$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53d3906d-a189-350c-a69d-f14f1db4436e.roa File: 53d3906d-a189-350c-a69d-f14f1db4436e.roa (raw, json) Hash identifier: hvEZIfyYA07pfhAtTYoOV2bboqL4OwCzveEytbNTEF8= Subject key identifier: D8:31:B9:A5:7A:56:48:CD:D2:21:7E:DE:7D:52:A5:99:28:F4:6C:44 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F4973079C6BA450ACE13BDF80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53d3906d-a189-350c-a69d-f14f1db4436e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 2607:740:180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:07:9c:6b:a4:50:ac:e1:3b:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f7743b3-eadc-4c3e-a90d-d737d510d2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:84:22:af:85:29:af:e1:4a:a5:3c:ec:3a:4b: 0f:ca:c1:b2:56:f2:45:47:e1:4e:f7:55:b6:94:e5: 6f:92:b1:59:54:a4:0e:b4:97:7e:06:12:54:89:d3: 28:b3:b5:72:88:37:7d:26:51:a8:17:04:a4:19:71: bd:0c:c4:54:7c:16:9f:5d:a7:d3:7a:7a:4e:a8:5d: 5f:a9:9b:a1:77:c8:7c:88:ca:b2:b6:6b:1e:02:f4: 86:c5:b1:47:12:b8:b3:02:01:53:88:a1:d3:c4:c5: 80:61:f1:63:7a:62:17:0c:14:f3:39:c6:e1:89:e5: f8:5b:3d:ce:af:9c:66:e9:19:b8:8f:f9:13:db:2e: 84:8a:43:3a:8e:86:96:dc:b8:a8:54:3b:5a:6d:a4: a0:39:43:fa:41:74:3e:ca:26:1a:50:79:6c:b1:0c: 76:c4:ca:d0:48:84:f3:74:ea:a4:af:1b:07:4a:41: 7d:58:0c:f2:ac:ce:b2:d6:57:be:fe:af:90:60:10: 80:15:e4:76:1b:0a:6f:40:2f:fa:4b:b8:1a:0e:8d: b7:2a:c1:a6:a7:cb:31:5d:18:05:da:ba:4f:ac:35: 91:86:b1:22:16:eb:1e:b1:09:04:b3:b7:79:12:80: d7:25:00:23:69:3f:69:97:17:53:38:be:69:a4:17: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:31:B9:A5:7A:56:48:CD:D2:21:7E:DE:7D:52:A5:99:28:F4:6C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53d3906d-a189-350c-a69d-f14f1db4436e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:180::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e2:9c:cb:fb:09:79:85:a0:01:18:73:1d:16:16:0d:19:90: ce:96:9c:0f:6b:81:d1:8f:62:f7:50:45:13:1a:84:bc:59:54: 92:9d:5a:3a:fe:61:ba:ca:09:31:1d:ff:7e:ea:15:46:3d:2e: 0d:1d:89:c2:ff:d8:ce:fc:76:50:ec:50:73:a2:f8:ff:61:8c: b7:bb:7f:af:50:59:5b:49:f0:fc:e4:2a:21:1b:d9:67:1c:dd: a0:37:46:09:01:e6:01:75:b1:d2:2c:e2:db:14:a4:52:f8:dd: 6b:d9:b0:67:c1:07:0b:e2:21:8a:ab:72:4d:0c:53:c5:be:bd: e8:20:fc:2b:f2:02:87:c8:0f:62:61:82:35:35:10:54:c7:32: 48:08:a9:2c:8d:81:af:25:d5:3a:04:22:a1:8d:89:02:1e:38: 3c:30:5f:84:7d:b7:52:aa:23:b3:dc:4e:01:de:5f:82:0b:fa: 89:99:98:f0:77:33:48:d9:e5:d1:a8:e0:1d:13:84:e8:27:4e: ba:f1:00:a7:13:5e:fa:a9:42:88:08:ee:af:2c:b0:e2:5e:e2: 3b:57:9f:12:8a:9f:4a:ed:c4:a8:46:20:02:72:9c:76:18:a7: 64:ac:62:46:fe:82:bb:d4:b1:9e:85:18:99:0b:9d:0b:b9:2b: e2:db:89:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcweca6RQrOE734AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY3NzQzYjMtZWFkYy00YzNlLWE5MGQtZDczN2Q1MTBkMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YQir4Upr+FKpTzsOksPysGyVvJFR+FO91W2 lOVvkrFZVKQOtJd+BhJUidMos7VyiDd9JlGoFwSkGXG9DMRUfBafXafTenpOqF1f qZuhd8h8iMqytmseAvSGxbFHErizAgFTiKHTxMWAYfFjemIXDBTzOcbhieX4Wz3O r5xm6Rm4j/kT2y6EikM6joaW3LioVDtabaSgOUP6QXQ+yiYaUHlssQx2xMrQSITz dOqkrxsHSkF9WAzyrM6y1le+/q+QYBCAFeR2GwpvQC/6S7gaDo23KsGmp8sxXRgF 2rpPrDWRhrEiFusesQkEs7d5EoDXJQAjaT9plxdTOL5ppBd7TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgxuaV6VkjN0iF+3n1SpZko9GxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTNkMzkwNmQtYTE4OS0z NTBjLWE2OWQtZjE0ZjFkYjQ0MzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC/inMv7CXmFoAEYcx0WFg0ZkM6WnA9rgdGPYvdQRRMahLxZVJKd Wjr+YbrKCTEd/37qFUY9Lg0dicL/2M78dlDsUHOi+P9hjLe7f69QWVtJ8PzkKiEb 2Wcc3aA3RgkB5gF1sdIs4tsUpFL43WvZsGfBBwviIYqrck0MU8W+vegg/CvyAofI D2JhgjU1EFTHMkgIqSyNga8l1ToEIqGNiQIeODwwX4R9t1KqI7PcTgHeX4IL+omZ mPB3M0jZ5dGo4B0ThOgnTrrxAKcTXvqpQogI7q8ssOJe4jtXnxKKn0rtxKhGIAJy nHYYp2SsYkb+grvUsZ6FGJkLnQu5K+LbiXs= -----END CERTIFICATE-----Generated at Tue Sep 29 13:38:48 2026 by rpki-client