$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa File: 25d5fb20-00ff-338f-af57-8b01fa608dee.roa (raw, json) Hash identifier: YBc8MmFvHJVEsqh5zaFh8HI4+r/lm/vxXjfggd+CQrU= Subject key identifier: EB:03:43:3E:24:47:66:2E:7A:C0:E9:30:C3:E6:CE:97:F4:F3:A2:C5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D07ACF1A52A18FCA46FF23040 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 9009 IP address blocks: 2607:740:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f1:a5:2a:18:fc:a4:6f:f2:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=d9482f77-9d38-453a-a5b1-d19e17d42d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:e0:0d:86:cf:ee:11:25:67:26:d1:45:c5: af:a5:31:98:e8:dc:9e:4b:6b:71:df:83:a6:7e:4f: 2c:de:c4:fd:d6:e2:2f:7b:0e:a3:06:db:a4:e7:f0: 6a:e6:48:f2:99:44:3a:7c:5c:7d:0f:17:46:36:92: 2a:79:13:a2:63:35:ca:23:5b:6f:56:28:0f:f8:a0: 98:41:19:36:bf:f1:65:37:c5:f7:76:ee:2a:b0:da: 75:bb:ee:56:b6:ca:68:c4:6c:c9:14:d6:c8:b3:cf: d2:dd:36:8f:f0:76:e1:bc:e0:ee:8a:46:14:e2:ad: 29:7b:33:1e:85:83:10:68:0b:d3:cc:ea:fe:1f:b7: 8e:86:3b:8f:7b:e0:ee:f3:f4:33:bd:b3:8e:65:53: 24:6c:3e:9d:90:14:ae:8c:65:3d:b8:a3:21:87:34: 53:f7:45:ab:3e:51:6b:a2:af:77:c9:13:00:65:ee: 81:d2:df:ed:96:e7:b1:f4:44:cd:e7:39:fa:bd:55: 58:6d:71:67:9a:e9:98:1a:01:67:a0:c3:ac:0d:68: 75:2c:73:b8:34:39:bc:e3:74:bf:f6:4d:38:da:3b: 55:31:c6:31:10:1d:23:50:29:27:93:f9:33:6e:6e: 41:e0:d2:93:34:0c:05:b7:2b:87:c1:72:ea:2c:29: fd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:43:3E:24:47:66:2E:7A:C0:E9:30:C3:E6:CE:97:F4:F3:A2:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/25d5fb20-00ff-338f-af57-8b01fa608dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a4:d6:ce:ac:e1:31:37:a2:1e:f4:d7:b1:48:7a:66:16:67: 29:8d:c5:56:4f:bf:7a:6e:6d:65:31:0e:2c:e6:f2:fb:b7:53: 5a:78:c3:7f:3e:47:f0:c3:ad:61:f0:23:8e:71:aa:a6:26:97: d9:96:d6:19:94:75:72:01:ef:79:c4:1c:a4:2a:52:8e:a9:8e: d6:9b:2b:15:c9:2b:19:6b:04:6a:13:99:bd:86:6e:69:de:e1: 5e:30:af:95:66:ee:84:3b:dc:66:fc:19:80:ae:d6:bc:3d:0f: 3e:f4:3b:4c:09:f3:05:17:89:8a:95:80:06:60:cd:b4:d4:fe: 14:01:4f:e3:95:5d:42:4b:91:9e:45:28:3c:78:95:a4:63:80: 8c:11:5b:8b:77:79:8b:f2:b4:6a:41:9b:da:14:31:5f:a8:cc: a5:c1:df:34:5a:d8:9d:ee:d3:1d:3c:89:1c:1a:55:ab:12:40: d5:95:da:47:49:d2:6b:3e:4f:71:28:a3:fd:f9:10:ff:70:ca: 43:dd:3c:c6:d7:23:34:f1:7f:62:81:7c:8c:03:9c:00:5c:9f: 81:15:9c:6a:58:63:66:f5:92:fd:74:0b:de:b2:83:4e:64:f8: 3b:bc:2e:f4:7f:aa:b6:e7:bd:10:48:3f:c2:cf:39:08:c0:1e: 2c:6b:6d:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrPGlKhj8pG/yMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDk0ODJmNzctOWQzOC00NTNhLWE1YjEtZDE5ZTE3ZDQyZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhPgDYbP7hElZybRRcWvpTGY6NyeS2tx34Om fk8s3sT91uIvew6jBtuk5/Bq5kjymUQ6fFx9DxdGNpIqeROiYzXKI1tvVigP+KCY QRk2v/FlN8X3du4qsNp1u+5WtspoxGzJFNbIs8/S3TaP8HbhvODuikYU4q0pezMe hYMQaAvTzOr+H7eOhjuPe+Du8/QzvbOOZVMkbD6dkBSujGU9uKMhhzRT90WrPlFr oq93yRMAZe6B0t/tluex9ETN5zn6vVVYbXFnmumYGgFnoMOsDWh1LHO4NDm843S/ 9k042jtVMcYxEB0jUCknk/kzbm5B4NKTNAwFtyuHwXLqLCn9+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsDQz4kR2YuesDpMMPmzpf086LFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMjVkNWZiMjAtMDBmZi0z MzhmLWFmNTctOGIwMWZhNjA4ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqk1s6s4TE3oh7017FIemYWZymNxVZPv3pubWUxDizm8vu3U1p4 w38+R/DDrWHwI45xqqYml9mW1hmUdXIB73nEHKQqUo6pjtabKxXJKxlrBGoTmb2G bmne4V4wr5Vm7oQ73Gb8GYCu1rw9Dz70O0wJ8wUXiYqVgAZgzbTU/hQBT+OVXUJL kZ5FKDx4laRjgIwRW4t3eYvytGpBm9oUMV+ozKXB3zRa2J3u0x08iRwaVasSQNWV 2kdJ0ms+T3Eoo/35EP9wykPdPMbXIzTxf2KBfIwDnABcn4EVnGpYY2b1kv10C96y g05k+Du8LvR/qrbnvRBIP8LPOQjAHixrbbg= -----END CERTIFICATE-----Generated at Tue Mar 3 09:46:39 2026 by rpki-client