$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa File: 1a7ac156-e8f8-36e2-a881-e2f18167880c.roa (raw, json) Hash identifier: GSqjCfr7FzHVuKsK/SaRS7uTYjuUaPdk5dfNGFUg2KY= Subject key identifier: DA:2C:BF:03:6F:5D:56:FF:6E:71:DF:DD:49:00:97:D6:AF:E1:E7:54 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F8DD88FC27A8797EAEE4EB084 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 212238 IP address blocks: 2607:740:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:8f:c2:7a:87:97:ea:ee:4e:b0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=a5b33a27-578a-4860-957c-3c6c4c378d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:df:c2:4e:f6:c4:b8:6d:7a:18:0a:bf:5c: 5e:de:16:12:a2:01:b2:00:72:04:d1:fe:b4:47:19: 0c:34:51:08:70:6d:12:90:aa:ad:73:84:d9:b5:01: ea:31:99:35:33:ee:f0:2e:44:e6:83:8c:aa:17:3d: 48:fa:28:a9:3e:6b:19:e1:f9:2a:f9:f5:c8:a5:3c: 13:9c:af:7d:8b:b1:ce:5e:59:52:36:f2:2a:80:09: 4f:b3:88:61:d6:ea:5f:ae:65:7b:34:6d:67:47:31: 7b:21:22:7e:49:fa:8a:06:41:48:ff:47:60:9f:5f: d4:10:8e:e3:dc:d3:2d:b3:5c:02:45:b6:47:95:60: 1e:73:f9:42:57:66:12:6e:10:68:12:f9:da:5c:8a: c6:2a:7e:cd:32:05:c2:d5:02:18:5b:de:9b:8f:5a: fa:fc:b3:c2:b4:c8:b3:8c:b9:7b:33:ea:66:40:f3: 7d:f7:0e:95:37:79:84:05:01:8f:29:64:de:1c:6d: 98:8e:63:47:78:f2:eb:ee:9d:3a:cf:58:63:63:09: 20:31:37:f6:6a:ad:0e:f2:d3:16:ef:45:ff:f0:d3: 8c:99:bf:0d:b3:e6:80:f7:d4:ac:71:bf:2a:0c:81: 28:e7:12:80:84:62:74:b8:f0:1d:43:4c:1c:9b:0f: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2C:BF:03:6F:5D:56:FF:6E:71:DF:DD:49:00:97:D6:AF:E1:E7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6d:13:18:8c:11:c8:bc:2b:14:cb:40:4f:86:b2:6f:35:4e: 0b:c4:5b:21:3a:c2:e0:c9:99:d3:20:c6:1b:63:5d:5d:24:ce: 74:6d:cd:88:e6:ac:24:b9:5e:0c:c8:68:3c:6e:a4:53:29:fa: 20:5a:07:97:3d:c6:2d:30:17:36:f4:95:55:03:e9:01:5d:3e: 9e:e5:53:bf:75:ab:3f:73:c2:f4:f1:93:36:cb:56:3e:38:6f: 0b:ff:2c:89:f9:2a:0e:18:21:8b:4b:b1:bf:cf:20:0b:14:1b: 6d:aa:2f:3e:80:59:37:4a:8f:98:9f:67:2c:43:1e:d1:5d:a4: e9:f5:6c:e0:29:e6:61:27:93:7b:27:f2:21:d3:7c:db:c7:b5: 49:df:a9:43:d5:2f:0c:62:bc:10:5f:d7:8f:f0:5f:2a:05:06: a4:77:1b:2e:f8:f3:06:01:82:02:e8:8b:b4:ba:73:b6:7d:1d: 12:3c:72:ae:81:8e:58:05:fa:19:09:76:85:68:c7:a8:2c:c5: 0f:73:15:d2:81:f6:c1:98:f5:08:1c:5e:24:a7:54:d4:99:76: a1:42:73:54:e5:a5:15:a5:17:84:39:1d:82:a9:fe:4e:ed:dc: 4d:cc:80:b4:09:45:ee:20:66:27:37:0c:0f:65:e9:06:cb:52: 60:b4:e9:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+N2I/CeoeX6u5OsIQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk YTViMzNhMjctNTc4YS00ODYwLTk1N2MtM2M2YzRjMzc4ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TLfwk72xLhtehgKv1xe3hYSogGyAHIE0f60 RxkMNFEIcG0SkKqtc4TZtQHqMZk1M+7wLkTmg4yqFz1I+iipPmsZ4fkq+fXIpTwT nK99i7HOXllSNvIqgAlPs4hh1upfrmV7NG1nRzF7ISJ+SfqKBkFI/0dgn1/UEI7j 3NMts1wCRbZHlWAec/lCV2YSbhBoEvnaXIrGKn7NMgXC1QIYW96bj1r6/LPCtMiz jLl7M+pmQPN99w6VN3mEBQGPKWTeHG2YjmNHePLr7p06z1hjYwkgMTf2aq0O8tMW 70X/8NOMmb8Ns+aA99Sscb8qDIEo5xKAhGJ0uPAdQ0wcmw8SJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNosvwNvXVb/bnHf3UkAl9av4edUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWE3YWMxNTYtZThmOC0z NmUyLWE4ODEtZTJmMTgxNjc4ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGltExiMEci8KxTLQE+Gsm81TgvEWyE6wuDJmdMgxhtjXV0kznRt zYjmrCS5XgzIaDxupFMp+iBaB5c9xi0wFzb0lVUD6QFdPp7lU791qz9zwvTxkzbL Vj44bwv/LIn5Kg4YIYtLsb/PIAsUG22qLz6AWTdKj5ifZyxDHtFdpOn1bOAp5mEn k3sn8iHTfNvHtUnfqUPVLwxivBBf14/wXyoFBqR3Gy748wYBggLoi7S6c7Z9HRI8 cq6BjlgF+hkJdoVox6gsxQ9zFdKB9sGY9QgcXiSnVNSZdqFCc1TlpRWlF4Q5HYKp /k7t3E3MgLQJRe4gZic3DA9l6QbLUmC06W0= -----END CERTIFICATE-----Generated at Tue Oct 20 04:26:50 2026 by rpki-client