$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa File: 5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa (raw, json) Hash identifier: T+BCLq11uzNgWLdR2oLkIosQwzUaVnaBFRgHW63f3tY= Subject key identifier: F1:14:14:23:73:45:DD:7B:1D:A7:30:08:E6:A3:C4:66:08:A7:54:AA Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA79268DBED69B6BCFEC0A280 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 2607:740:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:68:db:ed:69:b6:bc:fe:c0:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4baa61ae-5779-43c3-8d26-4eaca75ad5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:86:0b:a5:6d:7c:b7:45:54:ca:e6:df:07: 85:ea:ad:4d:49:88:12:43:1d:cb:7c:e9:f4:a9:a5: cd:16:46:0f:ba:31:1e:47:9d:2f:85:0b:75:c9:ad: eb:14:7d:ed:56:19:9f:d2:a8:8f:ea:cd:c5:fc:30: 33:bf:79:69:67:fc:0e:33:92:1c:f8:3f:a6:f7:75: 01:57:8a:31:54:58:b3:e5:9a:9b:6f:70:e5:11:ec: 0d:01:41:14:fb:79:cc:e9:e7:55:e2:07:14:ea:f9: 59:31:8e:07:da:54:e7:7a:6c:bb:88:25:b9:9b:37: 7c:88:51:dd:16:0b:60:7a:c9:3e:52:5d:4e:13:f5: 8d:fb:c3:c6:e1:b4:6c:26:b8:44:f9:3a:07:f2:68: 12:d1:23:67:f3:1e:a5:06:a7:72:28:e8:69:e7:0f: a3:14:9e:48:e4:ac:ff:18:52:67:99:0c:55:d3:25: 04:cc:76:76:c2:0d:f2:46:3b:16:d1:a7:09:26:ec: 80:fd:0e:cc:da:62:a5:e2:b6:99:1f:db:8f:dc:b0: 5d:c8:2a:f0:ce:f8:1c:f2:d7:a7:57:b3:5d:09:b4: 6b:01:3f:6a:67:a4:d9:dc:6e:eb:27:b9:72:e5:6c: 3c:e1:b8:5b:c0:f9:de:ca:97:77:bc:2a:01:65:5c: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:14:23:73:45:DD:7B:1D:A7:30:08:E6:A3:C4:66:08:A7:54:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:1e:13:8d:d4:78:f6:26:f3:b9:96:db:ea:af:af:ea:0d: 8f:f7:7c:11:3e:a7:06:b5:0c:2e:71:0b:95:6f:70:76:26:cd: a1:af:22:49:27:5b:4d:fb:94:7d:30:8b:62:f3:12:ab:a1:d6: 78:91:4a:5b:cd:58:5a:1c:7f:10:3f:37:38:33:ec:67:6a:67: 5a:bb:54:33:9f:72:37:14:32:6b:89:10:75:b0:d7:83:05:33: f3:e4:73:19:1e:7b:9b:70:51:e8:92:c1:18:98:f9:26:d2:33: fb:eb:d3:f6:b4:bc:80:b3:11:4d:d8:ba:49:07:da:c9:b1:4e: ae:74:56:eb:b7:d1:fe:a5:eb:d3:ed:e0:d6:ac:e6:65:ce:12: 70:9b:4e:7a:3b:36:0b:dd:ee:65:b7:63:e1:d6:c7:ec:19:34: a3:52:7e:77:f2:7e:2a:db:38:29:a2:bc:52:81:2a:3d:6d:b6: de:d8:68:64:8a:aa:ca:3b:c4:3b:bc:cd:99:d8:1f:91:b2:15: 42:7f:4b:a7:d2:28:1e:dc:f9:e3:a5:76:c0:f2:d8:50:87:d1: dd:59:11:73:3a:a9:9b:47:9a:e1:41:e8:da:04:d7:0d:b9:fb: c1:a3:08:a0:0a:e5:d7:c4:07:24:97:36:ec:78:58:66:73:ce: e1:d5:23:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkmjb7Wm2vP7AooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGJhYTYxYWUtNTc3OS00M2MzLThkMjYtNGVhY2E3NWFkNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9aGC6VtfLdFVMrm3weF6q1NSYgSQx3LfOn0 qaXNFkYPujEeR50vhQt1ya3rFH3tVhmf0qiP6s3F/DAzv3lpZ/wOM5Ic+D+m93UB V4oxVFiz5Zqbb3DlEewNAUEU+3nM6edV4gcU6vlZMY4H2lTnemy7iCW5mzd8iFHd Fgtgesk+Ul1OE/WN+8PG4bRsJrhE+ToH8mgS0SNn8x6lBqdyKOhp5w+jFJ5I5Kz/ GFJnmQxV0yUEzHZ2wg3yRjsW0acJJuyA/Q7M2mKl4raZH9uP3LBdyCrwzvgc8ten V7NdCbRrAT9qZ6TZ3G7rJ7ly5Ww84bhbwPneypd3vCoBZVy+MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPEUFCNzRd17HacwCOajxGYIp1SqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTMzN2IxMzgtMGZlOS0z YjZkLWFlMjEtNWZmNmZmNDQ3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbgHhON1Hj2JvO5ltvqr6/qDY/3fBE+pwa1DC5xC5VvcHYmzaGv IkknW037lH0wi2LzEquh1niRSlvNWFocfxA/Nzgz7GdqZ1q7VDOfcjcUMmuJEHWw 14MFM/Pkcxkee5twUeiSwRiY+SbSM/vr0/a0vICzEU3YukkH2smxTq50Vuu30f6l 69Pt4Nas5mXOEnCbTno7Ngvd7mW3Y+HWx+wZNKNSfnfyfirbOCmivFKBKj1ttt7Y aGSKqso7xDu8zZnYH5GyFUJ/S6fSKB7c+eOldsDy2FCH0d1ZEXM6qZtHmuFB6NoE 1w25+8GjCKAK5dfEBySXNux4WGZzzuHVI/s= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:05 2026 by rpki-client