$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa File: f7d21d96-d256-3aab-9e7e-57e21046fd47.roa (raw, json) Hash identifier: bF39NwVzFBESQgHp+D+Sj8c+E34VHu93P9/EI2wyPFc= Subject key identifier: 0A:76:6D:46:6F:75:CB:58:7A:D5:BB:D4:2C:64:A5:5B:04:64:8F:96 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D09125651E20BB91FAFC59000 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 9009 IP address blocks: 2607:740:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:56:51:e2:0b:b9:1f:af:c5:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=00a37f4f-713c-495a-8c21-2b67c30c8630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:4d:46:2e:bd:2d:0f:06:73:26:fa:89:ec: 19:3d:80:04:f3:8d:f5:2c:86:98:11:a9:d1:f7:2e: d5:51:15:16:be:fa:e5:a3:a2:15:f6:dc:bd:0b:52: e6:2c:c3:8d:6d:e8:fd:ea:b4:f0:ab:3e:1b:00:8e: 36:dc:14:da:a8:36:07:52:46:32:24:db:39:24:2f: 39:ac:f2:15:c4:bf:d3:f7:d9:c9:1f:f0:40:4f:8e: 65:c5:48:11:2d:72:b7:01:98:a8:0c:56:84:26:49: 36:32:6e:1b:4b:ce:bd:b2:88:5c:49:8c:9f:ca:42: 90:48:75:9b:20:e6:75:d6:c6:f4:2e:9e:27:78:0b: 57:ed:4c:99:89:4c:e0:e7:4a:3f:80:eb:ab:b2:be: 00:d4:24:e1:28:ff:88:c3:d6:90:37:6f:93:51:7f: 86:f9:43:5a:16:dc:bd:ef:51:29:58:93:a2:e0:9c: 96:35:b0:bf:da:e3:11:f7:7d:c5:75:b8:0c:93:ec: 54:bf:f0:ce:58:e3:08:33:23:a8:b1:aa:c2:4f:f5: 4a:06:c6:2f:c5:3b:34:ef:65:fc:69:c4:59:4d:d8: b1:d5:1f:ea:af:7e:a1:52:40:20:18:16:ce:a4:4c: 61:81:98:00:d8:b7:f4:b3:7a:9f:c4:29:da:bb:b6: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:6D:46:6F:75:CB:58:7A:D5:BB:D4:2C:64:A5:5B:04:64:8F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:05:40:43:30:9a:a6:9e:e6:52:b2:7d:15:de:a3:8a:81:4d: a7:4e:31:6f:9b:8b:c7:1f:31:25:5d:b4:21:59:9e:f0:c9:9b: 78:7a:5e:14:5e:5a:1b:f0:04:44:28:ee:01:44:52:4b:63:4d: d3:c7:09:80:fe:ce:5d:bf:9e:67:bf:2b:10:4d:65:74:b6:aa: 27:d4:32:55:04:4d:fc:8f:27:ae:b8:23:64:e6:c6:08:5d:c5: aa:12:f5:f5:cf:c8:15:e8:91:32:c9:b8:f4:b6:64:39:b1:7f: 8b:81:f5:8c:88:4d:dc:aa:90:89:e7:d7:d2:2e:8e:ff:16:b2: 13:d6:44:c0:22:f3:89:1a:1b:1d:4e:09:f7:8b:44:c9:9f:9a: 1f:0a:9c:d1:3f:ce:91:a2:c8:58:d9:56:fb:db:3c:b1:e9:df: 76:e8:cd:9f:05:b5:e0:ea:44:49:4f:2b:ec:e1:54:d4:d2:dc: 60:29:92:27:04:a9:ec:04:9f:b2:ca:84:ee:0a:0a:9e:ec:ca: 62:ee:2d:25:28:69:e8:7c:c4:58:32:b8:5c:1d:a3:6b:09:7e: 43:fe:0e:e0:4a:82:41:57:a1:a3:82:9a:e6:41:1f:a5:19:56: 3e:67:a7:00:2a:42:90:ee:70:56:69:1c:b5:03:25:7f:c9:5c: a5:87:fa:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElZR4gu5H6/FkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDBhMzdmNGYtNzEzYy00OTVhLThjMjEtMmI2N2MzMGM4NjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm1NRi69LQ8Gcyb6iewZPYAE8431LIaYEanR 9y7VURUWvvrlo6IV9ty9C1LmLMONbej96rTwqz4bAI423BTaqDYHUkYyJNs5JC85 rPIVxL/T99nJH/BAT45lxUgRLXK3AZioDFaEJkk2Mm4bS869sohcSYyfykKQSHWb IOZ11sb0Lp4neAtX7UyZiUzg50o/gOursr4A1CThKP+Iw9aQN2+TUX+G+UNaFty9 71EpWJOi4JyWNbC/2uMR933FdbgMk+xUv/DOWOMIMyOosarCT/VKBsYvxTs072X8 acRZTdix1R/qr36hUkAgGBbOpExhgZgA2Lf0s3qfxCnau7bfnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAp2bUZvdctYetW71CxkpVsEZI+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjdkMjFkOTYtZDI1Ni0z YWFiLTllN2UtNTdlMjEwNDZmZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYFQEMwmqae5lKyfRXeo4qBTadOMW+bi8cfMSVdtCFZnvDJm3h6 XhReWhvwBEQo7gFEUktjTdPHCYD+zl2/nme/KxBNZXS2qifUMlUETfyPJ664I2Tm xghdxaoS9fXPyBXokTLJuPS2ZDmxf4uB9YyITdyqkInn19Iujv8WshPWRMAi84ka Gx1OCfeLRMmfmh8KnNE/zpGiyFjZVvvbPLHp33bozZ8FteDqRElPK+zhVNTS3GAp kicEqewEn7LKhO4KCp7symLuLSUoaeh8xFgyuFwdo2sJfkP+DuBKgkFXoaOCmuZB H6UZVj5npwAqQpDucFZpHLUDJX/JXKWH+qA= -----END CERTIFICATE-----Generated at Tue Mar 3 09:46:42 2026 by rpki-client