$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa File: cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa (raw, json) Hash identifier: Tr0U9XvtH9uf71QMI+MxcxSilnBYPnCOKAYgKgleuXk= Subject key identifier: EF:7E:45:8A:E7:90:A5:31:2F:EA:9C:F3:67:4A:03:44:EF:B6:1C:A9 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1AC57E874A36F9DCEEB00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ac:57:e8:74:a3:6f:9d:ce:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ae55b26f-dd84-4e1c-ae5b-2e5d71f8e98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4f:e5:b7:6c:3a:dd:0f:dd:9e:6a:b8:7f:05: 48:4e:d1:43:61:e8:82:7b:da:02:c0:29:f8:3b:cb: a0:b8:0d:92:73:39:28:a8:53:1d:6a:1f:79:af:9b: 8e:9f:24:17:f2:e7:7c:87:90:e6:07:3a:5b:d5:54: 13:96:78:1a:69:b5:e3:be:3d:eb:d6:84:23:db:b4: 29:a8:67:3e:71:2a:77:4e:8a:78:c0:12:46:a8:a3: f3:67:f9:a6:0c:9a:6f:37:24:79:ce:67:68:1f:d0: 77:0a:a5:1f:2f:d3:88:6e:a4:9d:cb:2a:e7:34:a3: 62:f9:13:7d:53:a8:85:2e:37:55:3a:fa:84:75:ca: ba:65:ad:d0:46:4d:74:f5:cf:9d:25:98:5d:a0:f7: 93:1b:d9:2b:2d:03:24:54:c9:8d:c4:a3:4f:07:47: 1b:23:8d:02:e9:b6:3e:0f:e9:d2:10:38:d6:44:86: f7:5b:ae:d1:db:80:e3:82:01:68:77:a7:6a:0a:59: 25:1d:d3:6c:03:ec:57:36:ce:73:df:de:a2:48:37: 2d:32:a2:c7:33:c3:87:6d:b2:36:f4:ed:5b:d2:0c: 95:13:aa:63:4e:1b:80:f0:3f:3e:47:33:8c:86:e4: 18:83:6d:ac:ea:f2:e8:ad:dc:f7:51:1c:03:86:a6: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:45:8A:E7:90:A5:31:2F:EA:9C:F3:67:4A:03:44:EF:B6:1C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cbea6ca1-b2fa-33ec-8803-152a05d8f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0e:61:96:55:6e:ed:bb:32:b4:5a:6a:72:7a:9c:3f:ba:96: a5:2e:8e:1a:82:d7:8d:c6:8b:88:0d:a0:7d:20:1f:80:33:c1: 94:d5:fa:4b:a7:9a:a0:ce:26:ea:da:2e:29:b1:da:0e:74:ab: 7d:ee:9e:13:b1:59:25:24:29:44:d8:ec:48:3c:47:1e:b7:36: fb:49:80:3e:29:b0:dd:f7:d1:e8:2e:af:28:e7:00:62:ff:4a: 01:b9:2b:bb:fd:f0:5f:b9:f2:da:05:88:c5:b2:e4:55:76:a5: 28:e5:09:d4:3e:41:2b:b6:16:8b:c3:6a:e8:11:e4:dc:c2:55: 88:d4:21:76:dd:62:3a:c2:9d:05:f8:a7:33:79:91:8c:ca:48: 4d:a4:d1:8a:df:fd:f6:7a:1a:27:b3:4b:68:cc:07:fe:f9:39: e2:fb:e4:21:25:6b:8e:bf:de:47:80:d7:cf:ac:39:b7:35:dc: 11:cd:05:c9:bf:d8:fa:65:85:3e:67:41:c6:f5:33:c6:d7:b5: bb:07:38:fd:dd:b8:03:3d:08:b5:74:2c:10:bf:55:8e:5c:46: 97:65:22:c8:08:3b:a6:4b:c2:7b:54:03:88:10:74:98:8c:ea: 4e:f2:65:19:17:54:2e:11:85:0a:d2:a4:0e:eb:05:07:19:24: a0:c3:a2:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4axX6HSjb53O6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YWU1NWIyNmYtZGQ4NC00ZTFjLWFlNWItMmU1ZDcxZjhlOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE/lt2w63Q/dnmq4fwVITtFDYeiCe9oCwCn4 O8uguA2SczkoqFMdah95r5uOnyQX8ud8h5DmBzpb1VQTlngaabXjvj3r1oQj27Qp qGc+cSp3Top4wBJGqKPzZ/mmDJpvNyR5zmdoH9B3CqUfL9OIbqSdyyrnNKNi+RN9 U6iFLjdVOvqEdcq6Za3QRk109c+dJZhdoPeTG9krLQMkVMmNxKNPB0cbI40C6bY+ D+nSEDjWRIb3W67R24DjggFod6dqClklHdNsA+xXNs5z396iSDctMqLHM8OHbbI2 9O1b0gyVE6pjThuA8D8+RzOMhuQYg22s6vLordz3URwDhqayYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO9+RYrnkKUxL+qc82dKA0TvthypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2JlYTZjYTEtYjJmYS0z M2VjLTg4MDMtMTUyYTA1ZDhmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4OYZZVbu27MrRaanJ6nD+6lqUujhqC143Gi4gNoH0gH4AzwZTV +kunmqDOJuraLimx2g50q33unhOxWSUkKUTY7Eg8Rx63NvtJgD4psN330eguryjn AGL/SgG5K7v98F+58toFiMWy5FV2pSjlCdQ+QSu2FovDaugR5NzCVYjUIXbdYjrC nQX4pzN5kYzKSE2k0Yrf/fZ6GiezS2jMB/75OeL75CEla46/3keA18+sObc13BHN Bcm/2PplhT5nQcb1M8bXtbsHOP3duAM9CLV0LBC/VY5cRpdlIsgIO6ZLwntUA4gQ dJiM6k7yZRkXVC4RhQrSpA7rBQcZJKDDou4= -----END CERTIFICATE-----Generated at Sat Oct 11 18:41:48 2025 by rpki-client