$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa File: a4f87b05-483e-3849-9acf-31f521ab9b61.roa (raw, json) Hash identifier: GggoGWqqLvXDhPvOr/K/oyar6svAgbxH+wN2IYSDyf8= Subject key identifier: 41:1D:E8:75:EE:E3:CD:E4:11:AD:30:B4:7E:B0:3F:79:C9:2B:0F:F1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1ACBFFBD7ECF5ABA4BE80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ac:bf:fb:d7:ec:f5:ab:a4:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f29b449c-3b78-4867-b4a5-2b006d1dcb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:fc:37:af:2b:c0:e7:3b:b5:0e:5a:9c:21: a6:7c:72:e0:6f:a6:d4:8e:55:f0:0a:3f:4d:b0:bb: 91:39:5e:b0:1d:2d:5f:a8:f8:7a:3f:03:60:b8:fb: 8c:ea:23:37:47:3f:63:a5:78:2b:5c:7a:e9:ac:69: 8e:9d:fd:70:8f:80:5c:c8:4e:21:1a:ee:a8:f2:26: 36:7b:22:1e:af:be:7e:13:e5:b4:39:90:df:71:51: 5f:9b:f8:62:6d:ff:ba:8e:7d:2a:f2:fe:42:ea:bf: 44:fe:83:ff:03:cd:be:33:6d:47:43:8b:f6:d6:b4: bf:36:82:be:66:80:64:14:0c:f6:49:bc:91:96:b9: 6f:31:e2:d8:21:55:ec:cb:85:47:28:68:a4:9c:fa: e8:b3:49:ee:63:99:19:c6:d6:82:38:5b:a5:56:15: e6:08:a4:1c:a7:05:5d:70:3f:84:5b:0e:03:60:77: cb:e6:c7:74:e2:13:9b:60:6a:cf:b6:59:1d:41:7e: 76:d8:69:4d:bd:ce:78:1f:79:4d:ce:37:69:16:35: 28:b9:f8:b2:b8:ed:84:41:e8:82:df:f2:ec:6b:eb: f9:d7:88:e9:db:94:66:18:20:b3:6f:36:ff:ad:df: 16:79:83:48:4f:1d:b0:6e:59:7c:f9:f1:77:72:e4: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1D:E8:75:EE:E3:CD:E4:11:AD:30:B4:7E:B0:3F:79:C9:2B:0F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4f87b05-483e-3849-9acf-31f521ab9b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:49:0d:15:8a:96:96:8a:18:35:59:da:e3:67:6b:48:1a:e5: ed:22:ce:c6:8c:6b:f4:d4:cb:2b:21:8e:06:28:83:bc:a5:cc: d6:cc:79:a2:b5:80:78:12:8e:fd:39:ca:6b:55:d2:46:06:13: 18:ab:20:91:13:3d:03:e0:4d:12:18:8d:c9:87:a4:ef:6a:8f: 4c:74:06:e7:cd:31:89:e3:04:80:62:10:52:6b:3b:48:de:ee: fe:8d:50:48:74:57:62:f4:b7:88:ee:e3:aa:37:20:5e:42:55: 92:c8:a9:10:ff:f9:a9:b4:79:28:1a:d6:92:20:53:17:89:ea: e2:7a:dc:09:38:58:25:20:fa:05:08:b0:35:65:58:16:a8:c6: 83:0c:35:6a:c0:35:d5:81:a9:0a:67:34:0c:90:fe:f3:f5:fe: c9:9a:1a:6e:20:c3:a0:51:5e:78:7d:d3:7e:1e:fc:89:1d:77: 9e:de:85:0e:e1:89:17:5f:a0:a4:c6:dd:f3:b4:0a:7d:cd:f4: 22:2a:d0:ee:d9:9c:c4:b7:1e:cd:45:4c:99:1f:6c:d4:f8:98: 15:39:22:cb:7e:35:74:ee:d6:55:12:45:68:77:36:19:b9:e0: 96:99:c5:7f:f6:84:c4:8d:fa:b9:77:ff:13:c2:e0:eb:4a:18: 15:d1:8d:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ay/+9fs9aukvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjI5YjQ0OWMtM2I3OC00ODY3LWI0YTUtMmIwMDZkMWRjYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml38N68rwOc7tQ5anCGmfHLgb6bUjlXwCj9N sLuROV6wHS1fqPh6PwNguPuM6iM3Rz9jpXgrXHrprGmOnf1wj4BcyE4hGu6o8iY2 eyIer75+E+W0OZDfcVFfm/hibf+6jn0q8v5C6r9E/oP/A82+M21HQ4v21rS/NoK+ ZoBkFAz2SbyRlrlvMeLYIVXsy4VHKGiknPros0nuY5kZxtaCOFulVhXmCKQcpwVd cD+EWw4DYHfL5sd04hObYGrPtlkdQX522GlNvc54H3lNzjdpFjUoufiyuO2EQeiC 3/Lsa+v514jp25RmGCCzbzb/rd8WeYNITx2wbll8+fF3cuSCRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEd6HXu483kEa0wtH6wP3nJKw/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTRmODdiMDUtNDgzZS0z ODQ5LTlhY2YtMzFmNTIxYWI5YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtJDRWKlpaKGDVZ2uNna0ga5e0izsaMa/TUyyshjgYog7ylzNbM eaK1gHgSjv05ymtV0kYGExirIJETPQPgTRIYjcmHpO9qj0x0BufNMYnjBIBiEFJr O0je7v6NUEh0V2L0t4ju46o3IF5CVZLIqRD/+am0eSga1pIgUxeJ6uJ63Ak4WCUg +gUIsDVlWBaoxoMMNWrANdWBqQpnNAyQ/vP1/smaGm4gw6BRXnh9034e/Ikdd57e hQ7hiRdfoKTG3fO0Cn3N9CIq0O7ZnMS3Hs1FTJkfbNT4mBU5Ist+NXTu1lUSRWh3 Nhm54JaZxX/2hMSN+rl3/xPC4OtKGBXRjX4= -----END CERTIFICATE-----Generated at Sat Oct 11 18:38:54 2025 by rpki-client