$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa File: 4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa (raw, json) Hash identifier: 9oDfAJEsXwJqYl7GYwkFKqIyRLYdeyK7BguKK1noITg= Subject key identifier: E5:BD:20:64:04:5E:1A:20:20:73:DA:4E:3A:A8:09:C7:FC:FD:B6:53 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E815FBCBD98B87A252F9D6600 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 209181 IP address blocks: 2607:740:5a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:bc:bd:98:b8:7a:25:2f:9d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=5e4cab44-3a30-4a39-85be-a0ff0ddded88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:7c:18:44:5d:f1:9d:1b:9f:c2:7a:af:e0: b2:1c:1e:03:f4:c2:34:83:4f:09:b2:02:fb:17:38: 67:35:f6:56:e3:d4:f5:cd:5a:ef:6a:11:fc:8e:44: 74:2a:7f:c4:59:e7:00:15:36:e0:98:6c:58:68:c4: 02:6f:11:7d:45:b2:f9:d1:25:53:e0:cd:d5:cf:d1: 41:2a:68:f8:79:89:9c:f4:9a:0c:1a:e2:8c:f2:19: 95:27:e3:aa:f4:87:c9:05:55:ba:c7:0e:a3:78:f0: cc:07:87:eb:70:b9:92:91:d3:79:8d:5e:17:81:c2: 1d:68:58:40:15:a4:e8:ff:1f:8e:ee:5e:1e:e0:4d: 6b:8d:b1:31:23:22:0d:c4:4d:9d:f8:55:1e:f4:ee: 3d:61:f9:16:73:0f:1b:fc:c7:ac:3c:2f:ba:11:f9: 7e:17:a8:9b:98:c8:cb:ca:0a:bd:9e:35:a6:e7:28: b2:65:a3:48:71:cc:db:3d:37:4a:9f:30:3c:bb:ea: bc:98:1f:e3:96:6b:10:d1:f4:54:e7:a9:f1:22:bf: c6:e4:9c:c0:59:d8:ea:34:3a:35:01:6f:9a:53:cc: c6:c1:a2:c3:05:1f:37:db:8f:6c:a7:f1:b8:fc:19: 22:c0:f1:7f:be:24:50:f7:de:3f:ca:2b:00:e9:ff: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BD:20:64:04:5E:1A:20:20:73:DA:4E:3A:A8:09:C7:FC:FD:B6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3b:0a:b2:0e:78:6a:88:78:74:4b:b4:dc:39:99:ed:18:47: 71:0c:a6:71:09:8f:dd:3f:b0:85:e2:9f:13:8b:21:e1:0b:50: 7c:2c:34:f1:39:52:32:b7:71:86:13:e9:63:be:1d:60:06:84: 48:c5:0b:0e:1f:41:15:98:32:e0:dc:e8:aa:42:f1:19:7d:c8: dd:80:d1:d1:78:4a:46:ca:4e:60:b7:e5:04:e8:f0:04:46:13: ef:70:ac:65:83:e3:d1:87:c9:04:9b:40:03:68:19:02:22:27: 09:6f:86:09:ac:0b:73:fb:e9:23:72:e2:65:e2:0c:39:65:e5: d2:f3:0d:f7:38:f1:31:29:b3:fd:30:25:6c:08:63:04:e3:db: fa:b6:a9:b9:5a:57:b5:b7:78:38:ea:de:a8:35:ad:ad:bb:94: 62:00:c6:a9:e0:0a:b0:39:d0:e8:d2:7d:b3:a9:e0:e4:ac:4e: de:1a:54:c2:2d:a4:20:a2:35:45:7d:f1:de:4c:b5:7f:14:76: c6:4c:80:70:0c:1b:a1:30:e4:b3:15:a7:86:48:e8:4d:c7:a9: 96:a5:64:14:69:e7:84:f9:d1:aa:18:90:f2:99:8d:ab:c6:50: cd:88:f8:fd:d3:90:d2:ae:5e:97:06:25:fe:b8:c8:68:a7:07: 2d:5e:b1:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6BX7y9mLh6JS+dZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk NWU0Y2FiNDQtM2EzMC00YTM5LTg1YmUtYTBmZjBkZGRlZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVJ8GERd8Z0bn8J6r+CyHB4D9MI0g08JsgL7 FzhnNfZW49T1zVrvahH8jkR0Kn/EWecAFTbgmGxYaMQCbxF9RbL50SVT4M3Vz9FB Kmj4eYmc9JoMGuKM8hmVJ+Oq9IfJBVW6xw6jePDMB4frcLmSkdN5jV4XgcIdaFhA FaTo/x+O7l4e4E1rjbExIyINxE2d+FUe9O49YfkWcw8b/MesPC+6Efl+F6ibmMjL ygq9njWm5yiyZaNIcczbPTdKnzA8u+q8mB/jlmsQ0fRU56nxIr/G5JzAWdjqNDo1 AW+aU8zGwaLDBR83249sp/G4/BkiwPF/viRQ994/yisA6f/v3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOW9IGQEXhogIHPaTjqoCcf8/bZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDAwOGI3NDMtMTYwYi0z YjNmLWFkNWQtYWE0YTg1ZjAxNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAw7CrIOeGqIeHRLtNw5me0YR3EMpnEJj90/sIXinxOLIeELUHws NPE5UjK3cYYT6WO+HWAGhEjFCw4fQRWYMuDc6KpC8Rl9yN2A0dF4SkbKTmC35QTo 8ARGE+9wrGWD49GHyQSbQANoGQIiJwlvhgmsC3P76SNy4mXiDDll5dLzDfc48TEp s/0wJWwIYwTj2/q2qblaV7W3eDjq3qg1ra27lGIAxqngCrA50OjSfbOp4OSsTt4a VMItpCCiNUV98d5MtX8UdsZMgHAMG6Ew5LMVp4ZI6E3HqZalZBRp54T50aoYkPKZ javGUM2I+P3TkNKuXpcGJf64yGinBy1esaU= -----END CERTIFICATE-----Generated at Sat Jul 18 02:31:10 2026 by rpki-client