$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a54bcebf-809a-3fae-9eee-fc77154f45f0.roa File: a54bcebf-809a-3fae-9eee-fc77154f45f0.roa (raw, json) Hash identifier: 2vthrU5pgXCmNGN2MlVEN5niQeREi+dLlQNiCDsXZWo= Subject key identifier: 74:16:77:88:E9:82:82:E1:CF:DF:29:2F:CC:EA:CD:8D:4A:07:55:FA Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F0D6CE6E5BA4AE71DB92BD800 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a54bcebf-809a-3fae-9eee-fc77154f45f0.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 2607:740:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e6:e5:ba:4a:e7:1d:b9:2b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=a0aaff78-d785-4f73-8ded-ce3456c12760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:ed:0a:fc:ae:67:89:0c:87:11:ab:27:f2: 8d:87:b3:6d:0e:4b:5d:6c:f3:15:a5:2e:a3:dd:65: 0a:3c:10:0d:74:93:1a:65:93:6a:f4:db:2a:44:4f: ea:b8:17:73:5c:41:fb:97:15:7f:59:d9:43:0c:cf: 6f:4f:16:f5:6b:48:32:e2:d3:0c:3c:73:12:b3:f2: fa:31:26:19:c3:2a:96:90:5f:9e:f4:e4:fb:d5:ab: 9b:ff:55:2e:e9:5a:45:d9:8c:94:d7:d6:9c:e8:20: ef:28:a6:dc:b9:56:7d:8b:c0:d9:95:4b:6e:13:e7: 9b:73:7b:fc:59:01:f4:1b:11:28:e4:1f:37:a7:12: 5f:82:c3:14:5c:79:24:e9:f4:d8:20:cc:62:41:e6: 81:08:28:3a:81:54:56:6d:72:b3:a0:c2:ee:98:57: 82:69:3a:ff:59:da:01:5d:cd:5b:88:db:f9:3c:82: 7b:53:8a:2f:3f:18:31:83:81:4b:95:02:98:87:10: bc:a4:f6:5a:e4:6c:37:70:f1:5d:24:40:a4:cd:9b: 41:17:eb:7e:68:39:24:1a:b3:a9:22:43:c0:66:ff: 41:4b:8b:47:a2:f1:7d:8d:85:0a:6a:b9:2a:74:7e: b5:eb:5a:a2:3b:fc:23:72:c8:9a:e5:80:86:f8:75: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:16:77:88:E9:82:82:E1:CF:DF:29:2F:CC:EA:CD:8D:4A:07:55:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a54bcebf-809a-3fae-9eee-fc77154f45f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ee:c9:8d:4a:77:74:85:bd:4a:fb:93:47:28:53:23:f3:39: 07:a5:2c:2c:61:66:6f:4b:c5:82:9d:63:0e:7b:ad:33:48:26: 1e:64:95:a1:e9:9a:e3:60:7c:f6:07:b9:5e:71:d3:13:57:c7: b3:5c:9c:3d:5f:e4:9a:ea:59:b2:21:af:ab:fe:70:8f:4d:7e: 0c:82:bb:c9:78:cb:79:47:e2:bf:28:3f:ea:85:c3:05:7e:a1: f6:f0:6e:e7:3d:a4:43:cf:fd:51:db:10:c4:ff:41:e8:dd:4d: 34:2a:e1:d9:f7:23:a4:8d:88:a9:35:be:4b:f4:9d:0f:c8:cb: de:a4:f9:f5:c9:70:76:93:7c:87:cf:94:29:a5:0f:19:7a:a9: 2d:08:2e:13:6b:35:e3:8b:79:d6:e3:4a:16:b4:82:34:6a:f0: b7:de:7a:1e:77:1c:03:91:79:d0:fc:fd:2f:d4:40:48:70:19: e5:57:48:6b:21:b8:a2:57:3c:55:a5:3e:55:b2:80:f6:1e:df: 36:51:18:96:06:48:6e:62:1d:80:b4:2b:d3:fc:a0:c5:42:97: 91:39:60:6e:27:f7:88:eb:bf:20:21:85:57:4d:ae:76:3a:c8: 1e:e2:ac:d6:92:4d:e6:40:fe:fd:65:4d:c6:c2:3d:42:ed:53: b5:a4:9d:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbOblukrnHbkr2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTBhYWZmNzgtZDc4NS00ZjczLThkZWQtY2UzNDU2YzEyNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVvtCvyuZ4kMhxGrJ/KNh7NtDktdbPMVpS6j 3WUKPBANdJMaZZNq9NsqRE/quBdzXEH7lxV/WdlDDM9vTxb1a0gy4tMMPHMSs/L6 MSYZwyqWkF+e9OT71aub/1Uu6VpF2YyU19ac6CDvKKbcuVZ9i8DZlUtuE+ebc3v8 WQH0GxEo5B83pxJfgsMUXHkk6fTYIMxiQeaBCCg6gVRWbXKzoMLumFeCaTr/WdoB Xc1biNv5PIJ7U4ovPxgxg4FLlQKYhxC8pPZa5Gw3cPFdJECkzZtBF+t+aDkkGrOp IkPAZv9BS4tHovF9jYUKarkqdH6161qiO/wjcsia5YCG+HVdTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHQWd4jpgoLhz98pL8zqzY1KB1X6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTU0YmNlYmYtODA5YS0z ZmFlLTllZWUtZmM3NzE1NGY0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvuyY1Kd3SFvUr7k0coUyPzOQelLCxhZm9LxYKdYw57rTNIJh5k laHpmuNgfPYHuV5x0xNXx7NcnD1f5JrqWbIhr6v+cI9NfgyCu8l4y3lH4r8oP+qF wwV+ofbwbuc9pEPP/VHbEMT/QejdTTQq4dn3I6SNiKk1vkv0nQ/Iy96k+fXJcHaT fIfPlCmlDxl6qS0ILhNrNeOLedbjSha0gjRq8Lfeeh53HAORedD8/S/UQEhwGeVX SGshuKJXPFWlPlWygPYe3zZRGJYGSG5iHYC0K9P8oMVCl5E5YG4n94jrvyAhhVdN rnY6yB7irNaSTeZA/v1lTcbCPULtU7WknU0= -----END CERTIFICATE-----Generated at Sun Oct 4 15:34:10 2026 by rpki-client