$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa File: a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa (raw, json) Hash identifier: aKUVZ3+IwDOVPYQF3Xpa9wVFJnuqr7gXbMUvkq8rCi0= Subject key identifier: 96:1A:40:48:0E:A3:32:0C:53:EE:C6:F1:8B:5B:97:26:CE:6B:22:D7 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA791B285C04B627B6148A640 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 2607:740:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:b2:85:c0:4b:62:7b:61:48:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6df0105c-5074-43a9-a8e8-ebe9b42fe124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:11:84:c1:56:d6:90:8f:de:12:f4:0c:2b: 9e:ed:7f:b7:25:43:52:fc:eb:98:54:39:4c:3e:a3: 35:82:03:30:37:e1:e2:8b:6c:b4:cb:00:7b:3e:3f: dd:69:48:57:31:3d:6b:03:e2:d6:bf:29:d9:41:2b: 06:36:ff:8d:e3:16:b8:3b:2b:03:9b:ab:46:87:5a: 2c:66:01:b5:46:d2:e8:fa:ff:3f:5b:99:31:69:36: 4e:7b:8d:63:11:f5:d2:4a:2c:d3:bb:4d:08:91:d3: c9:5a:a4:3f:eb:f0:f0:4c:2c:b2:d2:9e:4d:c0:e9: 65:0d:32:26:60:dc:22:3c:78:a1:51:97:3e:cd:74: d2:bf:5f:7e:80:cf:63:59:28:10:51:9b:a5:26:70: 10:a8:db:1c:42:04:b5:82:a5:73:82:7c:38:67:9a: 09:4e:18:3d:1e:6d:2a:82:7d:87:10:32:fe:7b:56: 3a:46:79:7a:53:46:4f:f7:74:b8:5e:8d:b6:6a:37: 04:2e:2d:5c:f1:59:4f:aa:df:dc:97:dc:d0:24:4d: e0:43:44:f6:a6:a8:dc:10:19:91:06:a4:6a:0b:4f: bb:f1:4c:8e:20:ab:00:5c:61:22:ee:74:43:42:4d: 09:4f:26:c2:43:e2:c6:47:a8:20:da:2e:d1:25:0c: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1A:40:48:0E:A3:32:0C:53:EE:C6:F1:8B:5B:97:26:CE:6B:22:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3e:85:a7:7c:6c:f8:68:11:ec:08:78:93:60:3c:71:22:d1: 17:90:35:df:a3:7a:18:0f:75:5a:b3:75:cd:e1:56:66:82:0d: aa:c5:56:6d:b4:8c:62:b0:bd:7c:9e:70:31:e3:60:87:97:e5: 57:de:ce:a1:c6:67:a2:7b:0c:ad:59:8b:e8:51:b0:ac:03:d4: e2:12:f3:f4:f0:ba:93:9a:88:45:3b:7c:e6:50:7e:e7:86:12: 4f:81:e3:fd:15:cb:17:c7:15:f1:f5:ad:cd:23:17:07:55:ac: 52:78:7c:0b:6c:d3:67:ee:aa:3d:5c:cf:08:1f:8e:22:4a:7f: e0:fe:17:70:09:32:cc:14:52:e4:1c:19:e7:f9:4f:d8:5e:8c: 8f:7e:28:30:1f:cc:4e:69:fa:b4:67:47:14:bf:c4:b8:df:70: d0:20:b7:f2:bf:56:e8:ee:b3:e4:ef:2e:c0:ca:28:47:38:47: 27:98:2a:e2:6e:68:91:57:4d:5e:24:1b:62:91:a5:c1:c7:23: cf:7d:3f:e9:4f:45:3d:6e:56:b2:32:70:2d:61:83:be:bb:1c: 94:de:c1:33:f6:f7:dd:18:16:d6:9f:f1:7a:29:f4:24:31:93: 65:26:f1:ad:79:05:22:29:2b:9c:eb:26:29:fa:3e:1f:fd:2e: 7a:f8:e7:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkbKFwEtie2FIpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmRmMDEwNWMtNTA3NC00M2E5LWE4ZTgtZWJlOWI0MmZlMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV8RhMFW1pCP3hL0DCue7X+3JUNS/OuYVDlM PqM1ggMwN+Hii2y0ywB7Pj/daUhXMT1rA+LWvynZQSsGNv+N4xa4OysDm6tGh1os ZgG1RtLo+v8/W5kxaTZOe41jEfXSSizTu00IkdPJWqQ/6/DwTCyy0p5NwOllDTIm YNwiPHihUZc+zXTSv19+gM9jWSgQUZulJnAQqNscQgS1gqVzgnw4Z5oJThg9Hm0q gn2HEDL+e1Y6Rnl6U0ZP93S4Xo22ajcELi1c8VlPqt/cl9zQJE3gQ0T2pqjcEBmR BqRqC0+78UyOIKsAXGEi7nRDQk0JTybCQ+LGR6gg2i7RJQyhkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYaQEgOozIMU+7G8YtblybOayLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTJhOTdkMzktNmE3Mi0z Nzc5LWJjYmItY2ZkYmIyODhjNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0+had8bPhoEewIeJNgPHEi0ReQNd+jehgPdVqzdc3hVmaCDarF Vm20jGKwvXyecDHjYIeX5VfezqHGZ6J7DK1Zi+hRsKwD1OIS8/TwupOaiEU7fOZQ fueGEk+B4/0VyxfHFfH1rc0jFwdVrFJ4fAts02fuqj1czwgfjiJKf+D+F3AJMswU UuQcGef5T9hejI9+KDAfzE5p+rRnRxS/xLjfcNAgt/K/Vujus+TvLsDKKEc4RyeY KuJuaJFXTV4kG2KRpcHHI899P+lPRT1uVrIycC1hg767HJTewTP2990YFtaf8Xop 9CQxk2Um8a15BSIpK5zrJin6Ph/9Lnr4598= -----END CERTIFICATE-----Generated at Tue Sep 1 02:50:45 2026 by rpki-client