$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa File: 99e80352-28e0-3280-b087-90da68e9840c.roa (raw, json) Hash identifier: n+cJasFv+BhNIvbMAFoWQBNIxzK/68xFgCn9WHl3kL4= Subject key identifier: C4:E3:A4:75:55:7B:25:A3:A9:14:5D:B4:61:6E:4E:49:8B:51:B5:FC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1AC8343CE72C031F86220 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ac:83:43:ce:72:c0:31:f8:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2168649c-1818-4335-9eaa-8f0b472d6002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:36:86:95:3e:2a:c3:ce:2c:cd:1c:b5:90: 90:7a:4d:9f:a4:5d:cd:01:c6:b3:71:c1:8c:9a:e5: 1c:97:6b:9e:61:14:0e:67:b4:45:4e:fc:f4:44:5f: d9:8a:d9:fb:e6:dd:f3:b5:b8:06:51:79:cd:f8:5f: f9:ba:7e:3f:94:cb:cb:b8:16:1c:9c:95:de:fe:e5: 4c:c4:c0:bc:46:60:90:b9:2b:f6:41:af:8b:90:96: a6:03:6f:14:5b:4d:d6:36:e0:d3:63:48:e2:68:59: e5:06:a9:51:7d:8d:67:63:0e:15:28:96:11:a7:89: 38:92:50:c1:41:12:b8:e9:25:89:0d:57:9f:ba:b0: 38:e5:17:f2:9c:22:be:9a:35:41:ce:cc:d2:2e:79: c6:36:2b:66:ed:8c:65:0f:71:66:32:f8:2b:f8:3a: 9f:17:45:b1:18:7c:49:2d:f6:bf:f1:a3:11:f5:e9: a5:1c:6f:1d:89:3d:91:c1:46:25:f7:56:53:e6:0f: e8:10:5f:f6:44:de:9b:44:50:fa:48:ac:b1:ed:26: 65:69:78:cb:ae:74:6f:e7:cc:89:4b:c6:8f:33:e5: f8:65:30:b7:ae:14:aa:0a:79:29:15:6b:34:74:52: fe:a5:e0:1a:86:8f:e3:d5:8a:78:52:5c:3e:a5:68: c2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E3:A4:75:55:7B:25:A3:A9:14:5D:B4:61:6E:4E:49:8B:51:B5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99e80352-28e0-3280-b087-90da68e9840c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:22:1e:93:e6:5c:01:85:18:a2:4d:7d:0c:cf:5b:59:82:b6: f1:ce:a0:ba:e1:04:61:97:2e:ec:6a:ef:0d:7b:d7:40:aa:fe: 70:fc:5e:1d:72:10:86:e1:24:c3:3c:3a:f1:20:23:db:f7:64: 5c:30:e1:bc:d9:03:9b:73:79:7c:4e:0b:e8:58:24:e4:8f:f9: 74:8d:44:0f:2e:ce:d2:b7:25:9b:1e:2f:72:6a:e9:6f:06:04: e5:cf:29:27:ce:7c:09:c0:51:75:f6:f1:1b:71:57:e2:87:c8: f3:32:5b:e0:3b:12:4c:a6:0b:84:be:9b:f3:3a:46:12:b9:0d: e5:b3:c7:e4:ef:8b:a7:97:02:51:00:aa:21:e4:75:c3:d5:84: f7:29:34:c2:6a:1d:51:a7:72:8e:57:b2:e0:9d:59:d5:16:56: 33:6a:f8:eb:db:9b:1a:ae:a5:4b:0c:13:45:56:9d:4b:c9:d3: 10:c2:81:74:4a:0c:9a:55:6e:4b:5d:1b:a2:a6:ef:80:92:6e: 75:13:c9:97:2d:d0:57:97:f3:b8:5b:3e:69:d5:f2:dc:bd:b5: c0:a4:86:b6:d4:97:d2:26:8e:5e:f0:13:04:36:ff:4b:3a:1c: 70:e7:ca:6c:6e:7c:33:b0:9c:5a:6a:02:2e:7f:c4:b2:c7:62: 1c:3d:dd:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ayDQ85ywDH4YiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjE2ODY0OWMtMTgxOC00MzM1LTllYWEtOGYwYjQ3MmQ2MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmys2hpU+KsPOLM0ctZCQek2fpF3NAcazccGM muUcl2ueYRQOZ7RFTvz0RF/Zitn75t3ztbgGUXnN+F/5un4/lMvLuBYcnJXe/uVM xMC8RmCQuSv2Qa+LkJamA28UW03WNuDTY0jiaFnlBqlRfY1nYw4VKJYRp4k4klDB QRK46SWJDVefurA45RfynCK+mjVBzszSLnnGNitm7YxlD3FmMvgr+DqfF0WxGHxJ Lfa/8aMR9emlHG8diT2RwUYl91ZT5g/oEF/2RN6bRFD6SKyx7SZlaXjLrnRv58yJ S8aPM+X4ZTC3rhSqCnkpFWs0dFL+peAaho/j1Yp4Ulw+pWjCuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTjpHVVeyWjqRRdtGFuTkmLUbX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTllODAzNTItMjhlMC0z MjgwLWIwODctOTBkYTY4ZTk4NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0iHpPmXAGFGKJNfQzPW1mCtvHOoLrhBGGXLuxq7w1710Cq/nD8 Xh1yEIbhJMM8OvEgI9v3ZFww4bzZA5tzeXxOC+hYJOSP+XSNRA8uztK3JZseL3Jq 6W8GBOXPKSfOfAnAUXX28RtxV+KHyPMyW+A7EkymC4S+m/M6RhK5DeWzx+Tvi6eX AlEAqiHkdcPVhPcpNMJqHVGnco5XsuCdWdUWVjNq+OvbmxqupUsME0VWnUvJ0xDC gXRKDJpVbktdG6Km74CSbnUTyZct0FeX87hbPmnV8ty9tcCkhrbUl9Imjl7wEwQ2 /0s6HHDnymxufDOwnFpqAi5/xLLHYhw93WY= -----END CERTIFICATE-----Generated at Sat Oct 11 18:41:47 2025 by rpki-client