$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa File: 53e8a298-6e33-32bc-8504-916a18ed40ab.roa (raw, json) Hash identifier: uiMrYkMI9wH/tfq7jeTaUxwZ2M6vFdiIBE29OQm9Ubk= Subject key identifier: 4C:2C:4F:42:51:55:51:4F:C4:B2:C1:12:B2:97:EB:A0:0C:45:6F:FE Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D3DFF96F4FC1BBB92952F5300 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 11990 IP address blocks: 2607:740:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:96:f4:fc:1b:bb:92:95:2f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=67cbff01-9d0d-42bd-8e0f-4cde65ef1459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:2f:00:13:e1:b1:3f:76:86:fa:b9:cb:9a: 23:f4:f3:0d:c4:aa:80:03:7e:32:8e:2a:7d:0f:e7: b9:38:05:a4:4e:e7:01:c4:2d:68:5f:58:46:96:c0: 97:e0:89:1a:1e:99:91:27:a6:33:63:9c:fb:12:4f: 1d:9d:da:01:58:38:c4:ad:6d:ef:07:51:34:1d:d6: 26:9e:3e:84:ea:bd:a8:6b:45:69:6a:e9:57:c7:05: 11:2d:26:1b:e6:65:19:b5:1d:de:4f:f9:65:7e:52: 59:c0:07:c3:46:b3:27:71:83:1f:f7:7e:47:04:ab: 6b:77:dc:9c:b6:8f:dc:1c:fb:4e:c9:eb:43:36:a6: 2d:32:45:f3:94:84:d9:14:f7:1e:9a:16:94:e5:08: b0:7d:a7:d2:ee:b6:ce:3e:0c:1c:33:d7:86:fa:84: 50:d2:a8:40:6a:12:a4:80:ff:71:1c:61:30:d7:58: 37:8e:9d:9c:52:80:72:b5:51:38:f2:fb:d8:f6:39: ec:a1:00:c5:01:25:63:81:05:c3:07:fa:55:10:a9: 1f:d0:58:15:6c:ca:4d:23:ce:ba:7c:85:b7:46:d5: 75:4d:b8:c7:14:d0:aa:04:55:c8:a3:c7:84:39:60: d9:81:62:21:c5:5d:91:26:c7:b8:18:db:90:07:de: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2C:4F:42:51:55:51:4F:C4:B2:C1:12:B2:97:EB:A0:0C:45:6F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:26:ab:ad:04:91:ec:1e:72:f7:88:68:75:4f:ac:d8:2b:d1: f1:fd:5d:88:f4:44:d3:83:03:57:56:f7:d1:f8:5b:f2:8a:22: 5a:fe:2e:d1:72:60:94:22:00:3d:14:ed:6b:f0:82:07:3d:cd: 13:31:bf:39:b9:a4:98:e1:a1:da:23:6b:5d:ae:08:a5:80:3e: 59:59:e2:7a:3c:20:8c:01:b3:a9:c3:a7:c0:64:44:21:3d:eb: 89:db:04:57:80:de:f8:b5:3c:9d:e4:c9:26:5f:62:9d:1f:3a: 92:b6:10:5c:b9:61:2d:17:de:39:80:e8:b4:b5:3e:4a:8c:d6: 1a:6f:82:18:ac:5c:97:c2:3b:dc:6f:77:cd:4a:53:83:8e:9a: b4:22:e1:c1:94:15:35:40:6e:75:8f:31:74:c4:c7:2f:e7:0e: 6d:a3:90:5f:75:9a:55:dc:6e:78:7c:b6:1a:78:f0:c5:bd:ac: 6c:d6:4f:61:14:c6:b6:c6:df:90:bb:01:cb:e8:24:f4:42:d4: 98:52:8f:b9:40:aa:c6:63:b2:84:18:d1:be:b5:a5:1e:e2:d7: 26:4c:e8:83:e6:48:3e:84:35:bb:7d:f8:b3:59:b2:0e:23:dc: 96:90:f8:69:c4:b1:63:e3:cd:4e:64:12:ed:03:79:43:e0:02: 38:ce:dd:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/5b0/Bu7kpUvUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjdjYmZmMDEtOWQwZC00MmJkLThlMGYtNGNkZTY1ZWYxNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJMvABPhsT92hvq5y5oj9PMNxKqAA34yjip9 D+e5OAWkTucBxC1oX1hGlsCX4IkaHpmRJ6YzY5z7Ek8dndoBWDjErW3vB1E0HdYm nj6E6r2oa0VpaulXxwURLSYb5mUZtR3eT/llflJZwAfDRrMncYMf935HBKtrd9yc to/cHPtOyetDNqYtMkXzlITZFPcemhaU5QiwfafS7rbOPgwcM9eG+oRQ0qhAahKk gP9xHGEw11g3jp2cUoBytVE48vvY9jnsoQDFASVjgQXDB/pVEKkf0FgVbMpNI866 fIW3RtV1TbjHFNCqBFXIo8eEOWDZgWIhxV2RJse4GNuQB97H5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEwsT0JRVVFPxLLBErKX66AMRW/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTNlOGEyOTgtNmUzMy0z MmJjLTg1MDQtOTE2YTE4ZWQ0MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFcmq60EkewecveIaHVPrNgr0fH9XYj0RNODA1dW99H4W/KKIlr+ LtFyYJQiAD0U7Wvwggc9zRMxvzm5pJjhodoja12uCKWAPllZ4no8IIwBs6nDp8Bk RCE964nbBFeA3vi1PJ3kySZfYp0fOpK2EFy5YS0X3jmA6LS1PkqM1hpvghisXJfC O9xvd81KU4OOmrQi4cGUFTVAbnWPMXTExy/nDm2jkF91mlXcbnh8thp48MW9rGzW T2EUxrbG35C7AcvoJPRC1JhSj7lAqsZjsoQY0b61pR7i1yZM6IPmSD6ENbt9+LNZ sg4j3JaQ+GnEsWPjzU5kEu0DeUPgAjjO3WU= -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:18 2026 by rpki-client