$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa File: a3e5e46a-dd84-34eb-9259-02fea641d879.roa (raw, json) Hash identifier: MalEJ3BSeQnlIlFI/Yxe5BVIv9xxMZv3qJajWtNOXQ0= Subject key identifier: 67:9C:68:E9:0C:09:B2:F1:98:3A:C3:4F:10:DC:A0:68:F5:DC:2C:AF Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DC6CB090FAE31D38B31506E80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 396356 IP address blocks: 2607:740:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:09:0f:ae:31:d3:8b:31:50:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=03c01512-6a2b-40f7-a50a-a6c05692935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:08:38:b5:06:54:6d:0d:bf:b4:37:42:a0:20: 54:78:d7:5d:ef:ec:c0:ec:e7:c3:ac:06:cf:0a:09: a6:73:5d:55:d7:8f:a5:15:3e:3c:86:5d:3c:d0:54: 0b:47:c4:8b:84:9e:b8:21:c0:5c:a6:b7:2f:b6:34: 45:73:19:dd:50:6d:c0:fd:6d:04:c4:a7:f4:05:6a: 05:3f:85:90:dc:66:7d:8c:5f:e3:cf:7c:ab:99:1a: d4:4e:af:b3:89:66:38:6c:b7:05:f0:80:98:c7:77: 0f:61:67:97:f1:28:3e:10:c9:1b:45:a0:64:cd:c0: d0:38:e8:8a:35:2d:a5:29:e3:c3:92:5a:0d:d3:46: 22:21:c4:09:d7:e1:43:a4:51:e3:69:c3:a8:e8:47: f7:fb:b3:5a:93:ac:67:38:28:46:37:10:28:3d:4f: 3a:46:e1:bd:6e:50:35:38:75:52:52:78:8c:2e:fb: 7b:30:08:c0:72:c5:56:67:f4:8a:a8:1c:a9:91:40: dc:5c:34:52:2a:21:94:d3:91:94:37:eb:2b:37:61: 4f:ce:4d:20:a2:bd:25:2c:14:3a:6f:31:f8:0d:6f: 83:df:19:69:32:0b:f1:b9:c8:71:56:26:f1:65:ca: 9f:dd:51:f8:08:ca:c4:8f:f6:0d:c8:c7:e2:bc:be: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9C:68:E9:0C:09:B2:F1:98:3A:C3:4F:10:DC:A0:68:F5:DC:2C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a3e5e46a-dd84-34eb-9259-02fea641d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:74:89:3f:23:49:a5:b8:a8:53:fe:f1:5a:74:c4:e6:37:9c: 83:17:28:12:16:d0:15:83:a1:1e:40:de:21:8a:c8:a2:73:a9: 9f:3b:98:26:b2:de:12:4b:6f:56:1f:38:d5:61:ca:99:85:76: 87:64:2a:12:75:b8:92:d3:dc:4a:12:ac:3b:d0:47:5a:a1:54: 3a:d9:29:d1:52:27:57:7e:70:49:69:ee:ee:e9:ee:af:83:a8: b7:74:64:9f:78:8d:a4:76:16:5b:16:7a:79:fe:ae:b1:d4:de: 43:3f:1f:c4:88:68:1f:36:1a:1a:c1:ed:6d:00:b5:83:b6:e9: cd:22:4b:66:b7:fc:ca:1f:83:94:62:98:89:97:c2:29:49:44: a1:9c:12:93:12:07:41:09:45:8e:cd:bc:36:d0:bd:37:1e:f3: e6:1f:a1:1c:c5:04:c9:ae:dd:8d:c7:af:48:e8:6e:02:66:a4: 32:89:23:69:c9:80:93:b6:64:aa:b5:6e:2f:aa:bc:06:a5:b1: 5f:5b:0e:56:a3:89:4b:a1:bc:83:0b:4b:73:9b:d9:e4:8f:53: 5a:ad:8f:cf:d8:b8:a1:24:c3:1f:7c:b1:e3:ce:9b:f2:34:55: 4f:70:eb:c6:ac:31:b6:71:48:38:82:92:16:37:1a:0d:85:ed: 35:9c:5d:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3GywkPrjHTizFQboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk MDNjMDE1MTItNmEyYi00MGY3LWE1MGEtYTZjMDU2OTI5MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQg4tQZUbQ2/tDdCoCBUeNdd7+zA7OfDrAbP Cgmmc11V14+lFT48hl080FQLR8SLhJ64IcBcprcvtjRFcxndUG3A/W0ExKf0BWoF P4WQ3GZ9jF/jz3yrmRrUTq+ziWY4bLcF8ICYx3cPYWeX8Sg+EMkbRaBkzcDQOOiK NS2lKePDkloN00YiIcQJ1+FDpFHjacOo6Ef3+7Nak6xnOChGNxAoPU86RuG9blA1 OHVSUniMLvt7MAjAcsVWZ/SKqBypkUDcXDRSKiGU05GUN+srN2FPzk0gor0lLBQ6 bzH4DW+D3xlpMgvxuchxVibxZcqf3VH4CMrEj/YNyMfivL60SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGecaOkMCbLxmDrDTxDcoGj13CyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTNlNWU0NmEtZGQ4NC0z NGViLTkyNTktMDJmZWE2NDFkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH10iT8jSaW4qFP+8Vp0xOY3nIMXKBIW0BWDoR5A3iGKyKJzqZ87 mCay3hJLb1YfONVhypmFdodkKhJ1uJLT3EoSrDvQR1qhVDrZKdFSJ1d+cElp7u7p 7q+DqLd0ZJ94jaR2FlsWenn+rrHU3kM/H8SIaB82GhrB7W0AtYO26c0iS2a3/Mof g5RimImXwilJRKGcEpMSB0EJRY7NvDbQvTce8+YfoRzFBMmu3Y3Hr0jobgJmpDKJ I2nJgJO2ZKq1bi+qvAalsV9bDlajiUuhvIMLS3Ob2eSPU1qtj8/YuKEkwx98sePO m/I0VU9w68asMbZxSDiCkhY3Gg2F7TWcXV8= -----END CERTIFICATE-----Generated at Wed May 13 07:02:48 2026 by rpki-client