$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa File: a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa (raw, json) Hash identifier: Qv7O+9ASKxHzTEB1Ltp0uRvFAmH1PzmvbTlfPzXbSHI= Subject key identifier: 25:6D:34:32:B2:AF:BA:CF:43:AC:F2:8C:BE:4C:88:C6:0F:8A:CE:30 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D091256093BF494CED26F5F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 9009 IP address blocks: 2607:740:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:56:09:3b:f4:94:ce:d2:6f:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=cb5c52e6-14ad-46c9-aa5a-7ff175e882f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:8c:9d:1a:60:88:a1:ce:dc:b2:26:a3:2f: 1d:09:95:b9:59:2e:66:ff:ad:8c:4c:a6:8e:bb:ed: f8:aa:07:cb:85:11:0d:18:51:36:b8:a9:b7:b7:47: 81:1d:51:f1:c9:c6:0a:a6:63:22:0c:57:66:71:c9: 59:70:65:bd:8c:ab:0b:9a:cf:87:63:61:33:91:d8: b0:2e:be:67:6f:b1:7d:d8:47:91:f1:50:3d:93:79: b6:26:f2:09:b7:17:bb:e3:9c:f6:78:70:c6:d3:d8: 45:77:fc:83:59:ea:1c:0f:4a:59:3f:c5:e5:98:e5: 85:92:1b:84:f5:41:91:61:7f:4d:aa:ae:9f:37:6a: 27:54:81:f0:58:fe:ff:42:7b:ba:81:1f:37:96:ad: 2b:70:ea:89:7c:b3:b6:c7:1f:d1:9a:05:01:87:99: b9:77:84:05:c3:9b:26:c0:98:af:d1:7f:f7:b3:31: 0e:08:7c:98:f4:40:59:1c:98:24:e7:1a:0f:1f:ef: 5e:5d:e0:a6:a5:7b:2a:3c:d6:36:7a:bf:3c:c1:e5: ad:10:fd:62:73:36:1b:18:73:ac:5a:e0:dc:fd:2f: 85:a6:25:6f:e7:2b:c7:14:f5:b8:91:4e:3c:6f:d8: aa:96:94:e2:0b:6a:6a:91:48:89:5e:45:8c:69:7c: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6D:34:32:B2:AF:BA:CF:43:AC:F2:8C:BE:4C:88:C6:0F:8A:CE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b4:10:2c:cc:4b:23:c1:e5:db:7b:7c:4c:34:6c:97:8e:77: 1a:3f:32:ba:23:f9:b1:ec:d1:31:6f:38:18:85:53:59:46:ad: 32:02:07:1a:a0:71:f0:46:50:32:9d:11:fc:a4:b8:69:93:4c: 11:0e:fa:3a:0d:46:36:56:41:70:69:a3:b7:27:df:ea:49:a0: 23:30:f7:b1:4f:d7:14:de:b2:27:73:c3:ab:39:48:e4:78:15: cd:02:6d:6c:4a:6f:d6:9b:37:b7:72:5a:9f:2b:e5:1e:d8:34: d5:5a:96:65:f8:ac:a6:92:26:7f:27:a9:3a:8b:ce:ec:0f:22: c0:c8:c2:c8:c8:0c:95:0a:ed:06:b5:b8:63:b2:06:91:45:02: dd:37:61:bb:7f:a7:a3:dc:17:50:ae:ad:c8:90:b9:1c:86:82: 7b:ca:c6:22:6b:55:ee:e3:76:f3:a8:9f:3b:50:49:d5:8e:4e: b9:44:e9:20:7f:d4:2b:2b:68:5e:ab:f1:24:a3:2b:09:03:b2: c6:e2:93:62:41:c5:41:80:b4:d7:42:36:3e:63:f3:5d:21:17: 89:a7:9f:1d:36:93:f0:56:60:b2:27:24:cc:cd:8e:66:07:ba: 46:b4:b7:ea:35:04:b5:f8:b7:9d:0a:91:ad:69:89:a0:a7:5f: b4:d2:21:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElYJO/SUztJvX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2I1YzUyZTYtMTRhZC00NmM5LWFhNWEtN2ZmMTc1ZTg4MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOaMnRpgiKHO3LImoy8dCZW5WS5m/62MTKaO u+34qgfLhRENGFE2uKm3t0eBHVHxycYKpmMiDFdmcclZcGW9jKsLms+HY2Ezkdiw Lr5nb7F92EeR8VA9k3m2JvIJtxe745z2eHDG09hFd/yDWeocD0pZP8XlmOWFkhuE 9UGRYX9Nqq6fN2onVIHwWP7/Qnu6gR83lq0rcOqJfLO2xx/RmgUBh5m5d4QFw5sm wJiv0X/3szEOCHyY9EBZHJgk5xoPH+9eXeCmpXsqPNY2er88weWtEP1iczYbGHOs WuDc/S+FpiVv5yvHFPW4kU48b9iqlpTiC2pqkUiJXkWMaXwisQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVtNDKyr7rPQ6zyjL5MiMYPis4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTFjMWNkOGQtY2Y3Mi0z NmE2LWE0ODAtOGZjOWI0NmU1OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACO0ECzMSyPB5dt7fEw0bJeOdxo/Mroj+bHs0TFvOBiFU1lGrTIC BxqgcfBGUDKdEfykuGmTTBEO+joNRjZWQXBpo7cn3+pJoCMw97FP1xTesidzw6s5 SOR4Fc0CbWxKb9abN7dyWp8r5R7YNNValmX4rKaSJn8nqTqLzuwPIsDIwsjIDJUK 7Qa1uGOyBpFFAt03Ybt/p6PcF1CurciQuRyGgnvKxiJrVe7jdvOonztQSdWOTrlE 6SB/1CsraF6r8SSjKwkDssbik2JBxUGAtNdCNj5j810hF4mnnx02k/BWYLInJMzN jmYHuka0t+o1BLX4t50Kka1piaCnX7TSIZ4= -----END CERTIFICATE-----Generated at Tue Mar 3 11:21:22 2026 by rpki-client