$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa File: a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa (raw, json) Hash identifier: 50BK0vZWhQNfPAC3pGwX9lgDy1n7ixuZP5CJunfawQ0= Subject key identifier: 24:8D:09:E3:F5:79:FC:DD:C6:8A:AB:E8:AC:76:53:C0:A1:D6:4E:16 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1ABFD5C10FBA569C4D2D0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ab:fd:5c:10:fb:a5:69:c4:d2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=def26553-3a27-49e4-a8fc-0d5f52479167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:28:59:e0:98:79:8a:d2:cf:db:a1:ec:5d: d1:e2:79:19:f5:e8:a9:ad:ea:81:fc:24:5f:3f:f9: 48:09:f6:c7:d8:ac:74:23:59:b3:2e:78:ee:cf:a7: 88:b2:89:ac:8a:75:b6:f3:f3:21:2e:51:25:51:b7: aa:91:31:ef:fd:6f:f7:cf:86:e5:de:34:13:4b:fb: f5:4b:49:ae:41:50:19:15:0a:41:19:6a:31:07:a4: aa:f5:5a:f3:85:f4:a2:c8:a8:8b:46:41:8c:b6:d2: 06:bc:54:99:74:5d:a3:50:ea:a5:15:d5:4b:35:9f: 75:50:05:1c:07:08:1c:b5:26:28:6b:21:6c:ab:55: 62:3e:b1:88:ef:ee:21:11:d5:94:38:4b:ac:d4:1c: 70:ec:5b:5e:47:db:76:5e:1b:d4:15:aa:7f:59:69: 6d:62:32:f1:e2:36:5a:6c:dc:75:4c:b3:ba:55:cd: 25:c9:6d:e9:7e:a9:74:ec:74:5f:5b:fa:39:e0:f7: 78:3b:82:87:bc:b6:92:fa:68:f5:a3:e7:fa:2f:04: cf:4c:af:ed:e6:13:44:2b:89:66:c7:9d:48:48:f7: 47:a6:e0:8d:5a:1d:bc:9e:7b:35:af:f7:08:c6:39: f1:f1:c4:31:34:d6:37:80:14:62:50:f0:5c:ab:73: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8D:09:E3:F5:79:FC:DD:C6:8A:AB:E8:AC:76:53:C0:A1:D6:4E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ce:6d:6f:85:d5:a8:cf:2a:98:16:cd:3d:dc:81:54:8b:07: 6e:92:5c:86:c7:32:96:fb:7e:ae:25:d4:66:16:b9:21:da:b5: 26:47:c3:29:51:1a:43:6f:1a:5c:0c:5b:66:e2:22:3e:ec:99: 00:c8:3f:0f:da:d9:80:b1:42:ff:0a:66:b7:b7:5d:0d:1d:86: 36:69:eb:80:b4:c0:03:ea:0f:f7:4e:bc:6a:89:28:6e:7f:17: 21:88:d3:6d:28:11:32:b5:ae:ca:35:22:54:74:27:c4:c9:fe: 8a:9f:84:22:50:a2:e7:b4:3f:5f:60:c5:c9:1c:89:81:b6:6c: 1f:bf:ab:3c:68:b1:14:91:8d:b9:8d:7a:13:e2:8d:ce:00:74: fa:8b:5b:b1:14:55:6d:9e:ff:64:0d:ca:5e:89:ba:d1:69:cd: 09:79:2b:ca:cb:7a:ef:b6:6c:7f:e3:cc:bb:74:d1:aa:a7:cc: 18:5b:e6:8f:af:88:f4:7e:67:0c:3f:41:24:10:56:cd:ae:96: ee:59:8e:9e:b4:c1:3b:b4:d8:30:78:5a:b7:85:01:d2:c9:cb: 3c:93:82:30:cb:be:85:61:eb:e0:09:f0:b2:ed:6c:07:81:c0: fb:19:8f:ba:98:90:80:5e:3c:20:91:e3:00:0c:1f:9f:dc:fe: e5:47:b8:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4av9XBD7pWnE0tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGVmMjY1NTMtM2EyNy00OWU0LWE4ZmMtMGQ1ZjUyNDc5MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR4oWeCYeYrSz9uh7F3R4nkZ9eipreqB/CRf P/lICfbH2Kx0I1mzLnjuz6eIsomsinW28/MhLlElUbeqkTHv/W/3z4bl3jQTS/v1 S0muQVAZFQpBGWoxB6Sq9VrzhfSiyKiLRkGMttIGvFSZdF2jUOqlFdVLNZ91UAUc BwgctSYoayFsq1ViPrGI7+4hEdWUOEus1Bxw7FteR9t2XhvUFap/WWltYjLx4jZa bNx1TLO6Vc0lyW3pfql07HRfW/o54Pd4O4KHvLaS+mj1o+f6LwTPTK/t5hNEK4lm x51ISPdHpuCNWh28nns1r/cIxjnx8cQxNNY3gBRiUPBcq3M6rwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCSNCeP1efzdxoqr6Kx2U8Ch1k4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTFjMWNkOGQtY2Y3Mi0z NmE2LWE0ODAtOGZjOWI0NmU1OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPObW+F1ajPKpgWzT3cgVSLB26SXIbHMpb7fq4l1GYWuSHatSZH wylRGkNvGlwMW2biIj7smQDIPw/a2YCxQv8KZre3XQ0dhjZp64C0wAPqD/dOvGqJ KG5/FyGI020oETK1rso1IlR0J8TJ/oqfhCJQoue0P19gxckciYG2bB+/qzxosRSR jbmNehPijc4AdPqLW7EUVW2e/2QNyl6JutFpzQl5K8rLeu+2bH/jzLt00aqnzBhb 5o+viPR+Zww/QSQQVs2ulu5Zjp60wTu02DB4WreFAdLJyzyTgjDLvoVh6+AJ8LLt bAeBwPsZj7qYkIBePCCR4wAMH5/c/uVHuJA= -----END CERTIFICATE-----Generated at Sat Oct 11 18:36:31 2025 by rpki-client