$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa File: 85327b21-941f-3e4d-b13b-7e28774ba9ad.roa (raw, json) Hash identifier: heqxcQWSYo18blM6gpt7pO3mmwIH7cToavTSjdfI6zE= Subject key identifier: 50:C2:7F:8F:C3:4D:1C:D4:B7:20:B5:DF:4F:29:F2:C4:4A:48:12:13 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA7925BD79F0AAC147DAE0200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 2607:740:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:5b:d7:9f:0a:ac:14:7d:ae:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d87ef9ca-52ad-41a9-a757-53323a403dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:0d:6e:5a:f6:8c:79:42:f7:c5:17:88:8e: 48:a9:2d:8c:2c:ee:6c:4f:80:cf:73:0d:61:70:ca: c7:f0:ae:e4:3e:bf:ee:d9:8b:ab:53:93:7e:27:3e: 4e:28:de:72:43:5f:1c:82:9c:b2:73:9b:e8:2e:be: d5:05:f9:2e:84:a7:23:71:dd:27:b4:4c:d9:7a:7e: e2:8c:1f:ad:56:c0:5e:6e:bf:29:e0:c4:a2:99:ef: 6f:01:70:b3:85:70:7a:56:a7:47:8e:71:38:02:bb: b3:41:00:9b:fe:21:ad:c9:0f:88:d5:e7:04:02:5e: b7:09:45:13:b8:68:6a:32:5a:f9:be:0d:c0:c3:81: 25:9c:77:6e:92:11:6e:28:0b:e6:88:06:da:1a:60: c8:7e:a0:65:e2:7d:25:5b:b2:4a:70:f6:d9:7e:8e: 29:8d:93:da:fc:4a:24:28:5c:98:c1:6a:b5:42:f3: ee:5a:ee:ac:a6:b0:aa:d6:82:bd:52:99:3e:a8:1b: 53:d6:2b:c7:cd:25:25:08:4b:76:bc:8c:b0:c4:2f: f9:13:19:d1:02:d0:28:f0:1f:b5:de:c7:fb:df:12: 29:8b:b7:33:ba:31:7c:36:ab:23:84:fc:93:79:1c: b1:87:8c:a6:da:53:77:9b:3d:d4:33:7f:51:b0:c8: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C2:7F:8F:C3:4D:1C:D4:B7:20:B5:DF:4F:29:F2:C4:4A:48:12:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/85327b21-941f-3e4d-b13b-7e28774ba9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:18:49:3e:c0:95:d7:b0:81:55:c2:e7:f6:f8:f9:26:9a: 2c:b7:02:d8:15:1a:d9:10:a5:35:c2:b7:af:ad:10:b5:ae:86: bb:6c:75:5c:f2:38:5e:89:37:ae:e4:dc:4f:d2:37:00:61:89: ba:ca:21:2a:b3:8b:42:88:f4:15:aa:57:73:b1:c8:f3:d5:9c: 98:36:3d:bf:46:25:75:b7:62:28:98:32:1d:a7:4f:a5:79:82: 42:ca:d6:c4:fe:bc:16:56:94:c9:55:bb:dd:7c:be:7a:54:1f: ff:69:4c:eb:9c:c2:50:a7:e7:0e:6b:91:e0:d3:35:2d:c5:09: 2a:77:8e:a4:5c:df:d1:ab:07:df:2d:e6:22:d1:6b:4f:4c:72: 87:8f:3a:f9:e9:fb:55:88:db:0e:03:bc:57:7b:14:fd:03:fc: 09:1b:ee:6d:eb:e7:30:2c:2f:d9:b4:39:30:57:b0:96:a2:98: 16:bb:26:f4:6f:b8:f3:65:9d:29:0c:19:9d:5f:8b:52:74:42: 8b:f5:2f:fe:f2:45:22:49:86:ae:b2:65:56:54:8d:01:99:72: a4:02:bf:ff:59:1d:95:8c:69:4c:40:a3:0a:7e:0e:99:6b:07: 31:34:ed:60:3d:6b:57:9c:08:47:63:6c:48:35:2f:d8:3f:33: 38:ad:fe:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nklvXnwqsFH2uAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDg3ZWY5Y2EtNTJhZC00MWE5LWE3NTctNTMzMjNhNDAzZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ANblr2jHlC98UXiI5IqS2MLO5sT4DPcw1h cMrH8K7kPr/u2YurU5N+Jz5OKN5yQ18cgpyyc5voLr7VBfkuhKcjcd0ntEzZen7i jB+tVsBebr8p4MSime9vAXCzhXB6VqdHjnE4AruzQQCb/iGtyQ+I1ecEAl63CUUT uGhqMlr5vg3Aw4ElnHdukhFuKAvmiAbaGmDIfqBl4n0lW7JKcPbZfo4pjZPa/Eok KFyYwWq1QvPuWu6sprCq1oK9Upk+qBtT1ivHzSUlCEt2vIywxC/5ExnRAtAo8B+1 3sf73xIpi7czujF8NqsjhPyTeRyxh4ym2lN3mz3UM39RsMh+pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDCf4/DTRzUtyC1308p8sRKSBITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvODUzMjdiMjEtOTQxZi0z ZTRkLWIxM2ItN2UyODc3NGJhOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVxGEk+wJXXsIFVwuf2+Pkmmiy3AtgVGtkQpTXCt6+tELWuhrts dVzyOF6JN67k3E/SNwBhibrKISqzi0KI9BWqV3OxyPPVnJg2Pb9GJXW3YiiYMh2n T6V5gkLK1sT+vBZWlMlVu918vnpUH/9pTOucwlCn5w5rkeDTNS3FCSp3jqRc39Gr B98t5iLRa09McoePOvnp+1WI2w4DvFd7FP0D/Akb7m3r5zAsL9m0OTBXsJaimBa7 JvRvuPNlnSkMGZ1fi1J0Qov1L/7yRSJJhq6yZVZUjQGZcqQCv/9ZHZWMaUxAowp+ DplrBzE07WA9a1ecCEdjbEg1L9g/Mzit/kI= -----END CERTIFICATE-----Generated at Tue Sep 1 03:05:25 2026 by rpki-client