$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa File: 0add0c68-6307-3a1c-9a64-fd4561e55abd.roa (raw, json) Hash identifier: 0/3zWZk+kqoJ4Csh5cCGJWKgaI92peZNvSSGFD/Z9IE= Subject key identifier: FC:57:28:04:E6:76:29:94:86:42:C1:29:EB:BE:CB:1A:84:68:6C:38 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F71EDA0104E4C7EA6F7C14A80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 52000 IP address blocks: 2607:740:5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a0:10:4e:4c:7e:a6:f7:c1:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=53d000d8-2525-4778-8bb9-f8625282f989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:83:a5:61:de:e6:d2:cf:c2:d8:ea:f2:55: e6:54:66:c3:8b:a9:3b:6a:ad:d8:06:75:4f:ac:37: f0:e3:42:74:dd:32:2a:39:29:9d:8c:b2:66:e2:19: 56:1c:46:c3:7d:20:c4:fd:23:15:f1:ed:ed:e7:82: 0d:60:a4:2a:3d:b6:6e:e3:ec:cc:6e:25:3b:c7:de: f3:ff:1c:a0:b0:9c:1e:65:94:b1:5e:cf:be:60:fd: 8d:43:79:0c:0a:85:6f:d7:9d:3d:5d:56:49:40:53: b8:6f:3c:fa:1e:e7:4d:50:92:76:98:86:db:a3:f0: 4e:5c:00:91:54:e9:ff:e0:02:2e:e8:1b:c5:08:d7: d3:cd:fd:c6:f9:08:5e:ff:6f:0d:8b:87:b2:6e:93: 03:7d:e0:57:88:cc:5b:07:ea:21:fd:73:81:27:cc: 73:4b:4c:19:71:9e:6e:38:38:ea:86:57:80:cb:90: 82:34:ad:61:7d:e6:59:71:9e:d2:a1:c4:aa:5d:94: bb:04:5f:1a:51:b3:e1:f3:7d:ee:84:66:87:9f:d0: 3b:e2:36:f9:c8:06:d6:3d:d1:2e:14:10:06:bb:ac: 94:a3:39:d5:6c:86:e8:67:c1:59:e8:05:0d:d0:40: da:fd:0c:83:1f:da:a8:ee:b5:80:b0:e1:9e:95:fc: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:57:28:04:E6:76:29:94:86:42:C1:29:EB:BE:CB:1A:84:68:6C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:e8:b6:39:be:6f:58:9a:e4:87:09:c8:84:bd:41:03:70: 8c:87:01:e1:b2:8e:2b:4b:1e:cf:fa:86:bf:94:80:1a:be:bf: c3:61:9c:ad:cc:52:f7:2d:3c:a6:e4:84:e6:8a:be:0f:f2:84: 3c:36:a8:e5:0d:b8:69:4b:ae:02:09:dc:19:74:0a:01:64:65: 6b:df:3d:60:07:e7:d1:f5:db:48:a7:9a:a4:04:c5:8f:33:d5: d5:49:24:aa:d6:87:d6:bb:2b:f9:3f:33:3f:33:7d:c6:cc:9d: 3f:29:b0:8f:5b:c6:5d:af:52:d0:70:89:08:2f:0d:74:9b:af: 50:68:2f:8f:5e:d9:b0:15:ba:87:8c:13:08:2b:0f:11:51:70: 49:84:56:70:dd:aa:0c:06:98:0c:73:ad:77:02:05:75:ee:89: a8:46:bd:b6:16:aa:fe:29:e8:44:a9:db:cd:d3:8b:94:e4:3a: d0:4a:35:ed:3e:77:e4:26:8a:61:1d:30:3f:e9:f9:bb:26:79: 11:82:79:fc:c9:a4:4a:de:b3:1d:7d:9a:b0:d9:58:58:a1:ce: bb:00:88:82:0a:9c:1b:db:88:b5:7c:76:f7:68:c7:16:6f:d5: bc:4c:8f:d6:cf:bc:ba:ac:d8:f3:cc:cb:b8:b9:fc:d2:54:71: 7c:d2:22:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7aAQTkx+pvfBSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NTNkMDAwZDgtMjUyNS00Nzc4LThiYjktZjg2MjUyODJmOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8CDpWHe5tLPwtjq8lXmVGbDi6k7aq3YBnVP rDfw40J03TIqOSmdjLJm4hlWHEbDfSDE/SMV8e3t54INYKQqPbZu4+zMbiU7x97z /xygsJweZZSxXs++YP2NQ3kMCoVv1509XVZJQFO4bzz6HudNUJJ2mIbbo/BOXACR VOn/4AIu6BvFCNfTzf3G+Qhe/28Ni4eybpMDfeBXiMxbB+oh/XOBJ8xzS0wZcZ5u ODjqhleAy5CCNK1hfeZZcZ7SocSqXZS7BF8aUbPh833uhGaHn9A74jb5yAbWPdEu FBAGu6yUoznVbIboZ8FZ6AUN0EDa/QyDH9qo7rWAsOGelfw4oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPxXKATmdimUhkLBKeu+yxqEaGw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGFkZDBjNjgtNjMwNy0z YTFjLTlhNjQtZmQ0NTYxZTU1YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERy6LY5vm9YmuSHCciEvUEDcIyHAeGyjitLHs/6hr+UgBq+v8Nh nK3MUvctPKbkhOaKvg/yhDw2qOUNuGlLrgIJ3Bl0CgFkZWvfPWAH59H120inmqQE xY8z1dVJJKrWh9a7K/k/Mz8zfcbMnT8psI9bxl2vUtBwiQgvDXSbr1BoL49e2bAV uoeMEwgrDxFRcEmEVnDdqgwGmAxzrXcCBXXuiahGvbYWqv4p6ESp283Ti5TkOtBK Ne0+d+QmimEdMD/p+bsmeRGCefzJpEresx19mrDZWFihzrsAiIIKnBvbiLV8dvdo xxZv1bxMj9bPvLqs2PPMy7i5/NJUcXzSIi0= -----END CERTIFICATE-----Generated at Sun Oct 25 18:36:14 2026 by rpki-client