$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa File: 53e8a298-6e33-32bc-8504-916a18ed40ab.roa (raw, json) Hash identifier: VbTOlWUST/CgT34NAmS7M7RKl04dSSzBuzsDDS8pBf0= Subject key identifier: 35:CE:25:81:C4:DE:59:4B:35:F4:B7:82:9A:79:63:91:63:5F:05:C9 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B7DECA2EBD9AD739F05D35D80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 11990 IP address blocks: 2607:740:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a2:eb:d9:ad:73:9f:05:d3:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=b916e8df-7886-4dd7-b931-e15be78a74f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:9c:1c:fd:05:3e:31:da:50:6f:cb:54:7c: e7:d1:74:60:e1:ba:e2:5c:97:86:63:f6:3f:28:04: 31:22:ed:e3:38:f5:63:43:bc:9b:51:cb:fd:0b:52: 39:61:ff:2e:cc:32:df:1d:ae:87:27:cd:3f:b3:97: 3b:b5:75:a0:7b:78:f9:a9:45:ad:1c:05:6f:5f:53: 4b:a9:28:55:e7:0a:53:48:01:58:a5:f9:3a:ac:81: 86:1d:7b:36:7a:e3:eb:56:80:7c:66:b5:48:5d:a3: 9c:e9:f8:78:f4:f0:f9:9a:31:5b:08:52:20:66:9c: fa:18:b3:9f:36:07:cd:c4:6b:be:13:ad:d8:9c:4b: 5c:03:20:58:49:0f:45:ac:17:43:f1:af:b0:ba:8d: c2:86:05:b6:f4:7a:fc:a0:91:69:b1:be:94:ae:dc: 18:b3:b1:54:af:68:62:42:12:27:2c:22:14:1a:5e: 1c:56:de:2e:0e:72:ca:db:31:55:fa:78:8a:4e:5b: ff:8f:cc:56:b7:a5:69:fa:d5:7a:2e:6a:26:8a:ee: 92:69:34:36:ad:c9:d6:6e:77:ba:ad:a5:d2:69:a3: 2c:b5:96:e3:ac:5f:3a:6f:76:d0:ac:7c:68:dc:38: a4:56:e1:67:c5:33:8a:3f:11:93:4a:4f:b7:56:45: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CE:25:81:C4:DE:59:4B:35:F4:B7:82:9A:79:63:91:63:5F:05:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0e:bd:8f:04:ed:7e:2a:e0:4b:e2:bd:4b:3d:76:26:b3:31: 84:56:ff:2b:53:e1:13:a3:57:ad:04:87:0d:30:d7:59:c1:51: 5e:88:7b:d6:a6:f1:e4:d8:f7:63:4c:6b:cd:7d:03:a1:44:45: e6:0a:5f:e9:9f:b9:fe:a3:e6:24:c8:de:4a:84:25:fd:fb:88: 2c:68:0a:22:2e:16:b7:5d:fc:2e:71:4e:27:a0:86:9c:a4:e7: 7f:e5:09:6f:1c:57:7e:9a:ce:6c:48:a8:aa:e3:4b:78:67:29: e7:a4:2a:d2:d0:14:98:99:4d:8b:6b:28:fa:bf:66:54:c2:a8: 25:85:5e:f8:74:67:2a:21:da:72:be:dc:85:cf:31:d9:2a:c7: 44:30:8b:49:85:d5:61:c8:86:ae:e2:87:da:a1:6e:2a:f7:0d: 1e:94:41:60:fc:58:e7:4a:7b:2a:08:f9:00:83:bd:d4:f9:84: 6a:e1:b5:c7:27:1c:20:5f:7e:99:29:f4:4c:c2:11:2a:76:ae: a4:fd:9b:5d:80:a4:46:a1:91:d2:9b:a7:0c:cb:a0:87:c1:18: 54:c1:5f:a7:ab:6d:42:b9:ac:33:a7:52:19:13:fe:8e:bb:bf: 0d:be:85:be:3b:18:ad:c3:81:67:92:c7:18:b3:57:56:64:1b: 5b:8b:d1:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt97KLr2a1znwXTXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YjkxNmU4ZGYtNzg4Ni00ZGQ3LWI5MzEtZTE1YmU3OGE3NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOGcHP0FPjHaUG/LVHzn0XRg4briXJeGY/Y/ KAQxIu3jOPVjQ7ybUcv9C1I5Yf8uzDLfHa6HJ80/s5c7tXWge3j5qUWtHAVvX1NL qShV5wpTSAFYpfk6rIGGHXs2euPrVoB8ZrVIXaOc6fh49PD5mjFbCFIgZpz6GLOf NgfNxGu+E63YnEtcAyBYSQ9FrBdD8a+wuo3ChgW29Hr8oJFpsb6UrtwYs7FUr2hi QhInLCIUGl4cVt4uDnLK2zFV+niKTlv/j8xWt6Vp+tV6Lmomiu6SaTQ2rcnWbne6 raXSaaMstZbjrF86b3bQrHxo3DikVuFnxTOKPxGTSk+3VkUcawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXOJYHE3llLNfS3gpp5Y5FjXwXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTNlOGEyOTgtNmUzMy0z MmJjLTg1MDQtOTE2YTE4ZWQ0MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoOvY8E7X4q4EvivUs9diazMYRW/ytT4ROjV60Ehw0w11nBUV6I e9am8eTY92NMa819A6FEReYKX+mfuf6j5iTI3kqEJf37iCxoCiIuFrdd/C5xTieg hpyk53/lCW8cV36azmxIqKrjS3hnKeekKtLQFJiZTYtrKPq/ZlTCqCWFXvh0Zyoh 2nK+3IXPMdkqx0Qwi0mF1WHIhq7ih9qhbir3DR6UQWD8WOdKeyoI+QCDvdT5hGrh tccnHCBffpkp9EzCESp2rqT9m12ApEahkdKbpwzLoIfBGFTBX6erbUK5rDOnUhkT /o67vw2+hb47GK3DgWeSxxizV1ZkG1uL0aw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:55:11 2025 by rpki-client