$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4720fdb0-3c85-3654-9380-6dce3d5a1769.roa File: 4720fdb0-3c85-3654-9380-6dce3d5a1769.roa (raw, json) Hash identifier: qQn72yMBw+24qNKhTqLZqHJZCGGmsbLHV8EnWNp0AGQ= Subject key identifier: D5:7A:EA:5D:FD:12:8C:BC:A8:47:AC:9E:54:76:65:6C:8B:D2:70:8A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F3CE2B829A431137944DFEF40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4720fdb0-3c85-3654-9380-6dce3d5a1769.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 262287 IP address blocks: 2607:740:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b8:29:a4:31:13:79:44:df:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=1f301fd7-d497-4ae1-8d24-8901a4caf1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:22:66:71:1d:1c:dd:3b:94:45:3c:2a:f2: 11:63:21:cc:0f:3e:47:81:cd:51:7e:09:21:5f:90: f5:b7:c2:32:68:4c:9b:4c:90:3f:b3:2d:65:31:55: 59:01:53:88:af:72:32:62:52:ab:ab:28:5d:ab:8f: 12:1f:28:30:74:fc:43:e4:65:7e:3f:70:36:8a:67: 37:cb:6b:38:44:7e:ec:89:8a:f9:98:a0:21:b8:f4: ed:27:ba:95:c3:eb:e9:f7:72:92:a8:5c:83:7f:1f: c6:f7:14:cb:9f:65:21:ba:90:f0:34:8e:5d:80:a8: b8:04:9a:ae:c2:dd:ba:0e:c6:9b:b7:62:c2:d6:37: 08:86:37:d3:0e:5d:eb:72:da:35:55:53:eb:f6:80: 55:03:ba:f1:9a:f7:15:32:c4:22:5f:c7:8c:89:1a: 9a:42:12:11:99:13:97:be:8b:31:4b:8d:8a:3d:3b: ef:48:74:2f:db:3c:d9:53:bc:8e:77:9b:fc:a3:9d: 9b:08:45:c1:7a:20:83:4c:53:a2:f1:9d:1d:b7:bc: 9a:d0:eb:9b:a4:fa:3c:70:ff:87:e3:16:7a:57:b8: 71:74:ea:46:4a:bc:10:a8:19:eb:d8:b8:9d:a3:e7: bd:c0:e5:ec:45:36:f4:04:c9:34:14:89:69:ba:83: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:EA:5D:FD:12:8C:BC:A8:47:AC:9E:54:76:65:6C:8B:D2:70:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4720fdb0-3c85-3654-9380-6dce3d5a1769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:63::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d5:c9:7b:00:24:63:2a:d4:75:0c:27:c6:0a:49:62:67:0e: 10:8d:71:cc:44:d1:c3:c4:7b:2a:f6:67:a8:6b:23:65:ca:50: e1:b3:15:45:bc:65:f8:10:92:d2:38:35:67:bf:7c:51:46:cf: 6e:9d:9e:9c:6a:9e:a3:43:f6:66:fc:5e:7e:3a:44:f0:0c:31: 5f:a0:fd:01:61:9c:b8:39:2f:1f:0c:a1:45:21:14:76:23:c9: 6e:74:14:24:25:04:8c:85:27:75:97:24:9a:15:df:7c:cb:4a: 7b:bc:bc:81:ae:37:76:4e:a5:d5:c8:af:d2:5b:1d:32:4b:c6: 5e:a6:ca:a2:b8:59:54:6f:33:11:f4:c0:26:fc:c8:20:64:5b: 0c:99:1f:db:33:81:c1:fe:1f:ce:88:b7:0a:a2:a3:73:94:ef: 28:88:72:d7:5b:a2:fe:46:52:e8:82:0e:65:2c:03:70:95:da: b4:56:3c:b7:7d:de:50:e7:37:4a:19:45:27:f5:78:e7:5f:67: f5:a0:b3:be:e0:8b:35:f9:9a:de:5e:6f:41:95:e8:9d:4a:68: 35:ab:57:a1:bd:06:9c:ae:b9:c3:6f:d2:53:0c:ab:b0:39:53: c9:39:06:e6:ac:fd:d4:5a:93:0f:dc:b2:8e:65:1d:42:aa:fb: 4d:26:d3:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884rgppDETeUTf70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MWYzMDFmZDctZDQ5Ny00YWUxLThkMjQtODkwMWE0Y2FmMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFoiZnEdHN07lEU8KvIRYyHMDz5Hgc1Rfgkh X5D1t8IyaEybTJA/sy1lMVVZAVOIr3IyYlKrqyhdq48SHygwdPxD5GV+P3A2imc3 y2s4RH7siYr5mKAhuPTtJ7qVw+vp93KSqFyDfx/G9xTLn2UhupDwNI5dgKi4BJqu wt26Dsabt2LC1jcIhjfTDl3rcto1VVPr9oBVA7rxmvcVMsQiX8eMiRqaQhIRmROX vosxS42KPTvvSHQv2zzZU7yOd5v8o52bCEXBeiCDTFOi8Z0dt7ya0OubpPo8cP+H 4xZ6V7hxdOpGSrwQqBnr2Lido+e9wOXsRTb0BMk0FIlpuoNrywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNV66l39Eoy8qEesnlR2ZWyL0nCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDcyMGZkYjAtM2M4NS0z NjU0LTkzODAtNmRjZTNkNWExNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXVyXsAJGMq1HUMJ8YKSWJnDhCNccxE0cPEeyr2Z6hrI2XKUOGz FUW8ZfgQktI4NWe/fFFGz26dnpxqnqND9mb8Xn46RPAMMV+g/QFhnLg5Lx8MoUUh FHYjyW50FCQlBIyFJ3WXJJoV33zLSnu8vIGuN3ZOpdXIr9JbHTJLxl6myqK4WVRv MxH0wCb8yCBkWwyZH9szgcH+H86Itwqio3OU7yiIctdbov5GUuiCDmUsA3CV2rRW PLd93lDnN0oZRSf1eOdfZ/Wgs77gizX5mt5eb0GV6J1KaDWrV6G9BpyuucNv0lMM q7A5U8k5Buas/dRakw/cso5lHUKq+00m01I= -----END CERTIFICATE-----Generated at Sun Sep 27 14:52:28 2026 by rpki-client