$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa File: 0bfb4f24-691b-3b97-8078-a89a8a850b40.roa (raw, json) Hash identifier: kMRRDA8OGeJIkvmmznrwjpccDK2WdpX2RqHvzXBWDL4= Subject key identifier: E3:CF:36:72:4C:DC:93:E0:DA:8A:70:A0:A6:F0:52:8D:A6:1D:4A:4E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA791A89E53F13E7F35798B40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 2607:740:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:a8:9e:53:f1:3e:7f:35:79:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a22f87cd-a5e0-470f-bb14-d4809fbb1ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:4e:50:66:3d:c2:c4:76:81:88:12:d5:a1: 1f:b5:d6:b6:28:70:ee:bb:22:73:e0:20:02:a1:5a: b9:af:e1:4b:97:ec:2b:2e:4e:8b:80:c6:47:cd:79: f2:d4:21:ef:3d:50:24:4a:14:7d:a1:dc:81:45:9e: 01:ac:1f:15:7b:42:b6:3e:51:6e:1b:f9:53:ec:b9: e1:f7:69:2c:2d:2b:6a:6a:52:7e:0e:32:2b:2a:af: d5:95:99:80:a1:a9:06:13:12:3f:4a:cd:a1:d9:3c: 88:a3:90:91:50:3c:1e:51:3d:5d:a6:c5:74:2c:28: 35:7e:09:cd:4d:d3:48:e4:04:15:62:5d:15:cd:cc: e5:02:20:94:14:34:8e:23:46:6c:91:c9:8d:71:d0: c7:17:c5:8d:e9:04:ce:d5:55:8b:cb:d6:cf:74:c2: f6:16:17:bb:d4:03:f5:11:1e:8f:de:a5:e9:91:8b: 92:74:6b:da:5f:c8:57:42:0b:b2:a5:ce:51:f1:43: 35:89:83:57:a2:d5:26:31:20:a7:0c:a6:98:69:0b: 9b:38:27:b3:42:04:9e:f4:50:0e:49:05:4d:f2:3a: 38:5b:ac:7f:04:af:0d:bc:82:c6:14:e5:1b:f7:c6: 1d:2a:fd:7a:b7:e6:5c:9b:ee:01:59:45:67:0f:52: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CF:36:72:4C:DC:93:E0:DA:8A:70:A0:A6:F0:52:8D:A6:1D:4A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0bfb4f24-691b-3b97-8078-a89a8a850b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9e:b3:0a:f5:1c:af:7a:30:ee:38:08:c9:3d:71:1c:02:a7: a0:e2:94:60:b7:51:99:28:77:4e:4c:53:97:24:ce:97:08:4e: 98:98:c1:0d:92:65:5c:27:f2:7a:d5:cd:65:59:1b:95:e7:dd: 1f:b1:1a:10:ea:dc:7d:5e:ca:87:7f:d5:85:c4:9a:6a:8d:49: 80:c7:af:e4:2f:c1:94:77:8a:3c:ee:50:a3:22:88:78:57:a1: 05:2f:cb:4e:85:92:1d:4c:47:d6:55:c8:d7:f2:d7:62:db:9d: 97:e1:5d:10:e0:7b:e2:c2:34:a7:33:eb:da:83:c3:e2:d2:3c: 64:7e:d4:28:56:8e:5e:76:21:06:98:62:16:11:72:46:5c:7b: ff:41:4b:8b:5e:bd:53:04:d5:ef:92:40:14:89:f5:30:31:8c: 1d:20:6f:9c:bb:37:d1:9a:ce:57:8a:7b:eb:bc:aa:ee:60:52: 5d:c6:15:fa:64:9b:33:41:ec:81:ab:e7:92:36:0f:9d:62:66: b7:c1:82:74:3b:dc:9e:3f:68:ea:d4:0c:78:93:97:28:ba:3f: 32:c2:45:a9:ee:1d:2e:ef:2d:c4:89:be:dd:c1:b7:e0:53:27: 6f:33:76:d1:f8:e4:ce:0e:04:7c:dc:11:c3:40:4b:c4:61:6d: 8d:6b:34:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkaieU/E+fzV5i0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTIyZjg3Y2QtYTVlMC00NzBmLWJiMTQtZDQ4MDlmYmIxYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPpOUGY9wsR2gYgS1aEftda2KHDuuyJz4CAC oVq5r+FLl+wrLk6LgMZHzXny1CHvPVAkShR9odyBRZ4BrB8Ve0K2PlFuG/lT7Lnh 92ksLStqalJ+DjIrKq/VlZmAoakGExI/Ss2h2TyIo5CRUDweUT1dpsV0LCg1fgnN TdNI5AQVYl0VzczlAiCUFDSOI0ZskcmNcdDHF8WN6QTO1VWLy9bPdML2Fhe71AP1 ER6P3qXpkYuSdGvaX8hXQguypc5R8UM1iYNXotUmMSCnDKaYaQubOCezQgSe9FAO SQVN8jo4W6x/BK8NvILGFOUb98YdKv16t+Zcm+4BWUVnD1KLkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPPNnJM3JPg2opwoKbwUo2mHUpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGJmYjRmMjQtNjkxYi0z Yjk3LTgwNzgtYTg5YThhODUwYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6eswr1HK96MO44CMk9cRwCp6DilGC3UZkod05MU5ckzpcITpiY wQ2SZVwn8nrVzWVZG5Xn3R+xGhDq3H1eyod/1YXEmmqNSYDHr+QvwZR3ijzuUKMi iHhXoQUvy06Fkh1MR9ZVyNfy12LbnZfhXRDge+LCNKcz69qDw+LSPGR+1ChWjl52 IQaYYhYRckZce/9BS4tevVME1e+SQBSJ9TAxjB0gb5y7N9GazleKe+u8qu5gUl3G FfpkmzNB7IGr55I2D51iZrfBgnQ73J4/aOrUDHiTlyi6PzLCRanuHS7vLcSJvt3B t+BTJ28zdtH45M4OBHzcEcNAS8RhbY1rNBo= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:00 2026 by rpki-client