$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa File: a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa (raw, json) Hash identifier: jk2TRVE45eOcZX0ZD8ZUrDYlmXid5BcaiOyBxFAIrMQ= Subject key identifier: 28:E1:88:01:FE:9A:84:5D:44:B2:79:22:5F:A6:9C:B3:D4:04:F1:0F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D07ACF79E720F8015995F9400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 9009 IP address blocks: 2607:740:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f7:9e:72:0f:80:15:99:5f:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=7f7a6df7-0f8e-416f-a7c3-83cd56170e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:01:59:c8:9b:25:7d:5d:de:e9:73:87:e4: 1f:fb:f9:c6:d8:e0:01:6d:be:67:68:b0:ce:24:b8: 1c:89:6e:d8:50:57:13:b2:dd:03:4c:8c:a0:57:75: b2:0a:33:87:4a:84:76:c9:3f:b2:fa:b2:5e:8c:3c: 29:3e:17:d3:bf:4a:83:40:9a:00:23:da:d9:7d:8d: 53:e6:aa:3f:b1:34:fc:d8:81:1c:c0:0c:48:87:40: 86:95:2c:7a:d8:1d:2e:9e:a9:8e:34:a1:30:1b:52: 8c:db:92:2d:26:0d:6f:f0:46:3a:90:3c:f6:0f:50: 7b:e0:95:f4:1b:74:6d:0c:09:63:f4:5e:f6:1b:ad: 17:e8:bf:90:3b:37:28:65:05:ab:88:45:a6:7c:be: fd:46:1d:24:16:cc:fb:d2:8f:a6:67:7e:78:79:67: 14:bd:eb:e1:08:f5:f1:60:a8:7d:5e:c3:40:ba:f0: 89:34:c9:39:bc:51:88:57:dc:1a:1c:54:ec:b1:f3: 25:60:c1:1a:84:b8:87:cb:7d:ae:07:13:6f:08:df: 27:ee:83:e6:46:20:2f:bd:ec:3f:09:66:f7:04:43: 1b:a9:98:06:dc:48:22:71:8b:88:38:41:47:c7:b9: df:05:37:92:34:67:51:29:5d:ae:30:d5:a9:60:fd: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E1:88:01:FE:9A:84:5D:44:B2:79:22:5F:A6:9C:B3:D4:04:F1:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ed:ce:61:0a:26:65:82:dd:60:2b:ca:13:d7:5b:78:5a:49: b3:68:65:92:89:be:f2:62:21:71:59:be:1d:59:cc:d5:e8:17: ad:7b:94:b2:29:f1:4f:80:f2:40:b9:ac:f9:ce:48:8e:5d:a7: ad:f2:47:82:bc:10:ae:34:2e:ed:cb:bd:9f:f2:31:a8:63:22: 89:2d:83:b8:79:f0:8a:42:f6:ef:1b:6d:4e:c6:fb:57:25:a4: bc:06:17:d9:82:d6:1c:81:e2:c0:36:fb:f7:bd:e5:73:b4:59: 78:1f:9a:29:3e:6c:b4:0b:be:22:21:79:e8:b8:69:6f:1c:04: 29:4b:95:de:be:e9:9d:59:02:d2:d2:c6:fa:21:0d:c8:f6:0a: 3e:a0:96:36:0a:00:c7:b4:4b:e6:17:87:c4:09:db:16:03:2b: fd:6f:1c:b0:85:a8:29:0d:0d:e1:6b:62:14:18:ea:35:29:17: 7a:a4:a4:52:7a:36:f9:d4:ad:e1:cc:01:c5:f8:47:a7:eb:6d: 44:2b:f9:2f:1e:28:eb:b0:76:43:e6:9d:dc:99:ad:1e:b4:b2: da:77:49:a1:c1:b6:a1:15:cd:00:79:23:aa:8d:c7:75:cd:be: ff:93:c6:14:b2:9a:54:22:fa:77:c7:9f:c1:21:de:f5:e2:44: 80:38:74:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrPeecg+AFZlflAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk N2Y3YTZkZjctMGY4ZS00MTZmLWE3YzMtODNjZDU2MTcwZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUoBWcibJX1d3ulzh+Qf+/nG2OABbb5naLDO JLgciW7YUFcTst0DTIygV3WyCjOHSoR2yT+y+rJejDwpPhfTv0qDQJoAI9rZfY1T 5qo/sTT82IEcwAxIh0CGlSx62B0unqmONKEwG1KM25ItJg1v8EY6kDz2D1B74JX0 G3RtDAlj9F72G60X6L+QOzcoZQWriEWmfL79Rh0kFsz70o+mZ354eWcUvevhCPXx YKh9XsNAuvCJNMk5vFGIV9waHFTssfMlYMEahLiHy32uBxNvCN8n7oPmRiAvvew/ CWb3BEMbqZgG3EgicYuIOEFHx7nfBTeSNGdRKV2uMNWpYP2iRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCjhiAH+moRdRLJ5Il+mnLPUBPEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTJhOTdkMzktNmE3Mi0z Nzc5LWJjYmItY2ZkYmIyODhjNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADtzmEKJmWC3WAryhPXW3haSbNoZZKJvvJiIXFZvh1ZzNXoF617 lLIp8U+A8kC5rPnOSI5dp63yR4K8EK40Lu3LvZ/yMahjIoktg7h58IpC9u8bbU7G +1clpLwGF9mC1hyB4sA2+/e95XO0WXgfmik+bLQLviIheei4aW8cBClLld6+6Z1Z AtLSxvohDcj2Cj6gljYKAMe0S+YXh8QJ2xYDK/1vHLCFqCkNDeFrYhQY6jUpF3qk pFJ6NvnUreHMAcX4R6frbUQr+S8eKOuwdkPmndyZrR60stp3SaHBtqEVzQB5I6qN x3XNvv+TxhSymlQi+nfHn8Eh3vXiRIA4dJY= -----END CERTIFICATE-----Generated at Tue Mar 3 09:42:21 2026 by rpki-client