$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa File: 1a7ac156-e8f8-36e2-a881-e2f18167880c.roa (raw, json) Hash identifier: vAW8bZW75rZC/kthEekwoNEM990THkvNYAN5U82wqE0= Subject key identifier: A9:4A:56:46:0E:F4:76:50:B9:F5:71:CC:B6:89:84:55:3B:20:A8:14 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EEA878A8A5D52A7F23BED0C00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 212238 IP address blocks: 2607:740:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:8a:8a:5d:52:a7:f2:3b:ed:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=ba758d74-9209-4a01-8a5e-bfaef9b53b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:34:73:30:6b:62:18:a6:fd:5b:c2:24:6d: db:f1:c8:1f:6d:4b:9d:75:7b:70:b4:e4:81:56:90: 42:38:96:f2:69:2d:7d:1b:19:18:48:ae:31:22:78: 20:10:7b:fd:60:1f:9f:31:65:cd:df:ff:95:9e:51: 89:c6:ae:35:ca:8e:11:04:47:66:1c:d3:6b:be:f4: 16:57:4d:3e:a0:5b:2b:a9:27:81:7a:42:41:c7:d7: eb:04:4c:93:2a:4e:ca:aa:e1:87:6d:b3:12:93:10: d2:80:d8:2c:57:d4:be:72:d2:1a:7d:58:e0:85:a9: c6:21:e4:50:89:07:da:3d:99:9d:07:19:37:f8:47: 44:63:03:f9:c6:85:d8:eb:a8:e9:cd:49:2e:60:38: 46:75:94:a7:36:ea:c2:2c:37:ba:a5:7c:e0:53:87: 91:4b:e8:92:8b:3f:68:81:cc:17:69:e5:35:43:ca: c2:70:65:e8:6c:85:e9:08:ed:4a:5f:3e:e3:03:5d: a5:dd:e6:53:cc:ea:39:d2:a9:e3:31:c9:7e:50:c1: d7:55:93:61:eb:64:d5:ce:41:a3:52:59:a5:45:c9: 0a:31:1c:87:71:0f:d9:87:3c:8c:0d:05:80:37:f1: 7b:07:b2:c9:4f:64:1d:0c:0b:cc:4b:d0:93:20:76: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:56:46:0E:F4:76:50:B9:F5:71:CC:B6:89:84:55:3B:20:A8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b0:c9:de:e7:4c:dd:a9:1a:82:89:2f:87:86:fc:ba:95:44: cb:be:1c:f9:f8:fb:61:d4:da:c1:00:8c:52:7e:6f:c0:15:de: 02:40:4a:4d:a5:d0:19:90:82:2b:79:f3:24:3d:96:2d:b7:4e: 10:14:4b:26:72:3c:b3:9a:31:f9:d0:66:b2:e8:02:66:85:9c: 11:a3:ae:86:f7:6e:68:a9:83:03:d3:1e:42:4b:4e:67:54:dd: e6:c4:80:ef:c0:2c:84:4b:0c:de:dd:56:34:76:2e:c1:dc:5f: 41:f9:6e:7b:65:9d:c2:17:e3:3b:49:49:91:f2:1f:bb:64:35: 3f:15:28:53:57:52:20:21:4e:40:57:c0:24:1d:29:4c:1a:67: 46:2c:74:6e:25:78:25:9a:43:21:a5:29:0d:83:6c:41:da:a0: 54:2e:73:8f:39:f1:46:9b:f8:38:45:71:65:92:cf:69:22:71: 7d:cd:f1:94:ac:51:79:fa:56:1c:dc:3a:64:43:84:92:fc:22: 2f:b3:af:95:e0:a1:50:de:aa:66:ba:fc:76:0f:77:91:87:0d: c1:c2:8d:dd:c8:ab:c3:0e:3b:7a:96:15:24:a1:2e:02:ae:3b: 70:5c:e7:ae:b8:80:a8:2e:78:93:c9:62:6f:b7:9c:24:cc:74: 25:4e:f3:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7qh4qKXVKn8jvtDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YmE3NThkNzQtOTIwOS00YTAxLThhNWUtYmZhZWY5YjUzYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHA0czBrYhim/VvCJG3b8cgfbUuddXtwtOSB VpBCOJbyaS19GxkYSK4xInggEHv9YB+fMWXN3/+VnlGJxq41yo4RBEdmHNNrvvQW V00+oFsrqSeBekJBx9frBEyTKk7KquGHbbMSkxDSgNgsV9S+ctIafVjghanGIeRQ iQfaPZmdBxk3+EdEYwP5xoXY66jpzUkuYDhGdZSnNurCLDe6pXzgU4eRS+iSiz9o gcwXaeU1Q8rCcGXobIXpCO1KXz7jA12l3eZTzOo50qnjMcl+UMHXVZNh62TVzkGj UlmlRckKMRyHcQ/ZhzyMDQWAN/F7B7LJT2QdDAvMS9CTIHZ8KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlKVkYO9HZQufVxzLaJhFU7IKgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWE3YWMxNTYtZThmOC0z NmUyLWE4ODEtZTJmMTgxNjc4ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiwyd7nTN2pGoKJL4eG/LqVRMu+HPn4+2HU2sEAjFJ+b8AV3gJA Sk2l0BmQgit58yQ9li23ThAUSyZyPLOaMfnQZrLoAmaFnBGjrob3bmipgwPTHkJL TmdU3ebEgO/ALIRLDN7dVjR2LsHcX0H5bntlncIX4ztJSZHyH7tkNT8VKFNXUiAh TkBXwCQdKUwaZ0YsdG4leCWaQyGlKQ2DbEHaoFQuc4858Uab+DhFcWWSz2kicX3N 8ZSsUXn6VhzcOmRDhJL8Ii+zr5XgoVDeqma6/HYPd5GHDcHCjd3Iq8MOO3qWFSSh LgKuO3Bc5664gKgueJPJYm+3nCTMdCVO88Q= -----END CERTIFICATE-----Generated at Tue Sep 1 03:42:12 2026 by rpki-client