$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa File: 1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa (raw, json) Hash identifier: F7I5BRlkScJp7LB2Ktm3KIU9+c/157+VAu6+0Eo/OJU= Subject key identifier: 9E:EB:AA:D8:49:45:8D:38:92:21:E9:B7:DC:28:72:0B:17:55:97:CC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DE9B07CEE095654B0BC19F000 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 9009 IP address blocks: 2607:740:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:7c:ee:09:56:54:b0:bc:19:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=4aa7af30-74b3-4800-b78d-7e9b20f4bace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:dd:71:fb:5b:b6:6a:dc:14:ff:de:70:b6: 79:c7:19:f5:cb:0d:06:00:f4:9f:75:90:9b:cc:c7: 1b:7a:72:24:05:d8:a7:79:07:87:8b:a2:f3:fb:ac: 1a:9d:35:f8:45:3b:33:ef:a6:cd:a9:d0:a7:72:b6: 6c:ea:63:4d:38:6b:e3:11:56:e5:92:23:a3:2c:fb: 11:c8:34:8c:29:49:d2:fe:87:e9:4c:33:d2:a7:1a: d9:62:36:c9:76:74:29:6d:48:f8:28:d2:92:81:da: 86:76:83:43:14:0a:01:87:5e:5e:b4:e4:8e:23:ad: 02:78:2b:90:f4:6e:ca:70:33:2a:b1:1f:63:84:4e: 79:95:55:67:88:12:51:83:ac:10:a6:34:a8:f4:13: 0c:1b:47:5a:10:50:cf:13:72:4a:23:d6:99:3d:6f: df:05:1f:6a:4c:ee:1f:15:9e:f4:11:d0:e0:ba:ab: 45:0c:b1:af:86:32:5f:cf:d7:0d:28:eb:5b:a4:36: 95:c2:4d:ee:88:c0:6d:65:e4:bf:3f:41:41:67:ce: 90:43:93:be:1b:d1:c4:f8:4f:b1:a0:ff:d9:ab:e6: 82:82:18:a2:e8:97:83:91:fd:61:3f:36:74:42:0a: 0e:44:67:6c:1e:c4:a3:40:87:53:d3:c1:bc:a5:ad: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EB:AA:D8:49:45:8D:38:92:21:E9:B7:DC:28:72:0B:17:55:97:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ae:4d:27:c1:35:2c:ba:cb:fa:15:b7:96:f3:55:0d:c9:33: cb:aa:d2:06:34:94:85:a8:ec:4a:84:84:88:de:0b:b1:19:9c: 57:df:d3:47:d1:b8:3e:46:18:2d:b1:ce:fa:75:d0:d2:7a:e7: 56:ab:4e:1a:0d:de:b7:ee:ad:66:08:e3:da:b2:27:a1:71:97: f2:79:06:e1:e4:c0:ac:d5:10:b0:92:be:8d:69:61:7b:2e:80: 9c:c6:8a:aa:83:95:f4:76:a0:eb:b9:b2:b6:81:54:2a:85:16: 9a:55:c9:af:55:19:8f:b8:61:f6:06:93:89:ba:78:cc:94:8c: 79:94:ce:36:5f:90:56:51:f0:11:61:a9:13:38:23:56:52:d5: 32:cd:35:6f:35:e1:47:e0:b8:68:ec:61:bb:ad:78:90:51:26: be:7f:89:09:61:fc:6a:7a:7e:c1:56:14:e2:37:a0:68:b8:d5: 92:6c:c6:91:39:41:39:e5:d4:42:8f:66:65:48:aa:73:e6:e5: 64:67:92:78:2f:48:2b:45:80:16:39:bd:97:94:25:01:0a:e1: 98:fa:23:9d:6e:88:2f:ed:de:ea:05:5b:b1:92:46:6e:fa:dd: bb:b3:72:bd:62:b7:e0:07:d6:d1:cb:a4:77:4d:3b:5c:9d:e0: 91:83:6a:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psHzuCVZUsLwZ8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk NGFhN2FmMzAtNzRiMy00ODAwLWI3OGQtN2U5YjIwZjRiYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntndcftbtmrcFP/ecLZ5xxn1yw0GAPSfdZCb zMcbenIkBdineQeHi6Lz+6wanTX4RTsz76bNqdCncrZs6mNNOGvjEVblkiOjLPsR yDSMKUnS/ofpTDPSpxrZYjbJdnQpbUj4KNKSgdqGdoNDFAoBh15etOSOI60CeCuQ 9G7KcDMqsR9jhE55lVVniBJRg6wQpjSo9BMMG0daEFDPE3JKI9aZPW/fBR9qTO4f FZ70EdDguqtFDLGvhjJfz9cNKOtbpDaVwk3uiMBtZeS/P0FBZ86QQ5O+G9HE+E+x oP/Zq+aCghii6JeDkf1hPzZ0QgoORGdsHsSjQIdT08G8pa0OTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7rqthJRY04kiHpt9wocgsXVZfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWNkODA4MDMtM2FkYi0z YmI1LThiNTItNDBiM2FhMTdmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHauTSfBNSy6y/oVt5bzVQ3JM8uq0gY0lIWo7EqEhIjeC7EZnFff 00fRuD5GGC2xzvp10NJ651arThoN3rfurWYI49qyJ6Fxl/J5BuHkwKzVELCSvo1p YXsugJzGiqqDlfR2oOu5sraBVCqFFppVya9VGY+4YfYGk4m6eMyUjHmUzjZfkFZR 8BFhqRM4I1ZS1TLNNW814UfguGjsYbuteJBRJr5/iQlh/Gp6fsFWFOI3oGi41ZJs xpE5QTnl1EKPZmVIqnPm5WRnkngvSCtFgBY5vZeUJQEK4Zj6I51uiC/t3uoFW7GS Rm763buzcr1it+AH1tHLpHdNO1yd4JGDauE= -----END CERTIFICATE-----Generated at Tue Jun 2 21:51:20 2026 by rpki-client