$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa File: f2e5d719-b11f-3e63-ad51-8123166538ef.roa (raw, json) Hash identifier: eBwL+wOiwWNCcQb9aoBGD6zVcV34jH7825gxWkCD7FI= Subject key identifier: F9:21:50:ED:87:F0:D1:80:83:4D:53:28:2F:4C:69:EC:31:77:62:66 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA791B24DEB330A0165AC4A80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 209181 IP address blocks: 2607:740:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:b2:4d:eb:33:0a:01:65:ac:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=68eb7892-3145-48f8-8f92-d9aa370161bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:31:d2:08:b3:49:e8:2a:f0:40:aa:6a:38: c2:c4:b2:df:ec:10:82:45:95:29:46:f0:86:03:bc: 7a:83:11:82:8e:70:64:68:57:3a:ec:cb:05:63:87: c6:e7:07:b9:92:9f:38:e8:10:b5:3c:c5:64:0c:9c: 0f:45:1c:5a:06:67:dd:62:10:d2:6d:2c:ec:f9:36: 48:43:19:dc:a5:9d:60:9b:a2:95:28:d6:3a:59:bf: 1f:35:60:31:48:b0:11:b3:4d:64:ec:58:0f:89:0a: 2e:62:cd:0c:3b:de:fb:d6:1b:12:b8:1a:08:4e:30: 8d:29:84:26:4d:4b:fa:db:34:36:2c:f8:e5:be:db: 3f:55:18:0e:d0:79:bb:08:2f:16:0d:e9:3d:24:11: 09:ff:5d:df:d7:d0:36:a9:03:d1:a2:26:19:62:5a: e5:45:31:d9:d6:e3:c4:cc:23:29:af:38:1a:5a:38: 5d:0e:5c:cb:4a:d6:32:d3:9f:fc:b6:1e:68:27:93: c4:7c:f1:97:c6:00:e7:a6:14:cb:6b:37:0d:6a:32: d6:3e:d4:fe:21:74:fa:78:e7:08:4e:87:05:5d:a9: dd:80:81:53:45:1f:98:9c:18:18:f3:ba:a3:6b:3b: 93:6d:0c:20:28:f2:18:ba:35:c3:54:7a:9c:ba:6e: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:21:50:ED:87:F0:D1:80:83:4D:53:28:2F:4C:69:EC:31:77:62:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:82:92:e7:62:b6:96:e9:fa:5d:44:b8:92:c4:da:be:c5:18: d0:ba:9c:79:01:5b:79:a2:a8:57:0a:c2:e4:ee:12:c6:a9:32: 43:37:b7:42:5d:68:98:f4:d6:e9:08:e9:90:8c:26:68:15:a6: df:22:ea:7d:3d:b8:9d:f6:14:0b:b0:98:48:a6:01:79:80:c8: 32:db:48:e4:d2:80:41:6a:b5:65:24:c7:e9:56:37:24:2d:12: f1:53:5a:02:f2:7b:95:6a:7d:64:9d:70:cc:a0:0c:3f:06:07: 32:bf:c3:b0:01:b0:16:75:af:45:b5:cb:11:3e:55:42:a0:c2: 88:40:0c:fc:af:a2:9d:54:3b:a7:d5:ae:af:3b:36:e5:b0:3f: e6:5c:f1:24:d4:3d:d3:1e:fb:4b:22:5e:0f:82:80:a9:40:c5: 86:f4:b3:6b:47:b0:fe:b7:d0:a6:0b:48:3e:2a:e4:4d:de:ac: 7a:4d:44:12:4c:db:15:96:12:aa:a8:e8:c9:4c:04:1a:9d:4d: c0:7b:f4:c0:ca:61:07:8b:41:94:12:1e:97:d6:92:5f:f1:01: a5:f7:9e:99:55:13:21:c3:cc:f8:b4:42:74:11:89:bf:e3:50: 10:54:8e:5b:22:1d:87:2b:c9:cf:57:90:24:d9:19:10:83:02: e8:6e:99:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkbJN6zMKAWWsSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjhlYjc4OTItMzE0NS00OGY4LThmOTItZDlhYTM3MDE2MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Ix0gizSegq8ECqajjCxLLf7BCCRZUpRvCG A7x6gxGCjnBkaFc67MsFY4fG5we5kp846BC1PMVkDJwPRRxaBmfdYhDSbSzs+TZI QxncpZ1gm6KVKNY6Wb8fNWAxSLARs01k7FgPiQouYs0MO9771hsSuBoITjCNKYQm TUv62zQ2LPjlvts/VRgO0Hm7CC8WDek9JBEJ/13f19A2qQPRoiYZYlrlRTHZ1uPE zCMprzgaWjhdDlzLStYy05/8th5oJ5PEfPGXxgDnphTLazcNajLWPtT+IXT6eOcI TocFXandgIFTRR+YnBgY87qjazuTbQwgKPIYujXDVHqcum7b+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPkhUO2H8NGAg01TKC9Maewxd2JmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjJlNWQ3MTktYjExZi0z ZTYzLWFkNTEtODEyMzE2NjUzOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE2Ckuditpbp+l1EuJLE2r7FGNC6nHkBW3miqFcKwuTuEsapMkM3 t0JdaJj01ukI6ZCMJmgVpt8i6n09uJ32FAuwmEimAXmAyDLbSOTSgEFqtWUkx+lW NyQtEvFTWgLye5VqfWSdcMygDD8GBzK/w7ABsBZ1r0W1yxE+VUKgwohADPyvop1U O6fVrq87NuWwP+Zc8STUPdMe+0siXg+CgKlAxYb0s2tHsP630KYLSD4q5E3erHpN RBJM2xWWEqqo6MlMBBqdTcB79MDKYQeLQZQSHpfWkl/xAaX3nplVEyHDzPi0QnQR ib/jUBBUjlsiHYcryc9XkCTZGRCDAuhumWY= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:10 2026 by rpki-client