$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa File: b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa (raw, json) Hash identifier: 2s8qJ0374SL3cnaOolQhOnM84lQWVpIlMrP7VUxzygs= Subject key identifier: 29:43:74:1C:7D:12:55:32:25:7E:37:BC:E8:DC:D3:8A:0C:2E:19:39 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B328C4374A04A7B659B6D3880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 209181 IP address blocks: 2607:740:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:43:74:a0:4a:7b:65:9b:6d:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=9cc6aab2-bbd9-44b9-8e35-1efc631ccd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:ae:ac:aa:53:20:43:97:03:79:3c:2e:e8: 6c:06:18:81:9d:ee:1a:6c:be:a0:0c:70:50:b0:45: cf:34:e9:d1:d3:47:71:1b:53:0c:c6:a4:a8:15:14: b7:3a:43:c9:77:95:48:17:69:c8:f3:85:d7:71:37: d3:1e:db:5a:03:fe:26:bf:45:81:36:ed:e4:48:df: f2:b8:09:73:fb:ec:d4:f9:bc:f5:65:fe:29:f7:a2: 68:96:6d:e5:65:14:1d:02:1e:95:84:5d:8c:07:d7: af:7f:6e:ab:5b:14:42:05:da:04:b0:6b:75:88:62: 17:e4:a7:a6:a0:13:3e:56:e9:fa:8d:70:4f:fc:6a: a0:9d:10:e6:2f:91:cf:16:e8:c1:c2:4e:3f:ca:8d: a7:69:fd:26:42:99:b3:83:0f:18:06:06:51:c4:c4: 49:09:45:8c:13:84:dc:cd:e8:37:12:b2:05:00:cb: 2a:f2:7d:9a:37:98:8a:a1:b1:1c:68:98:eb:43:90: e6:18:7a:a0:c3:e6:bb:1b:88:72:93:b2:66:14:9f: 8f:c4:3b:9f:3b:0a:9f:5b:f6:e8:9c:1c:52:40:c7: 1f:aa:a0:a9:a9:67:bc:86:56:79:19:2c:99:e3:40: 40:f5:c0:dd:7f:e5:d4:ed:f4:41:30:7d:96:f4:ca: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:74:1C:7D:12:55:32:25:7E:37:BC:E8:DC:D3:8A:0C:2E:19:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bc:14:09:d0:72:e0:b4:17:de:c8:5b:2b:db:8f:c0:85:83: 14:45:20:c4:df:4a:4b:93:78:d1:d9:20:17:ff:be:ed:0a:ac: d3:9e:79:63:5e:81:5d:d7:11:30:d8:f5:b9:f1:23:20:96:05: 47:b5:76:0c:11:32:d6:e6:e6:57:da:26:22:1d:0a:92:e4:63: 63:07:b5:17:7d:76:30:0c:a3:dd:ce:90:c3:cf:d8:c6:a2:a8: 6f:a8:19:35:80:87:b2:1d:0c:e9:dc:1d:be:be:2c:94:96:9c: 4f:8a:5e:09:ba:ec:31:46:76:72:6d:40:5a:aa:98:b6:77:93: e0:a5:d2:0e:b2:b3:cf:e9:8f:66:53:ca:a5:4c:4d:f5:94:10: 1e:2e:73:33:3c:82:b6:a8:dd:11:5a:3d:e2:ed:f6:e0:f1:3e: ea:56:a9:d0:b4:22:ea:4f:11:f7:de:50:eb:0f:ff:ea:2a:19: 03:e4:3b:6c:9c:c3:79:14:61:63:f4:25:9f:f8:22:93:68:ac: 80:05:1e:f8:14:d8:23:09:ba:4f:b0:7b:49:76:e8:17:61:ec: be:c3:ab:48:7f:6c:17:75:c4:1e:53:21:18:17:a1:bc:0c:74: 0e:ff:c9:21:63:35:15:3d:8b:1d:5a:7d:59:3c:d3:b8:37:57: 6d:68:8e:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsyjEN0oEp7ZZttOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk OWNjNmFhYjItYmJkOS00NGI5LThlMzUtMWVmYzYzMWNjZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7murKpTIEOXA3k8LuhsBhiBne4abL6gDHBQ sEXPNOnR00dxG1MMxqSoFRS3OkPJd5VIF2nI84XXcTfTHttaA/4mv0WBNu3kSN/y uAlz++zU+bz1Zf4p96Jolm3lZRQdAh6VhF2MB9evf26rWxRCBdoEsGt1iGIX5Kem oBM+Vun6jXBP/GqgnRDmL5HPFujBwk4/yo2naf0mQpmzgw8YBgZRxMRJCUWME4Tc zeg3ErIFAMsq8n2aN5iKobEcaJjrQ5DmGHqgw+a7G4hyk7JmFJ+PxDufOwqfW/bo nBxSQMcfqqCpqWe8hlZ5GSyZ40BA9cDdf+XU7fRBMH2W9MoB7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFClDdBx9ElUyJX43vOjc04oMLhk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjcyOWYxYmItYWQ4ZC0z MWUwLTk2MDItZDYyMjk2ZTQzYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF+8FAnQcuC0F97IWyvbj8CFgxRFIMTfSkuTeNHZIBf/vu0KrNOe eWNegV3XETDY9bnxIyCWBUe1dgwRMtbm5lfaJiIdCpLkY2MHtRd9djAMo93OkMPP 2MaiqG+oGTWAh7IdDOncHb6+LJSWnE+KXgm67DFGdnJtQFqqmLZ3k+Cl0g6ys8/p j2ZTyqVMTfWUEB4uczM8grao3RFaPeLt9uDxPupWqdC0IupPEffeUOsP/+oqGQPk O2ycw3kUYWP0JZ/4IpNorIAFHvgU2CMJuk+we0l26Bdh7L7Dq0h/bBd1xB5TIRgX obwMdA7/ySFjNRU9ix1afVk807g3V21ojjE= -----END CERTIFICATE-----Generated at Sat Oct 11 18:41:48 2025 by rpki-client