$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa File: aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa (raw, json) Hash identifier: B7K1OPVMl1ScJsZ/xSpWr4J7DYO5Rl5fgcQFnb7mPAo= Subject key identifier: E9:B2:79:52:3A:B4:65:88:EE:4C:DE:8C:D2:66:A3:82:50:36:4D:0E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B477C6B7201159AC44C0A56C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 209181 IP address blocks: 2607:740:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6b:72:01:15:9a:c4:4c:0a:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=52105b65-8bc4-4301-890f-152a77476784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:9e:0c:f6:27:cf:24:60:68:de:10:61:21: dd:1b:64:b1:54:e8:0b:36:57:f3:65:ca:85:12:89: 34:4b:db:1c:e0:74:40:f0:9b:2d:e7:70:c2:dd:6e: b2:e4:99:06:5a:41:92:f6:62:3e:32:86:34:f9:93: 5b:24:07:c5:eb:5f:06:51:23:cf:41:e7:e2:f4:d9: 9a:74:05:35:b1:4c:83:b0:b8:03:59:28:36:ed:70: 07:07:fb:f1:dc:37:82:a8:44:0e:b4:9e:46:ec:d3: 05:93:97:7d:b6:35:ab:8e:92:13:bb:65:70:35:c4: cf:43:a0:d2:fe:0d:af:e9:5b:da:e8:9d:b0:e8:c3: 2e:7e:3c:c9:17:48:2d:c0:0b:b2:22:60:98:92:f9: 16:ef:95:33:eb:e4:31:0c:48:56:4a:f6:11:b9:51: 1f:d8:12:3d:9d:74:92:71:62:5d:5e:2e:93:b6:8f: 68:c9:6b:ef:06:78:d4:92:6b:f0:89:85:37:a3:bb: e6:99:04:71:1b:45:1d:ef:06:21:90:71:18:be:a2: bc:6e:ca:c3:60:3a:e1:3a:e3:18:67:67:52:e3:08: b0:00:4a:4f:19:5c:06:72:87:3e:97:4d:10:bf:16: ec:26:30:7e:75:98:e8:82:2c:09:31:b6:0e:cc:0b: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B2:79:52:3A:B4:65:88:EE:4C:DE:8C:D2:66:A3:82:50:36:4D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:da:5a:45:d5:b8:bb:ea:3b:c3:e2:36:44:39:7e:4a:05:90: ac:4c:00:b6:d5:86:c7:23:81:c6:f5:86:17:69:55:4b:3d:57: 5a:c8:93:70:10:34:77:dd:8e:79:2f:bc:5e:09:e0:fb:ad:b0: b6:2f:13:0c:50:49:ba:d0:84:97:32:ac:3c:e2:20:9c:f3:c0: 08:99:ab:d7:17:0a:8b:1b:fe:36:b1:78:fd:20:d3:fc:eb:63: 56:46:44:46:b6:7e:71:25:83:ad:2a:dd:6c:df:c9:8c:ad:79: e6:c3:89:4b:ad:97:e4:0e:dc:2a:00:62:86:11:f9:75:77:5f: 2a:4b:b3:b0:32:8a:ed:94:db:10:0f:ea:40:6c:a6:ef:0f:63: e4:48:60:71:32:8b:fe:a9:a7:e8:33:5e:89:bf:e6:bc:30:13: a6:bc:3c:d9:30:27:82:87:a7:2d:64:6f:07:92:db:c7:43:08: 6d:35:e5:3f:a0:03:f2:6f:2e:08:94:13:03:34:32:92:95:02: 4f:d3:eb:7f:21:6f:92:83:00:4c:60:0c:48:84:cb:32:51:fc: 9d:f4:68:25:52:57:93:8f:04:b7:f1:8b:5e:3c:89:7f:28:f6: 8e:16:e8:50:f7:f7:bf:0c:07:ae:8f:a3:10:3b:1e:fd:ad:83: 15:0c:ed:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfGtyARWaxEwKVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NTIxMDViNjUtOGJjNC00MzAxLTg5MGYtMTUyYTc3NDc2Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GeDPYnzyRgaN4QYSHdG2SxVOgLNlfzZcqF Eok0S9sc4HRA8Jst53DC3W6y5JkGWkGS9mI+MoY0+ZNbJAfF618GUSPPQefi9Nma dAU1sUyDsLgDWSg27XAHB/vx3DeCqEQOtJ5G7NMFk5d9tjWrjpITu2VwNcTPQ6DS /g2v6Vva6J2w6MMufjzJF0gtwAuyImCYkvkW75Uz6+QxDEhWSvYRuVEf2BI9nXSS cWJdXi6Tto9oyWvvBnjUkmvwiYU3o7vmmQRxG0Ud7wYhkHEYvqK8bsrDYDrhOuMY Z2dS4wiwAEpPGVwGcoc+l00QvxbsJjB+dZjogiwJMbYOzAu2DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmyeVI6tGWI7kzejNJmo4JQNk0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYWVmYjVmOTctNWNlMC0z YmI0LWI4MTAtN2JkOGFhNDE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/aWkXVuLvqO8PiNkQ5fkoFkKxMALbVhscjgcb1hhdpVUs9V1rI k3AQNHfdjnkvvF4J4PutsLYvEwxQSbrQhJcyrDziIJzzwAiZq9cXCosb/jaxeP0g 0/zrY1ZGREa2fnElg60q3WzfyYyteebDiUutl+QO3CoAYoYR+XV3XypLs7Ayiu2U 2xAP6kBspu8PY+RIYHEyi/6pp+gzXom/5rwwE6a8PNkwJ4KHpy1kbweS28dDCG01 5T+gA/JvLgiUEwM0MpKVAk/T638hb5KDAExgDEiEyzJR/J30aCVSV5OPBLfxi148 iX8o9o4W6FD3978MB66PoxA7Hv2tgxUM7Zc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:57 2025 by rpki-client