$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa File: 5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa (raw, json) Hash identifier: /cu3Btm054jh28R9KxSJXQY18qRF7aG4gR5dW1ndYuo= Subject key identifier: C7:6D:EB:B3:E1:06:37:F9:EB:0F:3C:D3:67:C5:0E:00:E7:47:44:27 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D09125C8E5A9FFAD536507200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 9009 IP address blocks: 2607:740:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5c:8e:5a:9f:fa:d5:36:50:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=5dfc14aa-288c-4a18-aa75-4d036dcb1eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3d:6a:fb:c9:da:aa:db:6d:2d:d8:ba:fa:2f: 6d:38:13:8a:09:dd:87:c2:14:ff:8d:7a:60:a4:c4: 6f:43:31:b9:f0:7e:c3:f1:4a:d3:6b:f7:5f:c4:c0: 2b:7c:ad:92:1e:f3:1d:cf:69:d5:b9:5a:84:19:08: e5:81:50:48:c9:8b:7d:ea:4d:0f:42:75:9e:03:56: 0c:0f:09:2b:70:02:19:de:88:9d:8a:12:b9:fa:9d: 02:5f:59:95:c9:2d:f7:fa:5e:32:19:8a:3a:e4:54: 04:f8:69:53:1b:b0:85:99:db:c8:b1:b7:c4:7b:72: e1:49:5e:d2:0f:8c:17:b4:31:72:df:72:c9:41:85: 15:b3:20:08:88:90:b3:9a:81:40:b6:4e:55:a4:7d: 72:77:c8:f6:04:9b:51:30:43:81:d5:22:d8:d3:16: a9:c0:bd:de:b8:c0:4b:f3:b4:06:04:45:e4:d4:39: 73:7b:11:95:c6:7e:3e:4a:bb:6a:46:5c:ee:04:5d: d0:2d:4f:04:49:21:49:a9:9a:30:45:f8:59:4e:a6: 1c:a3:17:fd:40:28:c7:6e:78:16:88:13:54:83:df: 9d:7c:1b:a9:e1:af:8c:ec:e4:d2:5d:f0:f6:3b:16: 3b:0d:f4:1b:4b:d7:dc:a4:c2:44:83:6a:c8:7f:b5: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6D:EB:B3:E1:06:37:F9:EB:0F:3C:D3:67:C5:0E:00:E7:47:44:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b3:09:30:f6:21:11:e9:37:05:36:4d:17:65:8e:82:65:93: 69:03:97:cf:14:9d:3c:5e:f7:02:88:54:c3:29:39:b6:2d:a3: 39:44:21:1b:7e:f6:5c:f0:6f:d2:a7:ed:b7:05:5b:56:23:f3: 3f:82:e9:99:96:7d:cc:61:39:e9:31:8f:b9:3b:1a:7c:c7:1d: ec:4e:a7:c5:eb:bd:eb:df:83:3f:0a:29:9c:e7:13:58:eb:3c: 31:e2:66:b6:c9:a5:7f:39:1e:0a:58:77:fe:46:f8:1b:b1:87: ba:10:b1:7e:d9:93:bb:14:eb:8c:94:fd:d4:f0:cd:77:ee:1c: 2a:58:76:2a:ff:df:7a:74:33:3d:69:ca:ad:a0:a4:36:93:42: aa:ee:f9:a8:78:c4:e4:14:42:cf:cf:72:2e:66:ba:6e:1d:eb: 70:63:ab:be:74:75:fd:61:ae:87:5e:75:ec:c1:28:03:7b:f2: e5:27:2a:fd:ed:60:54:a4:b4:28:94:58:92:6b:b5:79:56:3b: 6e:ae:57:9d:63:13:84:4a:be:f7:a4:c6:50:b3:5c:2a:c2:70: 33:5d:2a:9b:c6:9b:ac:e7:99:fc:36:17:59:08:06:cd:fd:c0: 83:73:3a:4b:de:92:3a:11:84:5c:c9:3f:91:fb:39:5b:ce:c6: 9f:12:99:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElyOWp/61TZQcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWRmYzE0YWEtMjg4Yy00YTE4LWFhNzUtNGQwMzZkY2IxZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D1q+8naqtttLdi6+i9tOBOKCd2HwhT/jXpg pMRvQzG58H7D8UrTa/dfxMArfK2SHvMdz2nVuVqEGQjlgVBIyYt96k0PQnWeA1YM DwkrcAIZ3oidihK5+p0CX1mVyS33+l4yGYo65FQE+GlTG7CFmdvIsbfEe3LhSV7S D4wXtDFy33LJQYUVsyAIiJCzmoFAtk5VpH1yd8j2BJtRMEOB1SLY0xapwL3euMBL 87QGBEXk1DlzexGVxn4+SrtqRlzuBF3QLU8ESSFJqZowRfhZTqYcoxf9QCjHbngW iBNUg9+dfBup4a+M7OTSXfD2OxY7DfQbS9fcpMJEg2rIf7XugQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdt67PhBjf56w8802fFDgDnR0QnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTMzN2IxMzgtMGZlOS0z YjZkLWFlMjEtNWZmNmZmNDQ3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyzCTD2IRHpNwU2TRdljoJlk2kDl88UnTxe9wKIVMMpObYtozlE IRt+9lzwb9Kn7bcFW1Yj8z+C6ZmWfcxhOekxj7k7GnzHHexOp8Xrvevfgz8KKZzn E1jrPDHiZrbJpX85HgpYd/5G+Buxh7oQsX7Zk7sU64yU/dTwzXfuHCpYdir/33p0 Mz1pyq2gpDaTQqru+ah4xOQUQs/Pci5mum4d63Bjq750df1hrodedezBKAN78uUn Kv3tYFSktCiUWJJrtXlWO26uV51jE4RKvvekxlCzXCrCcDNdKpvGm6znmfw2F1kI Bs39wINzOkvekjoRhFzJP5H7OVvOxp8SmT4= -----END CERTIFICATE-----Generated at Tue Mar 3 09:43:42 2026 by rpki-client