$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa File: 47bf5d33-51dd-3c34-a11c-252123b2256a.roa (raw, json) Hash identifier: Ly3/jfPoIfu1kkr1FdC0c2sA7Dwanhzw/rNjdPPe18A= Subject key identifier: 05:32:2E:42:43:D8:61:4C:F3:79:CA:6C:5D:8E:CE:01:E8:23:3D:F3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F497626E1C8CE6E85760C7380 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 2607:740:5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:26:e1:c8:ce:6e:85:76:0c:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=402bfbee-a4b9-4d6f-96f4-36f0c0efcb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:f6:e0:f9:ee:20:40:f8:a3:ce:0f:51:29: 88:13:ce:cc:19:ef:de:cd:c4:2c:63:4f:16:c2:36: 9a:d5:e1:91:67:c2:da:74:b0:d8:2d:a7:60:1c:b8: 55:af:98:cc:a7:2a:20:1e:43:2f:d1:56:16:b3:7c: 65:5c:f2:71:cd:7d:86:9a:67:d5:46:7e:49:f2:1c: 70:cb:50:20:b4:6f:a8:0f:06:10:f0:20:f6:cb:19: d9:99:b2:53:53:75:35:bb:40:9a:46:22:08:5b:b1: 1a:fb:5d:8b:32:57:ec:1d:d7:db:48:92:16:3c:c0: 10:1c:49:6b:25:bb:85:e4:27:e2:c2:45:46:ef:de: cb:e0:78:7d:25:b2:54:42:8c:ad:76:a9:ad:44:d8: 03:ff:04:99:bc:30:c8:67:e5:73:0c:05:86:53:38: 04:db:7c:f8:de:57:ab:6e:fb:7c:8d:fd:7f:c2:44: 85:28:ba:e1:f7:ea:97:d7:4b:ec:66:bb:e6:e6:96: dc:31:df:59:db:98:52:ea:82:d1:b9:b2:fd:3d:48: 86:d6:f2:fb:fb:5b:42:17:fa:d9:79:0b:33:f0:03: 7c:7e:b0:83:19:20:c9:33:de:ac:a1:7e:42:b2:f7: 30:3e:f4:37:12:ad:f4:cd:e6:fa:18:4c:88:c9:23: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:32:2E:42:43:D8:61:4C:F3:79:CA:6C:5D:8E:CE:01:E8:23:3D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47bf5d33-51dd-3c34-a11c-252123b2256a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:cd:d4:0e:08:fc:82:5d:a3:a6:5c:63:7b:ce:e4:56:5e:8a: 19:3e:4a:94:5f:93:a1:5d:71:57:a3:66:70:8d:38:25:cc:df: b6:3b:a0:cb:77:2d:50:c4:70:08:53:13:5e:7d:67:c6:77:90: d1:3c:61:02:06:6f:78:56:1a:98:2d:c2:5e:90:f7:75:44:d6: 61:e3:10:7e:1d:cc:68:67:8d:82:32:ef:e6:c8:c8:51:43:ff: aa:35:62:70:cf:ee:2f:e6:73:1a:a2:55:56:12:16:7e:5f:24: ce:95:e8:b5:b8:2c:2c:ba:d3:e1:92:02:38:d0:48:53:af:7d: 25:9e:a4:41:66:f5:44:1d:e9:84:26:c4:e6:0f:49:da:b2:70: 1d:97:4d:6b:f9:43:3c:10:53:08:4f:62:bc:7a:46:51:ff:7f: 07:7e:98:4c:2c:87:e1:69:6c:0f:18:41:22:0e:7f:cf:03:9d: 4e:55:ff:74:c2:f9:38:3d:a5:e8:e1:11:45:8c:6e:15:75:90: 87:25:ec:2d:2c:d1:17:17:98:f7:3b:1a:e1:9f:5e:af:d1:1f: d3:05:10:84:f0:33:ab:3f:d4:1b:64:45:0f:42:17:c3:81:9e: f5:c0:37:10:81:2f:f1:c0:ef:26:a7:32:50:2e:d6:3e:4c:de: 12:0a:80:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdibhyM5uhXYMc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDAyYmZiZWUtYTRiOS00ZDZmLTk2ZjQtMzZmMGMwZWZjYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTr24PnuIED4o84PUSmIE87MGe/ezcQsY08W wjaa1eGRZ8LadLDYLadgHLhVr5jMpyogHkMv0VYWs3xlXPJxzX2GmmfVRn5J8hxw y1AgtG+oDwYQ8CD2yxnZmbJTU3U1u0CaRiIIW7Ea+12LMlfsHdfbSJIWPMAQHElr JbuF5CfiwkVG797L4Hh9JbJUQoytdqmtRNgD/wSZvDDIZ+VzDAWGUzgE23z43ler bvt8jf1/wkSFKLrh9+qX10vsZrvm5pbcMd9Z25hS6oLRubL9PUiG1vL7+1tCF/rZ eQsz8AN8frCDGSDJM96soX5CsvcwPvQ3Eq30zeb6GEyIySMHHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAUyLkJD2GFM83nKbF2OzgHoIz3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdiZjVkMzMtNTFkZC0z YzM0LWExMWMtMjUyMTIzYjIyNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/N1A4I/IJdo6ZcY3vO5FZeihk+SpRfk6FdcVejZnCNOCXM37Y7 oMt3LVDEcAhTE159Z8Z3kNE8YQIGb3hWGpgtwl6Q93VE1mHjEH4dzGhnjYIy7+bI yFFD/6o1YnDP7i/mcxqiVVYSFn5fJM6V6LW4LCy60+GSAjjQSFOvfSWepEFm9UQd 6YQmxOYPSdqycB2XTWv5QzwQUwhPYrx6RlH/fwd+mEwsh+FpbA8YQSIOf88DnU5V /3TC+Tg9pejhEUWMbhV1kIcl7C0s0RcXmPc7GuGfXq/RH9MFEITwM6s/1BtkRQ9C F8OBnvXANxCBL/HA7yanMlAu1j5M3hIKgPc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:03:43 2026 by rpki-client