$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa File: 982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa (raw, json) Hash identifier: fWT1GjqqwDBS1mHmhwJf9H5hAwPLSTemRItb6jVHdtg= Subject key identifier: CB:76:8A:4E:11:B4:A3:F2:75:87:EA:C7:75:86:A1:36:B1:BD:0D:AA Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1B466A224C544F17ADB80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b4:66:a2:24:c5:44:f1:7a:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=46a6b6e1-d6f6-4f0f-9822-3e67e7f64ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:f9:1a:87:cc:f4:6e:3c:d4:4c:cf:d0:67: 2c:8e:ac:89:db:5a:29:55:0e:e9:87:45:4c:4b:01: 74:d9:42:cd:ec:1d:89:12:be:13:3e:52:2f:a2:c3: 62:26:2a:87:85:b3:9d:39:8e:cf:95:c8:36:75:27: 51:92:d2:30:91:41:ce:f5:60:5a:3c:29:e3:b1:60: 3e:ae:4d:02:0c:cd:44:8a:63:fe:9f:a6:01:32:da: af:ee:ce:cd:cd:89:9b:37:a8:3b:dc:36:65:b7:d7: 03:eb:4c:5d:f5:44:16:cf:a6:fc:ad:8d:41:0e:bd: eb:65:41:61:63:c4:24:75:6a:8d:52:42:4e:db:97: b8:16:d7:90:ef:7d:1c:a2:74:ac:84:81:3c:4b:72: cd:9d:30:4d:32:5d:c6:6c:14:00:a1:2b:d9:0f:64: 64:b7:fc:ac:35:42:d3:bb:dc:1b:7e:54:29:dd:16: bd:1a:21:b3:98:95:ec:60:c1:be:79:93:a0:5a:94: 54:9b:15:08:f3:d6:b4:63:29:07:c7:56:9d:c2:ff: 94:1b:df:8a:ca:9b:cc:b5:c3:a3:de:e5:a1:9d:b7: 30:fc:8e:1b:49:56:61:64:ca:ac:45:88:85:1e:be: a3:dd:82:41:bf:0f:92:8a:e4:ce:8a:a7:04:a4:23: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:76:8A:4E:11:B4:A3:F2:75:87:EA:C7:75:86:A1:36:B1:BD:0D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:95:6e:a3:1f:ba:2d:ce:ff:1d:09:10:71:53:2a:c2:3c:fa: be:c2:cf:75:92:75:c0:91:dc:ec:dd:5b:ce:6c:73:16:8a:3d: d4:2a:06:c7:e0:b3:73:60:ac:34:31:f9:06:db:17:6b:73:c5: fd:6e:20:ce:dc:29:94:3f:28:ed:bf:1a:cc:f3:ad:12:cc:a7: 16:9f:ca:c8:e0:e0:51:d0:39:3d:e2:cc:b4:8d:ac:9f:fd:c2: b0:00:3d:72:0d:25:66:bb:38:32:0b:d8:5b:f2:b5:3a:bb:63: 09:b5:6d:3b:97:67:b5:14:03:e7:f5:5f:d6:33:82:04:51:7b: 8b:99:0c:76:e7:bc:dc:e2:c9:4c:ca:5c:df:a4:3f:4b:94:9f: 52:22:e6:04:66:9f:44:26:cf:5a:88:b6:56:33:2e:da:6e:78: 8a:3b:e3:5f:f6:e4:98:8f:1d:fc:3c:c5:d6:0d:e3:80:a5:76: c1:26:12:89:f2:f8:49:47:22:3b:db:96:a9:1e:e9:ff:0c:df: 70:62:5f:b8:74:be:21:12:b2:22:17:46:95:be:2b:90:d6:e0: be:89:1f:bc:2f:15:dc:6f:fb:fb:99:32:36:54:ad:91:de:8f: e6:86:11:d6:58:47:18:87:44:28:8a:b3:f8:d2:33:1d:86:6d: 0d:05:12:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bRmoiTFRPF624AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDZhNmI2ZTEtZDZmNi00ZjBmLTk4MjItM2U2N2U3ZjY0ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYf5GofM9G481EzP0GcsjqyJ21opVQ7ph0VM SwF02ULN7B2JEr4TPlIvosNiJiqHhbOdOY7Plcg2dSdRktIwkUHO9WBaPCnjsWA+ rk0CDM1EimP+n6YBMtqv7s7NzYmbN6g73DZlt9cD60xd9UQWz6b8rY1BDr3rZUFh Y8QkdWqNUkJO25e4FteQ730conSshIE8S3LNnTBNMl3GbBQAoSvZD2Rkt/ysNULT u9wbflQp3Ra9GiGzmJXsYMG+eZOgWpRUmxUI89a0YykHx1adwv+UG9+KypvMtcOj 3uWhnbcw/I4bSVZhZMqsRYiFHr6j3YJBvw+SiuTOiqcEpCMkgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMt2ik4RtKPydYfqx3WGoTaxvQ2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTgyYzU3OTUtZmU5My0z ZWJiLTkzYWMtNGQ2NmNjYmExMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACSVbqMfui3O/x0JEHFTKsI8+r7Cz3WSdcCR3OzdW85scxaKPdQq Bsfgs3NgrDQx+QbbF2tzxf1uIM7cKZQ/KO2/GszzrRLMpxafysjg4FHQOT3izLSN rJ/9wrAAPXINJWa7ODIL2FvytTq7Ywm1bTuXZ7UUA+f1X9YzggRRe4uZDHbnvNzi yUzKXN+kP0uUn1Ii5gRmn0Qmz1qItlYzLtpueIo741/25JiPHfw8xdYN44CldsEm Eony+ElHIjvblqke6f8M33BiX7h0viESsiIXRpW+K5DW4L6JH7wvFdxv+/uZMjZU rZHej+aGEdZYRxiHRCiKs/jSMx2GbQ0FEpE= -----END CERTIFICATE-----Generated at Sat Oct 11 18:42:57 2025 by rpki-client