$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a9c611d7-af97-3af4-b7f3-fd9a69480e18.roa File: a9c611d7-af97-3af4-b7f3-fd9a69480e18.roa (raw, json) Hash identifier: th90/EAdjpsmqazVNPvabsbeR6ZWnLw+5zXQEOud+j0= Subject key identifier: B7:30:07:CB:DB:A1:8B:A1:F8:15:15:89:99:63:E1:55:7D:EB:3B:F3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F4C3D5C9FE30D5A391D617480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a9c611d7-af97-3af4-b7f3-fd9a69480e18.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 212238 IP address blocks: 2607:740:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5c:9f:e3:0d:5a:39:1d:61:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e34eb6dc-7125-4dbe-9042-bbc7e1ef4012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:41:72:02:5f:26:4d:90:00:a5:97:e9:a1: c7:78:08:cf:47:38:10:42:77:bd:43:5c:6b:ae:c3: e8:72:a7:1e:80:6f:76:c5:38:d0:61:a4:c8:d3:af: aa:78:be:ea:92:4a:b7:a1:26:3b:9f:a5:cb:65:5d: 9d:d9:7a:ba:35:f1:78:9d:48:a0:ff:f7:f4:2c:4e: 9f:3f:2d:aa:0f:f5:e4:d6:d7:c5:61:e4:a2:de:f1: e8:5c:ec:47:c2:f3:92:72:a5:65:63:e7:31:04:cd: 8d:a0:56:ad:e3:c7:73:3c:46:d3:74:00:96:a4:80: 8f:cf:16:a7:7b:d3:1c:84:8d:2c:f1:da:1a:81:0a: 69:7d:b8:b8:03:63:27:b0:a5:e5:7f:52:85:b3:01: 29:a3:e3:3b:56:df:98:2f:96:cf:1c:78:76:64:ec: b7:3b:92:d7:4b:92:07:05:7e:1e:c1:4c:0d:28:07: 37:e7:57:7f:70:98:3c:c9:13:d7:52:8f:b9:7a:1a: 7f:f3:31:05:aa:fd:83:54:a2:c2:ca:ca:f6:01:25: 59:28:95:df:a8:b0:08:d3:84:13:54:16:79:52:49: ed:3b:de:ee:59:d1:23:33:7f:61:02:74:87:bb:f4: c3:24:a8:b7:34:26:41:90:32:44:8a:55:57:30:a7: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:07:CB:DB:A1:8B:A1:F8:15:15:89:99:63:E1:55:7D:EB:3B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a9c611d7-af97-3af4-b7f3-fd9a69480e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a6:41:3c:0a:cf:73:c7:1f:fe:79:a6:8d:b6:36:a5:c2:13: 5f:eb:41:23:ae:2a:15:18:c2:b4:ce:0b:41:09:fe:62:83:68: bd:e5:18:71:da:57:e9:80:b4:1e:01:77:35:c5:75:85:21:22: 86:83:ab:53:9f:5c:98:e6:9b:45:93:14:a6:f1:70:54:be:07: 64:79:12:d2:07:1c:07:28:e6:d7:fa:a2:5c:9d:bf:40:22:fd: 9a:99:52:93:28:b1:d9:80:5c:2b:0d:c5:29:31:5e:d3:31:d4: 4f:b5:35:ba:d3:63:44:43:30:ae:4a:58:51:42:f2:c2:6a:31: 76:ad:02:53:c9:af:58:03:7f:82:e0:56:0e:d3:d4:08:31:00: 7d:b3:1e:29:b6:3a:97:0c:a8:4c:d0:8c:9e:e8:97:79:e8:08: 66:35:e7:91:cb:28:24:95:56:12:50:e5:fb:41:6b:91:cb:1c: d9:62:5a:71:7d:47:5f:0a:4f:ef:6c:cd:e7:86:60:83:39:fc: 9a:58:72:20:f6:f9:ec:bb:f6:69:af:4b:3d:b1:a4:1a:44:d1: 24:88:f3:20:47:a1:4c:3b:16:5f:4b:c6:88:12:5a:d5:5e:d8: 2c:be:ff:d1:e7:60:f0:1f:b6:ab:ae:02:2a:7f:fb:a4:db:cf: 59:69:a9:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVyf4w1aOR1hdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTM0ZWI2ZGMtNzEyNS00ZGJlLTkwNDItYmJjN2UxZWY0MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R1BcgJfJk2QAKWX6aHHeAjPRzgQQne9Q1xr rsPocqcegG92xTjQYaTI06+qeL7qkkq3oSY7n6XLZV2d2Xq6NfF4nUig//f0LE6f Py2qD/Xk1tfFYeSi3vHoXOxHwvOScqVlY+cxBM2NoFat48dzPEbTdACWpICPzxan e9MchI0s8doagQppfbi4A2MnsKXlf1KFswEpo+M7Vt+YL5bPHHh2ZOy3O5LXS5IH BX4ewUwNKAc351d/cJg8yRPXUo+5ehp/8zEFqv2DVKLCysr2ASVZKJXfqLAI04QT VBZ5UkntO97uWdEjM39hAnSHu/TDJKi3NCZBkDJEilVXMKeS3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLcwB8vboYuh+BUViZlj4VV96zvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTljNjExZDctYWY5Ny0z YWY0LWI3ZjMtZmQ5YTY5NDgwZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHymQTwKz3PHH/55po22NqXCE1/rQSOuKhUYwrTOC0EJ/mKDaL3l GHHaV+mAtB4BdzXFdYUhIoaDq1OfXJjmm0WTFKbxcFS+B2R5EtIHHAco5tf6olyd v0Ai/ZqZUpMosdmAXCsNxSkxXtMx1E+1NbrTY0RDMK5KWFFC8sJqMXatAlPJr1gD f4LgVg7T1AgxAH2zHim2OpcMqEzQjJ7ol3noCGY155HLKCSVVhJQ5ftBa5HLHNli WnF9R18KT+9szeeGYIM5/JpYciD2+ey79mmvSz2xpBpE0SSI8yBHoUw7Fl9LxogS WtVe2Cy+/9HnYPAftquuAip/+6Tbz1lpqZo= -----END CERTIFICATE-----Generated at Sun Oct 25 00:05:41 2026 by rpki-client