$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa File: 47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa (raw, json) Hash identifier: THk98MPvGJYjdPpAQCM/DIHqk9gmAiZJxgp+yuLEIKQ= Subject key identifier: E0:98:D7:EC:D4:9D:22:3A:8F:44:93:D6:F6:48:69:4D:A1:5C:AC:9D Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F4973F387608F17FBB56BBB80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 2607:740:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f3:87:60:8f:17:fb:b5:6b:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33a51e99-4aac-4d14-9d97-c59cdded721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:37:b4:08:23:f7:f8:db:db:9b:71:99:11: b5:8d:c0:81:73:75:13:9a:d0:72:b8:92:b0:57:69: 4f:77:ed:4e:1e:99:ac:73:9f:8f:4d:da:1a:41:3a: 2c:c8:77:18:88:27:21:f2:32:95:19:21:ae:f2:db: e3:a4:8d:4a:42:a2:57:27:2b:ee:a4:ad:49:6c:60: bf:6b:03:e8:e0:ea:58:81:a6:9d:39:cb:93:b6:29: 7e:08:1b:83:01:7a:ec:22:63:06:c9:0d:b1:e1:c2: 1d:d7:af:23:e0:f4:eb:7a:62:81:11:8c:e6:aa:99: 79:ec:72:5b:f5:5f:28:45:8b:fe:cb:dd:33:f2:49: 61:cc:dc:64:ea:df:32:85:4b:68:18:5b:be:53:e4: 35:d5:4d:a9:7c:65:dc:1e:c3:45:b4:38:67:e8:87: 10:58:7a:a8:96:e3:e2:23:06:73:a6:88:a2:9b:45: 5f:88:e8:e0:31:14:2f:39:6c:19:19:70:cc:60:6a: 58:f0:20:93:41:b8:08:d3:2f:2a:11:71:6c:11:ad: 0a:d7:cd:ee:3f:dd:18:e3:ae:69:a5:53:a1:da:50: 3e:b4:f4:df:07:ab:04:da:84:9b:d2:0a:5f:7b:c7: 2c:b7:8c:c5:9e:2a:f2:06:83:f3:a1:4e:8e:28:a6: 5e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:98:D7:EC:D4:9D:22:3A:8F:44:93:D6:F6:48:69:4D:A1:5C:AC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:3a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3f:8c:88:60:05:bc:2f:2c:a6:52:de:51:f3:72:a9:b1:c2: 7e:3e:1e:d2:3f:27:22:4a:99:42:12:14:b8:2b:9c:59:b4:87: 9a:29:75:4d:ca:5e:0e:0c:f4:12:7a:0c:2a:85:ed:a2:33:ea: 38:84:30:7a:26:d6:bc:9d:d7:f6:86:46:5c:84:e3:11:c7:41: 05:7b:4e:e5:d7:8b:f9:a1:01:ef:98:04:89:14:d0:8b:42:cf: 91:d0:d5:1f:ee:62:ea:61:85:a5:9e:2f:32:80:0c:e3:ec:70: 64:69:f1:6b:9d:2e:0c:37:e8:17:3e:e3:23:98:55:40:02:8a: 8a:99:f3:05:49:01:fb:29:af:73:fe:55:d7:d1:e3:bd:61:1d: c3:ed:23:e6:a9:a9:5c:12:61:a3:ba:e9:bc:4d:9b:9d:db:47: b7:c1:53:51:f0:72:bf:da:04:15:c9:81:2d:21:31:6f:04:25: 84:3c:7c:4c:43:96:c4:0d:f2:f1:e7:72:f2:a0:59:f5:2b:d0: d1:63:3b:af:86:d7:cc:66:7c:54:6e:10:3b:c8:62:0d:c1:50: d4:83:70:fb:fc:5d:69:9d:44:43:40:ef:eb:2f:9a:aa:37:3e: 96:65:a9:f2:1a:df:fa:39:44:ad:dd:e4:8b:70:99:e1:6c:af: 86:06:57:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc/OHYI8X+7Vru4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNhNTFlOTktNGFhYy00ZDE0LTlkOTctYzU5Y2RkZWQ3MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIw3tAgj9/jb25txmRG1jcCBc3UTmtByuJKw V2lPd+1OHpmsc5+PTdoaQTosyHcYiCch8jKVGSGu8tvjpI1KQqJXJyvupK1JbGC/ awPo4OpYgaadOcuTtil+CBuDAXrsImMGyQ2x4cId168j4PTremKBEYzmqpl57HJb 9V8oRYv+y90z8klhzNxk6t8yhUtoGFu+U+Q11U2pfGXcHsNFtDhn6IcQWHqoluPi IwZzpoiim0VfiOjgMRQvOWwZGXDMYGpY8CCTQbgI0y8qEXFsEa0K183uP90Y465p pVOh2lA+tPTfB6sE2oSb0gpfe8cst4zFniryBoPzoU6OKKZeTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCY1+zUnSI6j0ST1vZIaU2hXKydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDdkNWUxM2EtMWI1Zi0z OWUyLTk2YjAtYWU1NzNkNTBlNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0/jIhgBbwvLKZS3lHzcqmxwn4+HtI/JyJKmUISFLgrnFm0h5op dU3KXg4M9BJ6DCqF7aIz6jiEMHom1ryd1/aGRlyE4xHHQQV7TuXXi/mhAe+YBIkU 0ItCz5HQ1R/uYuphhaWeLzKADOPscGRp8WudLgw36Bc+4yOYVUACioqZ8wVJAfsp r3P+VdfR471hHcPtI+apqVwSYaO66bxNm53bR7fBU1Hwcr/aBBXJgS0hMW8EJYQ8 fExDlsQN8vHncvKgWfUr0NFjO6+G18xmfFRuEDvIYg3BUNSDcPv8XWmdRENA7+sv mqo3PpZlqfIa3/o5RK3d5ItwmeFsr4YGVzQ= -----END CERTIFICATE-----Generated at Sat Sep 26 18:44:12 2026 by rpki-client