$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa File: 0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa (raw, json) Hash identifier: Qvr8NQYRIuXvP5xf99wabEpdp6Z+b0RrSipmWQ9q1fY= Subject key identifier: D7:E7:0C:15:74:88:BB:06:4B:21:E7:3B:70:F8:C2:AC:8B:30:58:29 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1B4BA9D8A02BD27D80DE0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b4:ba:9d:8a:02:bd:27:d8:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=3232ee3d-a56b-4962-98a8-4245eb10f8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:a6:9e:f0:86:27:95:d8:ce:04:87:92:e9: 91:11:1c:f4:fa:54:6f:8d:9f:0d:ce:d4:dd:ab:94: 57:85:58:2e:dc:0d:b2:7e:09:d2:8c:5a:9a:2b:74: 40:d0:a7:46:b2:c8:cb:08:1a:d3:d5:40:7a:0e:66: a5:71:23:a1:5d:44:95:a6:5d:3c:87:da:8a:b6:f2: 80:ff:f4:ab:1d:66:34:78:7b:08:05:f5:ff:9d:cf: d9:db:91:70:06:65:ae:52:66:e1:f4:d1:35:19:ac: 4a:67:95:6a:eb:09:33:da:f5:01:3f:0a:74:4e:30: f9:2f:3f:34:e2:5e:79:32:4b:c6:d7:f3:9f:2a:cb: a4:be:9c:66:88:b9:79:ee:65:b4:0c:8a:c7:c7:54: 4d:4c:e0:e2:51:3e:1b:cf:fb:4a:82:6f:b1:42:af: 87:48:d8:9c:5a:28:cb:4a:2e:e4:d0:21:9c:f0:1c: 4f:98:32:58:6d:e3:33:1f:c0:52:5e:7d:d3:86:a8: fa:d7:c6:f4:e3:9f:a5:46:45:a5:1a:96:81:0a:2e: 17:9c:ae:9f:07:e2:5c:46:b9:df:7f:83:47:52:06: 57:70:57:ed:f2:1d:f7:f1:24:83:6a:bd:00:aa:a1: 22:a9:08:a1:6d:15:85:4c:1b:c6:ea:cd:ab:19:04: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E7:0C:15:74:88:BB:06:4B:21:E7:3B:70:F8:C2:AC:8B:30:58:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:14:d9:92:bc:f0:43:4e:65:f6:1a:4c:5a:80:cf:e5:45:7a: 78:44:28:42:ea:65:79:6d:75:de:55:8c:19:f4:96:c9:96:80: 99:02:36:ca:2f:79:d7:52:58:95:aa:09:e4:a8:94:cc:33:de: 98:c0:41:83:f8:b5:2c:76:c8:4e:60:82:f3:4c:a9:af:9a:e8: 10:26:76:dd:a4:82:bd:1d:74:21:1c:3e:21:cb:f3:46:20:47: 22:1d:20:38:52:34:fa:a0:b1:2a:b6:c8:9f:5d:cc:48:5d:ba: 32:b4:0e:e8:a6:95:fa:88:e4:07:11:5e:4a:b5:cf:13:df:04: b8:09:96:bb:c8:e6:bc:87:12:e1:38:f3:cc:1f:2f:dd:c4:f1: 73:87:33:86:3c:d8:4c:68:e6:74:32:01:b9:ff:f3:97:42:25: 75:09:35:ef:e1:e6:6e:8d:04:3a:9d:cb:8a:56:0f:7c:5d:10: 3a:29:db:5d:37:69:f2:4e:ad:bf:da:b4:79:a0:38:18:39:91: 9e:79:57:b8:97:68:6b:7d:75:fd:87:4d:c0:83:2a:0e:3b:b1: f9:8a:a0:b4:4f:d3:9b:11:7d:ed:79:e8:1b:63:72:d5:f2:ac: 11:03:98:96:bf:70:82:ec:c6:49:ed:d0:fa:fa:6e:b3:10:71: 0a:7b:b8:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bS6nYoCvSfYDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzIzMmVlM2QtYTU2Yi00OTYyLTk4YTgtNDI0NWViMTBmOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbumnvCGJ5XYzgSHkumRERz0+lRvjZ8NztTd q5RXhVgu3A2yfgnSjFqaK3RA0KdGssjLCBrT1UB6DmalcSOhXUSVpl08h9qKtvKA //SrHWY0eHsIBfX/nc/Z25FwBmWuUmbh9NE1GaxKZ5Vq6wkz2vUBPwp0TjD5Lz80 4l55MkvG1/OfKsukvpxmiLl57mW0DIrHx1RNTODiUT4bz/tKgm+xQq+HSNicWijL Si7k0CGc8BxPmDJYbeMzH8BSXn3Thqj618b045+lRkWlGpaBCi4XnK6fB+JcRrnf f4NHUgZXcFft8h338SSDar0AqqEiqQihbRWFTBvG6s2rGQRZPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfnDBV0iLsGSyHnO3D4wqyLMFgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGU5ZmFkZjQtZjdiYy0z YWUwLTlkNjktOTE0NWZlMDRlMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQU2ZK88ENOZfYaTFqAz+VFenhEKELqZXltdd5VjBn0lsmWgJkC NsoveddSWJWqCeSolMwz3pjAQYP4tSx2yE5ggvNMqa+a6BAmdt2kgr0ddCEcPiHL 80YgRyIdIDhSNPqgsSq2yJ9dzEhdujK0DuimlfqI5AcRXkq1zxPfBLgJlrvI5ryH EuE488wfL93E8XOHM4Y82Exo5nQyAbn/85dCJXUJNe/h5m6NBDqdy4pWD3xdEDop 2103afJOrb/atHmgOBg5kZ55V7iXaGt9df2HTcCDKg47sfmKoLRP05sRfe156Btj ctXyrBEDmJa/cILsxknt0Pr6brMQcQp7uMQ= -----END CERTIFICATE-----Generated at Sat Oct 11 18:38:03 2025 by rpki-client