$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/81124fe6-8868-3b33-81c8-e7094bbfe628.roa File: 81124fe6-8868-3b33-81c8-e7094bbfe628.roa (raw, json) Hash identifier: rCI2HHI9M0evsVgfpNMQGSvyS6uE0zDP8PY7RmAjfKg= Subject key identifier: D7:30:02:66:86:8A:D0:E4:AC:00:32:A9:AF:5E:56:0C:7B:88:5D:D7 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B1F6BFAA5ADDFBB5EC173B580 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/81124fe6-8868-3b33-81c8-e7094bbfe628.roa Signing time: Mon 08 Sep 2025 04:35:19 +0000 ROA not before: Mon 08 Sep 2025 04:35:19 +0000 ROA not after: Sun 07 Dec 2025 05:35:19 +0000 asID: 212238 IP address blocks: 2607:740:17f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:6b:fa:a5:ad:df:bb:5e:c1:73:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 8 04:35:19 2025 GMT Not After : Dec 7 05:35:19 2025 GMT Subject: CN=4d6b605a-0906-4e9d-a2e5-3dafdb060674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:d4:57:e6:c9:88:eb:1a:4c:1b:48:45:7e: e8:0d:bb:c4:46:f0:43:59:c2:9c:35:2e:66:d8:57: e4:25:86:5d:79:02:ce:73:ec:7b:53:c4:31:35:81: 8c:d8:3c:eb:1e:0f:9e:20:49:79:90:fb:7d:fb:69: 15:be:0f:aa:a8:08:03:23:01:f6:af:2d:71:59:52: 61:98:0e:f6:cc:f2:73:94:8b:0a:b4:67:64:8b:58: b4:77:a5:2a:68:f5:a4:d4:fd:c0:7a:cb:27:10:a0: 6d:c3:e6:11:1c:80:42:7a:75:23:05:04:7e:fa:68: 31:dc:2b:f3:f1:6d:b7:53:42:80:49:61:55:0a:ee: 0e:ad:e4:0a:1e:18:c5:56:b4:4b:10:46:79:52:a0: 0d:7a:b1:1f:f8:15:18:6c:2c:df:93:e0:2c:17:38: 38:f8:27:0e:98:8b:a6:ce:e4:9b:df:2c:0e:ea:a6: 9e:83:26:ac:b5:3d:ff:23:b4:57:85:70:62:83:68: 6e:20:f2:fe:81:09:e3:ae:b7:f8:53:9b:d4:06:57: 3b:94:41:b8:c6:92:b6:0c:43:6d:47:a8:49:30:fc: 4c:0d:84:81:51:b8:d9:7f:fa:f9:10:d7:36:b8:54: a8:84:4b:a0:3f:cd:72:35:06:11:d1:35:b5:7e:a3: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:30:02:66:86:8A:D0:E4:AC:00:32:A9:AF:5E:56:0C:7B:88:5D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/81124fe6-8868-3b33-81c8-e7094bbfe628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:17f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5a:42:04:79:5e:b5:2f:f6:d8:ea:30:46:79:dd:75:ed:ef: 47:e4:d6:f6:7e:44:73:39:4a:3a:47:38:d9:06:6e:85:09:af: 4b:27:05:04:14:0a:6f:5e:26:bd:62:31:64:52:96:79:f2:af: 6c:7e:43:d6:3c:7e:e6:c1:6a:b0:66:d1:34:11:26:f9:17:0a: d0:e0:c3:cb:e4:67:66:68:c1:0a:2b:3c:ad:a9:c3:54:aa:c1: 04:a2:0e:4c:c4:5c:5f:91:6e:95:65:94:b4:53:ba:ec:f7:19: a2:a7:80:99:c9:d4:25:1c:03:45:0e:e3:26:2b:a8:8c:08:d0: bc:c9:3b:a7:97:92:a1:b9:c3:71:c6:da:32:a9:98:fa:b9:9b: b0:63:46:0b:67:b4:25:c7:6f:89:51:dc:b6:72:7a:3e:85:7f: 2e:06:ef:82:23:29:6d:76:9e:cf:ad:44:8e:08:4c:b5:31:97: b9:7a:e5:ef:ae:3c:c9:fc:5d:76:0f:bc:9a:f4:f4:0c:42:0e: de:f5:66:a1:9c:3f:be:bf:7a:06:31:d3:e9:e5:17:4d:ff:7e: 3e:ba:77:78:c1:83:08:e2:ca:36:08:e0:df:65:2e:ee:1e:bb: 4f:5d:db:3b:b9:26:67:de:73:49:fc:32:4a:a0:99:f8:76:0d: a7:eb:d3:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfa/qlrd+7XsFztYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwODA0MzUxOVoXDTI1MTIwNzA1MzUxOVowLzEtMCsGA1UEAxMk NGQ2YjYwNWEtMDkwNi00ZTlkLWEyZTUtM2RhZmRiMDYwNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ALUV+bJiOsaTBtIRX7oDbvERvBDWcKcNS5m 2FfkJYZdeQLOc+x7U8QxNYGM2DzrHg+eIEl5kPt9+2kVvg+qqAgDIwH2ry1xWVJh mA72zPJzlIsKtGdki1i0d6UqaPWk1P3AessnEKBtw+YRHIBCenUjBQR++mgx3Cvz 8W23U0KASWFVCu4OreQKHhjFVrRLEEZ5UqANerEf+BUYbCzfk+AsFzg4+CcOmIum zuSb3ywO6qaegyastT3/I7RXhXBig2huIPL+gQnjrrf4U5vUBlc7lEG4xpK2DENt R6hJMPxMDYSBUbjZf/r5ENc2uFSohEugP81yNQYR0TW1fqOzowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNcwAmaGitDkrAAyqa9eVgx7iF3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvODExMjRmZTYtODg2OC0z YjMzLTgxYzgtZTcwOTRiYmZlNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAF/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhaQgR5XrUv9tjqMEZ53XXt70fk1vZ+RHM5SjpHONkGboUJr0sn BQQUCm9eJr1iMWRSlnnyr2x+Q9Y8fubBarBm0TQRJvkXCtDgw8vkZ2ZowQorPK2p w1SqwQSiDkzEXF+RbpVllLRTuuz3GaKngJnJ1CUcA0UO4yYrqIwI0LzJO6eXkqG5 w3HG2jKpmPq5m7BjRgtntCXHb4lR3LZyej6Ffy4G74IjKW12ns+tRI4ITLUxl7l6 5e+uPMn8XXYPvJr09AxCDt71ZqGcP76/egYx0+nlF03/fj66d3jBgwjiyjYI4N9l Lu4eu09d2zu5Jmfec0n8Mkqgmfh2Dafr0xg= -----END CERTIFICATE-----Generated at Sat Oct 11 18:44:24 2025 by rpki-client