$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa File: 909e0677-e107-3f90-b3d6-d289381c03ee.roa (raw, json) Hash identifier: cHl8+PQ0VHbblba045tsKOotjmGp3F2XSmTm1SDMzng= Subject key identifier: 13:2F:A8:34:05:70:32:43:6A:E0:CC:4F:D8:49:AD:A1:EB:61:44:EC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F4973F37C7DD70251898C7FE2 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 2607:740:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f3:7c:7d:d7:02:51:89:8c:7f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ccab8392-c7a2-4193-b86a-9fab62f98e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:76:3b:a9:9d:91:02:7a:79:7c:6d:48:a0: 8b:47:07:32:29:7d:ee:cc:b0:64:3d:22:49:a4:09: be:d9:a8:3b:30:28:64:e0:18:82:21:d6:e8:b7:6b: 81:20:67:6c:87:4c:f2:91:59:77:3d:91:6a:7d:1b: a1:e0:5e:95:e6:6c:f6:78:b1:4a:3b:65:9e:13:ed: 42:e4:3c:25:82:03:aa:93:a4:c7:22:d1:09:cf:90: d1:dd:e6:d1:87:e8:6d:0a:7b:ce:ff:bf:cb:bb:14: be:dc:48:ce:17:45:ca:06:91:c0:90:df:e6:53:14: c7:27:0d:9c:3c:40:06:e3:0b:0e:98:c0:fd:71:1c: ca:66:c1:65:36:84:17:c8:29:24:14:f6:e8:8f:31: 86:9d:95:5c:9c:7f:83:a8:2f:17:d5:f3:80:5d:f3: 79:f5:08:a5:ed:91:87:88:b7:d9:da:36:fe:f2:ec: cd:74:52:12:18:99:8c:59:94:b7:3b:99:55:9a:d8: 1f:0b:56:c8:1c:45:fc:11:27:48:25:a5:4a:ca:8c: e3:51:84:50:7b:e9:7f:d6:e7:d0:33:b1:40:3d:e3: 93:c1:3d:da:e6:28:02:8a:d8:89:01:56:d7:7c:e1: e0:d3:7a:f6:00:7f:36:5e:c6:d4:95:5e:4a:f7:de: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2F:A8:34:05:70:32:43:6A:E0:CC:4F:D8:49:AD:A1:EB:61:44:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e5:b1:75:64:d8:aa:f5:e8:08:1a:de:09:10:7d:cb:9e:dd: f7:c8:eb:87:75:b5:5d:da:8a:ac:2f:96:cc:e4:e3:ca:b1:dd: 09:d3:b2:8c:39:ab:1a:5b:57:48:4b:31:c1:6f:79:bc:82:30: ad:cd:b3:f4:81:3d:d7:6e:2e:f2:57:75:31:0f:07:d8:29:f3: df:23:92:c5:e1:63:df:6c:64:d7:69:33:02:fe:76:65:8a:2b: 80:51:5c:17:64:2d:15:47:f4:42:80:42:80:b4:0f:39:13:15: df:38:4f:40:2d:dc:0c:4c:ce:37:51:a3:bf:49:89:3f:61:81: 43:73:f2:c9:9e:eb:78:dc:38:a7:be:ce:cc:06:e0:8f:29:74: 34:0e:df:b6:89:d9:86:e8:25:00:69:7e:ba:cb:b4:ae:92:a1: 04:ad:25:12:42:3b:eb:d1:8d:2a:fc:5a:95:fd:05:42:ee:3d: 83:a1:20:c0:c2:06:4d:77:cb:b5:d7:82:4e:af:e2:6c:c4:b2: 56:b9:88:1d:09:9c:9a:2a:0f:e4:27:9f:f9:ad:a6:33:b0:62: 29:06:58:85:6d:7b:2e:58:60:79:d8:6c:47:f7:09:f0:70:7d: 98:d3:10:d4:19:2b:ec:84:8c:74:fb:a2:cd:28:78:83:d8:85: 4b:02:80:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc/N8fdcCUYmMf+IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2NhYjgzOTItYzdhMi00MTkzLWI4NmEtOWZhYjYyZjk4ZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2l2O6mdkQJ6eXxtSKCLRwcyKX3uzLBkPSJJ pAm+2ag7MChk4BiCIdbot2uBIGdsh0zykVl3PZFqfRuh4F6V5mz2eLFKO2WeE+1C 5DwlggOqk6THItEJz5DR3ebRh+htCnvO/7/LuxS+3EjOF0XKBpHAkN/mUxTHJw2c PEAG4wsOmMD9cRzKZsFlNoQXyCkkFPbojzGGnZVcnH+DqC8X1fOAXfN59Qil7ZGH iLfZ2jb+8uzNdFISGJmMWZS3O5lVmtgfC1bIHEX8ESdIJaVKyozjUYRQe+l/1ufQ M7FAPeOTwT3a5igCitiJAVbXfOHg03r2AH82XsbUlV5K9967UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBMvqDQFcDJDauDMT9hJraHrYUTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTA5ZTA2NzctZTEwNy0z ZjkwLWIzZDYtZDI4OTM4MWMwM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvlsXVk2Kr16Aga3gkQfcue3ffI64d1tV3aiqwvlszk48qx3QnT sow5qxpbV0hLMcFvebyCMK3Ns/SBPdduLvJXdTEPB9gp898jksXhY99sZNdpMwL+ dmWKK4BRXBdkLRVH9EKAQoC0DzkTFd84T0At3AxMzjdRo79JiT9hgUNz8sme63jc OKe+zswG4I8pdDQO37aJ2YboJQBpfrrLtK6SoQStJRJCO+vRjSr8WpX9BULuPYOh IMDCBk13y7XXgk6v4mzEsla5iB0JnJoqD+Qnn/mtpjOwYikGWIVtey5YYHnYbEf3 CfBwfZjTENQZK+yEjHT7os0oeIPYhUsCgII= -----END CERTIFICATE-----Generated at Sat Sep 26 16:51:10 2026 by rpki-client