$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa File: 5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa (raw, json) Hash identifier: BbDyuJCRyOOT8DotRwdy6VS83+0Vz+nuTjdOEN4xOWE= Subject key identifier: 3E:50:4D:80:B8:FA:53:21:09:A8:D8:C6:14:D5:D4:91:08:CF:E1:2B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1B47AA5F64FCA1B5DDC80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b4:7a:a5:f6:4f:ca:1b:5d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=6b6062d6-decc-4a6b-9e1f-6bafe1290b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:48:9d:d3:5e:a0:28:42:ba:ab:7b:75:b9: e3:3a:2c:95:86:0a:b7:58:e4:d3:35:74:8a:6f:6a: 69:04:70:5a:23:22:11:21:2b:9b:34:c4:a8:b5:69: 32:80:e0:b6:41:d1:54:58:88:9b:3f:8b:d4:16:0c: 46:20:2c:a9:92:99:dd:9d:e7:4a:87:7f:3c:ba:0b: cc:55:81:29:d0:da:0f:99:2f:0c:10:89:04:36:81: ea:b6:d4:f5:77:d0:4c:3e:ad:6f:76:45:8f:3e:49: 83:34:e9:5c:45:43:2a:f4:5c:04:11:d0:99:ce:fa: f5:a1:23:48:64:18:d3:fc:d5:88:b1:28:3d:04:b0: 5c:d2:bc:25:cf:84:5d:7a:47:06:07:32:96:12:e9: 92:97:b5:14:5e:e9:20:3e:b5:63:c3:f9:0f:00:55: fd:21:04:ab:2e:ad:ca:00:b4:23:f7:5f:f4:c4:4f: 4e:2b:94:01:5a:3a:7b:fd:b1:c2:92:f8:80:ea:95: 1b:e4:0a:87:ea:c2:d1:b3:5b:09:e6:18:6d:67:28: 85:f1:e1:f8:4b:42:59:09:39:22:f0:57:71:d5:52: 88:30:e5:85:a3:4e:85:fd:74:0e:81:6d:1a:49:06: 09:ba:a2:e6:f3:84:fb:dd:c1:44:db:9b:9e:16:da: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:50:4D:80:B8:FA:53:21:09:A8:D8:C6:14:D5:D4:91:08:CF:E1:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2e:55:d9:b0:3f:45:51:fc:e7:a4:ea:c4:35:e1:eb:f6:f9: bd:c6:8c:78:76:71:03:39:b7:70:0d:8e:b5:58:90:59:fa:83: 18:12:c1:af:fc:25:68:ce:15:6b:bc:b1:88:bc:5c:95:99:a5: bf:19:17:6d:d4:69:aa:32:f7:8d:ee:c5:ab:d1:1a:83:84:35: 5d:02:e2:e0:b8:2b:5d:5b:90:90:e4:e6:47:3c:7b:05:d9:85: 64:a7:0c:59:de:ed:af:0f:36:d3:35:71:15:ed:9c:47:56:c0: df:9e:55:52:ec:33:6c:02:cc:ad:ba:ef:9b:6b:f3:d3:03:8f: 00:e5:a8:84:47:eb:69:e2:cb:5a:9e:9e:c5:99:81:01:25:50: c9:b6:35:22:d3:eb:60:86:27:c8:eb:e6:d0:76:14:1e:74:13: b6:64:ac:b2:8f:54:a0:01:53:dc:6b:77:75:6c:69:22:45:2e: af:c9:8c:a8:52:c8:e5:77:a5:f8:16:45:c3:d3:db:7e:5b:f5: d3:cd:c8:ce:92:bc:b5:0a:5e:76:48:6d:c6:1e:4d:62:36:6a: 9b:81:f0:40:c8:0f:2c:08:29:6f:75:45:65:20:a7:c3:03:c5: d9:8d:cf:53:4f:4e:5f:d0:6d:68:fa:5d:7d:5b:10:ab:a3:65: 0a:b1:ec:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bR6pfZPyhtd3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NmI2MDYyZDYtZGVjYy00YTZiLTllMWYtNmJhZmUxMjkwYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE1IndNeoChCuqt7dbnjOiyVhgq3WOTTNXSK b2ppBHBaIyIRISubNMSotWkygOC2QdFUWIibP4vUFgxGICypkpndnedKh388ugvM VYEp0NoPmS8MEIkENoHqttT1d9BMPq1vdkWPPkmDNOlcRUMq9FwEEdCZzvr1oSNI ZBjT/NWIsSg9BLBc0rwlz4RdekcGBzKWEumSl7UUXukgPrVjw/kPAFX9IQSrLq3K ALQj91/0xE9OK5QBWjp7/bHCkviA6pUb5AqH6sLRs1sJ5hhtZyiF8eH4S0JZCTki 8Fdx1VKIMOWFo06F/XQOgW0aSQYJuqLm84T73cFE25ueFtqfFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5QTYC4+lMhCajYxhTV1JEIz+ErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTMzN2IxMzgtMGZlOS0z YjZkLWFlMjEtNWZmNmZmNDQ3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsuVdmwP0VR/Oek6sQ14ev2+b3GjHh2cQM5t3ANjrVYkFn6gxgS wa/8JWjOFWu8sYi8XJWZpb8ZF23Uaaoy943uxavRGoOENV0C4uC4K11bkJDk5kc8 ewXZhWSnDFne7a8PNtM1cRXtnEdWwN+eVVLsM2wCzK2675tr89MDjwDlqIRH62ni y1qensWZgQElUMm2NSLT62CGJ8jr5tB2FB50E7ZkrLKPVKABU9xrd3VsaSJFLq/J jKhSyOV3pfgWRcPT235b9dPNyM6SvLUKXnZIbcYeTWI2apuB8EDIDywIKW91RWUg p8MDxdmNz1NPTl/QbWj6XX1bEKujZQqx7Cc= -----END CERTIFICATE-----Generated at Sat Oct 11 18:40:43 2025 by rpki-client