$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa File: 47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa (raw, json) Hash identifier: 1HiT+HpHIX7mVBIYf0X2ZO61ihIV3me3vIV1lLV7s2k= Subject key identifier: CB:B9:AD:65:D7:79:63:3A:F9:9C:EC:C4:23:F5:47:79:5B:74:95:06 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1B4A3529C679734AABF80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b4:a3:52:9c:67:97:34:aa:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=285c5a94-f7fa-4eeb-b200-6c98b66105fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:f7:ce:7b:76:3e:8e:a4:ab:82:89:d1:c0: 5e:f0:26:1b:b2:ac:4a:a9:f0:0b:be:d9:83:c0:13: ab:9a:e6:2b:10:2a:05:b8:4c:ac:e4:ba:e5:72:45: 6a:09:76:ec:9e:3f:01:f5:6f:a1:e4:5c:57:f4:6a: ac:f0:78:45:79:7e:14:64:99:3b:b5:13:b6:bb:07: 55:45:63:ba:4f:d2:cd:75:14:9a:d2:3d:0f:74:52: 2f:50:18:1f:d7:65:d2:54:a0:57:44:c9:28:2b:ef: ca:b9:76:a2:42:85:f9:9e:18:72:27:e6:9b:e6:6a: 06:73:de:0a:c0:8c:57:1a:15:bf:18:c1:40:f1:b0: 48:f3:45:7f:76:1c:bb:08:a4:13:cc:69:5d:c4:3b: 38:00:22:0b:ad:dc:66:df:d9:1c:10:4d:58:1e:e6: 2b:bb:15:cd:f4:1d:f7:8f:ac:93:f0:6f:a2:26:36: 7d:18:89:c5:c7:d7:cb:47:4f:1b:c6:27:6b:bd:16: 6a:32:03:59:4c:53:d1:be:b1:b4:c1:cd:94:c8:52: 48:73:79:27:90:a6:95:36:85:82:ec:8c:e3:6d:ec: 4e:21:1a:8a:34:54:f2:5f:bb:cc:a3:42:f3:d3:04: db:b6:e4:c1:46:44:da:17:87:22:20:dd:bb:b7:2a: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B9:AD:65:D7:79:63:3A:F9:9C:EC:C4:23:F5:47:79:5B:74:95:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:91:55:4c:50:42:3d:a2:0f:43:ac:55:e9:24:64:c8:36:ae: 86:ca:27:62:d6:37:6d:8f:66:51:74:a7:da:53:d3:2f:8d:bf: 8f:13:31:29:65:76:5c:c7:c6:49:e4:80:52:5a:8e:c7:0b:32: d1:30:c0:e5:76:37:36:e2:21:ef:65:fb:aa:20:17:d1:25:43: ca:d9:fb:08:17:bc:11:db:13:5c:c9:c6:c7:5b:7c:3a:5a:68: 6b:d1:e8:05:49:ec:3e:06:be:68:11:44:26:41:77:3a:0d:a3: fc:94:2c:da:c2:6f:df:d5:50:78:5f:50:b6:91:ed:48:2e:bb: 17:b3:80:a8:6b:fe:a6:be:01:0e:66:05:78:80:5a:1b:44:d0: 7c:72:6e:d7:ae:56:cb:87:dc:c1:85:55:5b:b4:db:a0:dc:59: 05:9e:c7:d3:49:e5:2b:3d:43:7f:49:9c:e9:c5:f0:a0:e2:c1: ef:51:0f:c2:98:b0:c2:1d:5f:bf:67:a2:ac:6f:e3:ef:cb:21: 3b:f7:81:37:c4:bb:5b:50:5f:a9:fc:0f:3e:75:09:e0:71:a1: 76:9e:9c:98:33:46:7c:e8:d3:62:c5:94:41:3f:74:c0:a9:fc: 9e:f7:7d:7e:6f:47:93:01:16:5d:1c:a6:84:c5:a5:5a:e4:66: 49:55:7a:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bSjUpxnlzSqv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Mjg1YzVhOTQtZjdmYS00ZWViLWIyMDAtNmM5OGI2NjEwNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGT3znt2Po6kq4KJ0cBe8CYbsqxKqfALvtmD wBOrmuYrECoFuEys5LrlckVqCXbsnj8B9W+h5FxX9Gqs8HhFeX4UZJk7tRO2uwdV RWO6T9LNdRSa0j0PdFIvUBgf12XSVKBXRMkoK+/KuXaiQoX5nhhyJ+ab5moGc94K wIxXGhW/GMFA8bBI80V/dhy7CKQTzGldxDs4ACILrdxm39kcEE1YHuYruxXN9B33 j6yT8G+iJjZ9GInFx9fLR08bxidrvRZqMgNZTFPRvrG0wc2UyFJIc3knkKaVNoWC 7IzjbexOIRqKNFTyX7vMo0Lz0wTbtuTBRkTaF4ciIN27tyqu9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMu5rWXXeWM6+ZzsxCP1R3lbdJUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdkNWUxM2EtMWI1Zi0z OWUyLTk2YjAtYWU1NzNkNTBlNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKRVUxQQj2iD0OsVekkZMg2robKJ2LWN22PZlF0p9pT0y+Nv48T MSlldlzHxknkgFJajscLMtEwwOV2NzbiIe9l+6ogF9ElQ8rZ+wgXvBHbE1zJxsdb fDpaaGvR6AVJ7D4GvmgRRCZBdzoNo/yULNrCb9/VUHhfULaR7UguuxezgKhr/qa+ AQ5mBXiAWhtE0HxybteuVsuH3MGFVVu026DcWQWex9NJ5Ss9Q39JnOnF8KDiwe9R D8KYsMIdX79noqxv4+/LITv3gTfEu1tQX6n8Dz51CeBxoXaenJgzRnzo02LFlEE/ dMCp/J73fX5vR5MBFl0cpoTFpVrkZklVekQ= -----END CERTIFICATE-----Generated at Sat Oct 11 18:38:54 2025 by rpki-client