$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa File: 909e0677-e107-3f90-b3d6-d289381c03ee.roa (raw, json) Hash identifier: 3HoxoALp/dy6A83mqx+iKVeO23PxTDvtxAm31IdGKf4= Subject key identifier: B8:C3:FD:DB:75:2C:4D:6F:F0:D5:74:25:78:F1:6B:34:DA:AA:A9:C3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1B48DA452C5757631B240 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b4:8d:a4:52:c5:75:76:31:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=efa0ec0a-75ad-46d6-806c-1a983f6b0c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:9b:29:dd:09:97:13:15:f8:74:7a:5e:cc: 9b:eb:03:f1:9d:50:6c:55:b2:af:08:2d:83:08:9f: 8c:17:98:98:eb:90:a6:0c:c2:ab:a2:46:70:d3:45: 4c:f5:de:18:cf:99:fc:bf:d0:30:56:de:34:79:2e: 11:45:a9:9d:cb:6a:9f:23:6c:52:a7:57:bd:3b:ab: 2b:0b:b0:2d:50:23:b8:9b:4b:13:ad:db:e1:c6:a7: d8:c4:98:8a:76:d1:43:c6:6e:32:54:43:b8:de:60: a9:d5:5a:db:3e:e6:29:89:a7:e3:36:d0:5c:de:6c: 6a:3a:2e:0e:86:89:75:d4:23:51:a5:37:51:ab:5f: 7d:5c:81:3a:d9:45:f5:cd:9c:6c:22:98:08:cf:1d: bc:00:ed:80:67:1c:f8:1d:1f:3f:df:61:3b:60:9f: 47:6d:f6:63:2f:4b:01:e4:ce:e3:23:52:3d:2f:d9: 05:77:c0:cb:6f:46:93:ee:04:43:3e:3d:d2:f4:52: cb:3f:85:e5:5f:8e:83:7e:bd:5c:de:67:2d:6a:34: 87:29:98:93:9d:98:53:44:ab:77:00:00:88:87:c6: da:dd:79:c2:61:92:c2:d5:3a:96:e2:a3:e4:20:92: b3:29:0f:a5:d3:87:53:2b:ee:b0:68:99:07:86:e0: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C3:FD:DB:75:2C:4D:6F:F0:D5:74:25:78:F1:6B:34:DA:AA:A9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:15:35:3e:db:26:2b:48:c6:68:12:69:74:99:3a:58:48:7b: 11:40:67:11:68:b8:a3:49:86:0e:f1:b7:30:68:9d:15:15:83: a7:39:60:58:ee:ea:98:ae:5f:79:b7:35:ec:c3:78:35:c1:c1: 6b:5d:dc:ae:0b:ea:7a:06:19:e2:f2:de:88:92:4f:f7:71:fd: 0f:97:01:e7:32:e8:e6:fe:ed:b5:77:c6:b2:88:b4:a3:11:f0: 53:df:1d:24:9b:1b:50:ac:dd:13:ad:95:78:46:d9:e8:ad:47: 64:b6:44:38:43:78:81:72:bb:05:29:0f:89:78:74:dc:c2:e1: 77:f6:90:c5:f8:93:04:a0:5f:72:0f:28:32:ac:ca:96:25:bf: 81:8c:b3:82:9e:b3:dc:04:56:b0:64:d6:db:2c:48:6f:c9:98: db:72:6a:00:75:e2:7f:dc:83:da:ba:2e:ce:42:c7:e1:e5:c9: 7b:5e:bc:bc:55:bf:65:c2:ea:fb:5d:59:08:f6:c4:f9:e6:a3: 4f:2f:38:39:0e:47:9e:1c:01:4c:6c:dd:2c:8e:bd:46:98:5a: 22:e7:47:7d:89:86:51:1b:12:2a:75:0b:ed:36:6c:9c:ba:7b: 0e:62:19:7e:5b:61:c3:c9:eb:a8:c5:7b:04:42:30:f6:40:dd: 2a:65:32:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bSNpFLFdXYxskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWZhMGVjMGEtNzVhZC00NmQ2LTgwNmMtMWE5ODNmNmIwYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ+bKd0JlxMV+HR6Xsyb6wPxnVBsVbKvCC2D CJ+MF5iY65CmDMKrokZw00VM9d4Yz5n8v9AwVt40eS4RRamdy2qfI2xSp1e9O6sr C7AtUCO4m0sTrdvhxqfYxJiKdtFDxm4yVEO43mCp1VrbPuYpiafjNtBc3mxqOi4O hol11CNRpTdRq199XIE62UX1zZxsIpgIzx28AO2AZxz4HR8/32E7YJ9HbfZjL0sB 5M7jI1I9L9kFd8DLb0aT7gRDPj3S9FLLP4XlX46Dfr1c3mctajSHKZiTnZhTRKt3 AACIh8ba3XnCYZLC1TqW4qPkIJKzKQ+l04dTK+6waJkHhuCztwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLjD/dt1LE1v8NV0JXjxazTaqqnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTA5ZTA2NzctZTEwNy0z ZjkwLWIzZDYtZDI4OTM4MWMwM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMVNT7bJitIxmgSaXSZOlhIexFAZxFouKNJhg7xtzBonRUVg6c5 YFju6piuX3m3NezDeDXBwWtd3K4L6noGGeLy3oiST/dx/Q+XAecy6Ob+7bV3xrKI tKMR8FPfHSSbG1Cs3ROtlXhG2eitR2S2RDhDeIFyuwUpD4l4dNzC4Xf2kMX4kwSg X3IPKDKsypYlv4GMs4Kes9wEVrBk1tssSG/JmNtyagB14n/cg9q6Ls5Cx+HlyXte vLxVv2XC6vtdWQj2xPnmo08vODkOR54cAUxs3SyOvUaYWiLnR32JhlEbEip1C+02 bJy6ew5iGX5bYcPJ66jFewRCMPZA3SplMk4= -----END CERTIFICATE-----Generated at Sat Oct 11 18:42:57 2025 by rpki-client