$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa File: 1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa (raw, json) Hash identifier: Eikyg2s1EK/yC33q3FW6PlyJ6O/Asg3OhPgLyTG43/M= Subject key identifier: 7D:F8:F5:90:B8:32:47:6D:9C:61:49:F6:EE:E7:D8:C9:5A:E4:3C:34 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D09125D1B4823BA0CCD641E00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 9009 IP address blocks: 2607:740:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5d:1b:48:23:ba:0c:cd:64:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=108fd27d-c938-49bc-a4aa-eb3806903fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:9a:57:cb:eb:f6:01:59:1e:10:80:25:61: 1f:10:2e:27:ff:e8:b8:3d:d3:53:a6:32:1b:b7:bf: ee:a8:88:7a:b2:cd:1f:c4:87:b9:09:18:7f:0e:11: ab:31:d5:50:56:e6:b5:99:34:53:8a:c9:06:88:47: a7:5f:fa:5c:21:79:b0:79:f0:e5:9c:6d:f7:a0:9a: 69:ec:1f:23:91:60:ec:ec:38:39:a6:e5:a0:8f:5b: d9:e9:2a:c0:31:4a:c4:41:30:4a:21:c7:6f:04:cc: b6:55:56:5e:06:df:7a:f0:bc:03:94:70:f7:e6:a7: 13:28:dd:a4:96:db:c5:90:cb:28:b4:77:5c:77:2e: 98:08:73:06:bb:46:9c:80:40:f7:3d:b5:3b:7e:fb: 7f:e7:12:d5:6e:d5:2e:fb:85:1e:45:42:41:e3:8d: 35:41:f9:64:a4:c8:c6:d9:5f:45:d3:2b:d0:98:22: 5c:4c:8c:65:3b:c1:3e:15:27:d8:21:53:1e:22:b7: d0:8c:ca:8f:41:c1:0e:ae:54:0c:34:34:57:7d:fd: 94:d4:c7:98:63:66:65:c3:59:ef:35:f3:85:b6:79: b3:24:47:a7:f2:1b:25:ad:5d:91:23:bb:2a:bc:39: c0:79:43:bc:fd:cf:2a:f3:75:8a:2a:4a:1d:30:ec: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F8:F5:90:B8:32:47:6D:9C:61:49:F6:EE:E7:D8:C9:5A:E4:3C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1cd80803-3adb-3bb5-8b52-40b3aa17f948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3d:9e:7c:d3:36:18:81:d4:d7:22:f3:2a:03:3c:53:57:47: 21:f0:06:30:aa:c3:b5:ba:50:fb:dc:ce:52:f5:00:0f:92:65: 36:30:7d:7c:f8:40:72:27:be:d6:5e:2e:2c:a1:f0:0b:9f:19: b9:96:4f:2d:2e:e8:c7:e4:fb:94:60:50:c4:7b:07:7a:e4:6a: 0e:3d:1d:9b:95:54:70:03:ef:b1:1f:ab:6c:5a:cf:b0:9b:a2: bd:0a:db:44:5f:07:75:24:23:3e:81:13:8e:ed:64:3a:a7:58: ed:24:95:c5:19:32:30:25:8d:c3:8f:43:36:91:6f:de:08:0d: 3a:97:ab:4d:14:74:ba:fd:5e:c4:70:d3:59:4a:ed:63:5b:84: 5d:97:18:e7:b5:f9:44:6c:dc:28:3b:51:43:59:c2:a7:8f:aa: d4:25:a1:7c:f1:bc:c6:25:63:58:b4:31:de:d0:52:ba:47:c3: 51:05:b9:cc:88:02:65:07:41:2c:25:7b:6c:f7:72:fa:ed:c4: c5:4a:2e:66:9c:59:a0:b9:9e:5c:f4:c8:7b:82:29:7b:da:6d: 84:ea:ce:d3:5c:e9:65:f4:0f:b5:97:1a:76:42:ad:5f:4e:19: 9d:36:87:4b:82:6b:14:d3:50:66:22:24:c4:4c:27:c9:e2:a1: a3:b6:74:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEl0bSCO6DM1kHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTA4ZmQyN2QtYzkzOC00OWJjLWE0YWEtZWIzODA2OTAzZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXuaV8vr9gFZHhCAJWEfEC4n/+i4PdNTpjIb t7/uqIh6ss0fxIe5CRh/DhGrMdVQVua1mTRTiskGiEenX/pcIXmwefDlnG33oJpp 7B8jkWDs7Dg5puWgj1vZ6SrAMUrEQTBKIcdvBMy2VVZeBt968LwDlHD35qcTKN2k ltvFkMsotHdcdy6YCHMGu0acgED3PbU7fvt/5xLVbtUu+4UeRUJB4401QflkpMjG 2V9F0yvQmCJcTIxlO8E+FSfYIVMeIrfQjMqPQcEOrlQMNDRXff2U1MeYY2Zlw1nv NfOFtnmzJEen8hslrV2RI7sqvDnAeUO8/c8q83WKKkodMOzCmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH349ZC4MkdtnGFJ9u7n2Mla5Dw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWNkODA4MDMtM2FkYi0z YmI1LThiNTItNDBiM2FhMTdmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABA9nnzTNhiB1Nci8yoDPFNXRyHwBjCqw7W6UPvczlL1AA+SZTYw fXz4QHInvtZeLiyh8AufGbmWTy0u6Mfk+5RgUMR7B3rkag49HZuVVHAD77Efq2xa z7Cbor0K20RfB3UkIz6BE47tZDqnWO0klcUZMjAljcOPQzaRb94IDTqXq00UdLr9 XsRw01lK7WNbhF2XGOe1+URs3Cg7UUNZwqePqtQloXzxvMYlY1i0Md7QUrpHw1EF ucyIAmUHQSwle2z3cvrtxMVKLmacWaC5nlz0yHuCKXvabYTqztNc6WX0D7WXGnZC rV9OGZ02h0uCaxTTUGYiJMRMJ8nioaO2dCA= -----END CERTIFICATE-----Generated at Tue Mar 3 09:42:27 2026 by rpki-client