$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4720fdb0-3c85-3654-9380-6dce3d5a1769.roa File: 4720fdb0-3c85-3654-9380-6dce3d5a1769.roa (raw, json) Hash identifier: 9tTtD7DHzulccwFlQ0r093+EdyyjmTHddKwX14Pp7JA= Subject key identifier: 78:33:11:E7:5C:EB:AC:4E:9D:33:63:48:BE:61:F0:B9:C2:A6:68:4B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B1806ED9A22B293FEE1551623 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4720fdb0-3c85-3654-9380-6dce3d5a1769.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 262287 IP address blocks: 2607:740:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ed:9a:22:b2:93:fe:e1:55:16:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=e47d75d5-c3ee-46e2-b093-fe70d08b8618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:86:06:84:1a:89:df:06:92:d9:0f:23:12: 52:1c:ce:a1:d4:42:4b:93:9e:0b:fd:b7:be:c1:67: 3b:41:cc:e4:80:d2:05:ac:ac:cd:7b:bc:eb:54:9e: 5d:44:f0:48:63:91:42:c8:8d:ea:69:fc:72:23:f9: 6a:65:a8:e3:22:99:b0:c0:60:ce:a2:c2:1e:9f:12: ae:4f:83:9f:df:79:96:25:8a:90:61:69:2f:b1:2c: 00:7d:33:87:e0:a1:b6:e8:cd:f7:3c:c9:fb:8f:63: 20:90:ae:9c:7d:c4:2a:9a:e3:53:f3:89:38:ea:c1: 53:83:85:f9:7c:bf:c4:d0:4d:93:23:6d:76:9d:d9: 8f:42:c9:08:c3:19:21:c3:bc:ee:b1:f4:48:fe:08: 2c:96:a7:b2:d0:16:ab:36:2d:38:ed:76:6f:76:6d: 07:d8:72:85:98:13:2b:31:cc:e0:ee:a0:7b:a5:8d: 53:c5:5e:37:86:f8:1b:95:c3:26:02:b0:67:4b:85: cb:38:94:56:35:09:1b:00:32:ab:4d:f8:0c:8e:39: a0:65:0a:b4:eb:b3:44:04:51:f4:7c:30:fe:69:09: 25:71:e3:f5:41:42:69:a4:a1:82:bb:d3:66:44:14: 38:87:fd:f8:40:fb:ec:c9:20:0b:0f:2d:da:9b:19: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:33:11:E7:5C:EB:AC:4E:9D:33:63:48:BE:61:F0:B9:C2:A6:68:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4720fdb0-3c85-3654-9380-6dce3d5a1769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:63::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:18:ca:92:fd:68:55:59:03:06:09:68:d0:b3:fa:e1:2f:05: 41:9c:e2:b7:b0:35:65:a1:b7:c3:f0:0f:4b:74:ff:57:bb:d0: bc:35:33:35:49:0d:5a:72:8c:36:12:d7:75:d4:86:5e:ac:a2: fd:ef:8d:e1:c6:a1:15:69:9b:67:1e:28:5b:23:5b:5b:c2:59: 38:4e:8e:45:00:89:49:76:0b:4e:49:59:0f:1a:a3:0e:fb:eb: b4:ab:9e:31:e7:e7:f8:34:3b:bf:84:4a:8d:c2:e8:a3:dd:89: b8:35:c1:9e:a0:b7:0f:2f:eb:e9:26:22:0b:95:e4:95:0b:72: 70:3e:4c:2c:5d:cd:d9:ae:70:40:de:15:9e:e2:e2:5a:9c:2b: d9:67:41:76:6a:46:f8:69:26:2b:1e:b7:f7:98:a6:c1:d8:24: c2:b7:ee:46:a3:d9:ac:3c:2a:c7:82:32:93:80:61:d0:e5:67: cd:e8:60:ee:17:23:32:0e:5f:15:50:a4:72:e5:8f:11:72:87: 06:7c:28:10:69:f4:47:77:96:e6:33:61:f1:17:cb:44:24:8f: 41:80:2c:77:6b:d6:7b:7b:c0:4a:f7:21:6a:e9:0a:e8:6d:c1: 79:17:39:79:e0:2f:65:ba:3f:bb:f2:1e:ce:3e:f2:1e:63:95: ce:c0:c8:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBu2aIrKT/uFVFiMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTQ3ZDc1ZDUtYzNlZS00NmUyLWIwOTMtZmU3MGQwOGI4NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdaGBoQaid8GktkPIxJSHM6h1EJLk54L/be+ wWc7QczkgNIFrKzNe7zrVJ5dRPBIY5FCyI3qafxyI/lqZajjIpmwwGDOosIenxKu T4Of33mWJYqQYWkvsSwAfTOH4KG26M33PMn7j2MgkK6cfcQqmuNT84k46sFTg4X5 fL/E0E2TI212ndmPQskIwxkhw7zusfRI/ggslqey0BarNi047XZvdm0H2HKFmBMr Mczg7qB7pY1TxV43hvgblcMmArBnS4XLOJRWNQkbADKrTfgMjjmgZQq067NEBFH0 fDD+aQklceP1QUJppKGCu9NmRBQ4h/34QPvsySALDy3amxld7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHgzEedc66xOnTNjSL5h8LnCpmhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDcyMGZkYjAtM2M4NS0z NjU0LTkzODAtNmRjZTNkNWExNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUYypL9aFVZAwYJaNCz+uEvBUGc4rewNWWht8PwD0t0/1e70Lw1 MzVJDVpyjDYS13XUhl6sov3vjeHGoRVpm2ceKFsjW1vCWThOjkUAiUl2C05JWQ8a ow7767SrnjHn5/g0O7+ESo3C6KPdibg1wZ6gtw8v6+kmIguV5JULcnA+TCxdzdmu cEDeFZ7i4lqcK9lnQXZqRvhpJiset/eYpsHYJMK37kaj2aw8KseCMpOAYdDlZ83o YO4XIzIOXxVQpHLljxFyhwZ8KBBp9Ed3luYzYfEXy0Qkj0GALHdr1nt7wEr3IWrp CuhtwXkXOXngL2W6P7vyHs4+8h5jlc7AyCE= -----END CERTIFICATE-----Generated at Sat Oct 11 18:42:57 2025 by rpki-client