$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa File: 53e8a298-6e33-32bc-8504-916a18ed40ab.roa (raw, json) Hash identifier: nIZBkUAPR9mrFL6f5jNSap8NzBjLc7Rips61SPupVsI= Subject key identifier: 68:60:AF:85:DB:99:93:39:4A:CF:DB:1D:C7:53:7C:EF:D7:C0:75:77 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F6292CA724628822BC6AC7300 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 11990 IP address blocks: 2607:740:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ca:72:46:28:82:2b:c6:ac:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ac63b8b5-df7a-4c27-a502-301291144895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e0:2d:1b:7b:f6:ac:91:19:21:0a:bf:5e:98: f7:54:ea:4c:8d:bb:05:57:7d:19:8d:28:69:49:1e: b1:bc:ce:54:e0:64:f5:da:c5:c6:bd:47:e4:b4:48: c3:32:a9:a3:8b:79:7f:c2:28:f6:4c:dc:ad:df:8f: 03:05:b5:6d:4e:ef:cf:5a:44:98:a3:71:c0:bd:64: 3c:39:ec:4e:79:76:48:c8:85:4a:f9:c2:e0:ad:52: ed:f4:6d:42:c3:7f:b6:1b:5c:27:9e:b9:da:2e:5d: db:45:f1:ea:85:86:19:37:94:60:33:79:61:9b:f2: b6:27:0e:c1:fa:3a:7f:7a:b1:ee:4b:c4:aa:4d:43: ed:11:7c:fe:30:10:c2:cb:aa:94:a1:1a:f6:13:f3: 2b:9a:a1:c1:61:d9:91:a9:f7:37:e2:af:a0:16:d0: 55:de:1f:d7:68:ad:98:26:81:c9:ac:aa:41:61:4b: fc:f4:31:24:b2:6e:b1:76:c7:c6:25:54:d0:d4:06: 59:3b:d7:6f:f9:86:8e:c9:c8:41:a9:0a:81:e2:42: c2:7d:2e:22:bb:c5:36:24:53:3f:a0:6c:13:13:4d: b1:70:58:7d:87:96:a4:c5:b4:4f:41:c0:6a:2e:74: 95:15:94:25:7d:20:6b:35:5d:ec:3d:00:17:3c:6c: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:60:AF:85:DB:99:93:39:4A:CF:DB:1D:C7:53:7C:EF:D7:C0:75:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/53e8a298-6e33-32bc-8504-916a18ed40ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:56::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ea:b9:33:5c:e1:11:2c:a0:ee:c2:b9:a1:42:e1:ed:4b:3a: 5a:e2:f4:75:f1:78:4a:35:17:b7:66:be:d9:c4:5c:d3:a2:43: aa:82:0d:b7:38:cd:07:cb:1d:19:f3:76:c6:5d:fa:05:9b:48: 5b:4c:7d:4f:c4:d7:44:8c:1d:08:85:90:94:85:f8:d6:72:0a: b9:d2:6d:a1:1b:8f:58:d0:54:64:02:1a:cd:4e:6a:82:c2:89: 3d:a8:be:ce:f5:41:49:44:0e:53:f1:27:fe:dd:d8:65:7b:7a: 11:d7:db:e5:46:4b:6a:f4:d3:4b:b4:fd:77:df:12:ba:0d:02: 1f:fd:5e:42:b9:89:7d:d3:a1:32:d4:bc:90:74:58:10:b1:06: 9f:b9:24:75:36:3c:f2:6c:92:ba:fd:02:9e:08:be:97:0d:b0: 03:eb:ba:32:36:2f:04:5c:b7:50:2f:f3:f4:53:03:21:f6:97: 0d:c3:c6:1c:77:f0:6c:16:14:2b:f4:2e:a2:0a:8b:aa:33:5c: 61:d0:25:ce:19:4a:7a:d1:5a:b6:83:df:5f:bd:79:8b:b8:2b: 1c:98:c3:b7:8e:c7:f9:61:0a:79:af:f3:5d:7e:52:34:75:12: eb:7c:ea:10:52:29:16:bf:a8:bd:99:63:d0:f7:67:c3:1e:18: f4:3f:e0:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikspyRiiCK8ascwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YWM2M2I4YjUtZGY3YS00YzI3LWE1MDItMzAxMjkxMTQ0ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOAtG3v2rJEZIQq/Xpj3VOpMjbsFV30ZjShp SR6xvM5U4GT12sXGvUfktEjDMqmji3l/wij2TNyt348DBbVtTu/PWkSYo3HAvWQ8 OexOeXZIyIVK+cLgrVLt9G1Cw3+2G1wnnrnaLl3bRfHqhYYZN5RgM3lhm/K2Jw7B +jp/erHuS8SqTUPtEXz+MBDCy6qUoRr2E/MrmqHBYdmRqfc34q+gFtBV3h/XaK2Y JoHJrKpBYUv89DEksm6xdsfGJVTQ1AZZO9dv+YaOychBqQqB4kLCfS4iu8U2JFM/ oGwTE02xcFh9h5akxbRPQcBqLnSVFZQlfSBrNV3sPQAXPGwLVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhgr4XbmZM5Ss/bHcdTfO/XwHV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNTNlOGEyOTgtNmUzMy0z MmJjLTg1MDQtOTE2YTE4ZWQ0MGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnquTNc4REsoO7CuaFC4e1LOlri9HXxeEo1F7dmvtnEXNOiQ6qC Dbc4zQfLHRnzdsZd+gWbSFtMfU/E10SMHQiFkJSF+NZyCrnSbaEbj1jQVGQCGs1O aoLCiT2ovs71QUlEDlPxJ/7d2GV7ehHX2+VGS2r000u0/XffEroNAh/9XkK5iX3T oTLUvJB0WBCxBp+5JHU2PPJskrr9Ap4IvpcNsAPrujI2LwRct1Av8/RTAyH2lw3D xhx38GwWFCv0LqIKi6ozXGHQJc4ZSnrRWraD31+9eYu4KxyYw7eOx/lhCnmv811+ UjR1Eut86hBSKRa/qL2ZY9D3Z8MeGPQ/4PM= -----END CERTIFICATE-----Generated at Mon Oct 5 05:20:12 2026 by rpki-client