48 maxlen: 48 2607:3f40:ff44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:61:de:c5:53:60:ed:f6:2f:7a:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 26 08:04:24 2026 GMT Not After : Jun 24 08:04:24 2026 GMT Subject: CN=d3e52f9e-5889-4d54-add8-539670c23ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:d2:fc:0e:1f:41:2a:24:62:44:61:4e:8e: 81:04:c1:42:51:71:14:1e:f8:df:29:d3:7f:53:e6: ed:69:3f:23:13:6e:f5:ac:d5:fb:3c:f2:81:09:7d: c4:09:28:04:04:27:ae:da:8f:5a:a2:b7:bd:1d:2d: 93:9f:49:42:02:01:c0:83:1f:71:ea:fb:9a:09:fa: 67:0b:f7:eb:7c:fd:c0:b7:55:2b:0e:aa:bf:78:eb: cf:94:88:4f:b5:cf:df:aa:aa:00:e0:73:4c:b0:a7: 0d:ee:f9:b7:ee:58:29:74:af:a5:c8:b4:f0:a3:56: 12:3d:fd:d9:7a:ef:cf:7c:98:04:69:a8:b8:5d:98: 69:f0:62:c0:5f:9f:e2:b3:e0:b4:1f:a7:ad:9c:98: 0b:af:03:bf:37:96:bf:98:17:91:d9:ff:f8:35:a7: 58:02:f1:b8:71:b8:72:29:3e:8f:31:3b:58:60:11: 60:20:32:b5:c0:e4:ab:6a:fe:88:0c:0d:95:b4:87: c3:7e:cb:2a:63:2e:8f:cd:3e:46:11:db:7c:4f:e5: e4:4e:fd:14:93:f2:9c:c5:de:14:68:83:65:c4:56: bd:50:eb:82:e9:84:9f:6e:23:ea:45:0e:b8:64:ac: 34:0b:95:08:05:33:0a:9f:25:83:59:9d:d9:7e:44: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:82:95:58:B3:96:32:BB:DF:3D:EC:33:D7:C5:88:EB:D8:2C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/043b390b-fe8f-3900-907b-aae441f72174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff43::-2607:3f40:ff44:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:73:b4:82:f7:b6:f6:b3:4f:9a:a6:19:b6:05:fc:78:d2:e2: 68:fe:a1:61:43:69:44:bf:43:38:45:f2:cc:a5:b3:e3:24:2d: f8:c6:86:4e:d0:b1:78:a6:d6:91:93:2e:92:c7:54:78:e8:4f: 40:a4:2b:f9:1e:04:18:6c:f7:57:a6:ff:9e:24:35:8b:99:8b: 3f:11:f0:55:77:08:15:4a:e9:a3:44:75:47:d4:7b:ea:f1:99: 73:ed:c4:cb:69:07:95:56:0a:86:56:74:56:4e:a5:92:b9:5a: b4:8b:d3:60:df:61:8d:47:6a:5d:79:f4:37:4a:a5:12:7d:e1: 44:71:8c:23:ff:48:de:14:ad:4a:41:6a:72:13:c8:16:7e:e8: 50:35:57:aa:1d:71:dd:a8:78:49:dc:5e:7c:89:64:fd:69:8d: 4c:ff:ee:57:30:73:0d:ae:ba:07:de:82:8b:11:6a:79:de:4e: 4a:87:10:de:33:b5:63:34:3c:f5:ea:b3:88:38:b4:47:cc:ed: 6d:ff:e3:bd:1f:65:11:47:a8:5a:93:14:30:50:84:43:f1:54: 1d:3d:b0:18:7f:13:07:39:eb:b9:5f:14:d9:7a:df:97:8d:62: 42:f0:26:73:c8:2e:71:26:f5:07:ee:51:d5:6b:9a:ac:78:a4: 56:50:4b:7e -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE1LYd7FU2Dt9i96I6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMyNjA4MDQyNFoXDTI2MDYyNDA4MDQyNFowLzEtMCsGA1UEAxMk ZDNlNTJmOWUtNTg4OS00ZDU0LWFkZDgtNTM5NjcwYzIzZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztLS/A4fQSokYkRhTo6BBMFCUXEUHvjfKdN/ U+btaT8jE271rNX7PPKBCX3ECSgEBCeu2o9aore9HS2Tn0lCAgHAgx9x6vuaCfpn C/frfP3At1UrDqq/eOvPlIhPtc/fqqoA4HNMsKcN7vm37lgpdK+lyLTwo1YSPf3Z eu/PfJgEaai4XZhp8GLAX5/is+C0H6etnJgLrwO/N5a/mBeR2f/4NadYAvG4cbhy KT6PMTtYYBFgIDK1wOSrav6IDA2VtIfDfssqYy6PzT5GEdt8T+XkTv0Uk/Kcxd4U aINlxFa9UOuC6YSfbiPqRQ64ZKw0C5UIBTMKnyWDWZ3ZfkTFEwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFATsgpVYs5Yyu9897DPXxYjr2CwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMDQzYjM5MGItZmU4Zi0z OTAwLTkwN2ItYWFlNDQxZjcyMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBz9A /0MDBwAmBz9A/0QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAKnO0gve29rNPmqYZtgX8eNLiaP6hYUNpRL9D OEXyzKWz4yQt+MaGTtCxeKbWkZMuksdUeOhPQKQr+R4EGGz3V6b/niQ1i5mLPxHw VXcIFUrpo0R1R9R76vGZc+3Ey2kHlVYKhlZ0Vk6lkrlatIvTYN9hjUdqXXn0N0ql En3hRHGMI/9I3hStSkFqchPIFn7oUDVXqh1x3ah4SdxefIlk/WmNTP/uVzBzDa66 B96CixFqed5OSocQ3jO1YzQ89eqziDi0R8ztbf/jvR9lEUeoWpMUMFCEQ/FUHT2w GH8TBznruV8U2Xrfl41iQvAmc8gucSb1B+5R1WuarHikVlBLfg== -----END CERTIFICATE-----Generated at Tue Apr 7 07:55:12 2026 by rpki-client