$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa File: b98d60c1-4e90-3557-9926-b060e98a4fe0.roa (raw, json) Hash identifier: 1mTydXtw55eGxB9QipdEBrUCXdhgz6lbKnyeyhB80xM= Subject key identifier: 92:A0:AF:82:6B:4F:F7:0E:96:25:2E:D1:FA:D8:7F:D1:CC:57:E9:4B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DBBA04AAC9B6913BE51AB8B80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 9009 IP address blocks: 2607:740:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:4a:ac:9b:69:13:be:51:ab:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=3717c090-f629-4015-a994-356291216e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:f4:ce:94:89:7e:f9:e2:eb:06:f3:8a:f1: 1c:ba:85:a5:04:45:b5:31:e6:6a:99:0a:bb:21:6c: d6:c8:05:45:67:4f:a1:94:cc:82:5f:c8:32:f8:69: a7:28:4a:5e:67:c1:35:1c:02:b4:5d:b9:9f:be:ba: 05:a6:fb:80:8e:6b:21:8b:52:fa:d8:e0:13:eb:02: ca:3b:0c:bd:bf:90:36:a7:e0:7d:dd:34:4b:90:24: 2a:c6:5c:6b:2f:70:03:92:1a:af:20:36:b9:fc:aa: 5a:01:cb:a8:f4:d4:8b:7b:bf:e7:3d:63:51:d8:b5: c0:9d:9c:cb:8b:18:fd:1a:39:b4:b4:35:77:07:b6: 7a:75:55:a6:d1:a4:07:df:4d:93:da:9f:29:57:17: 6e:64:dc:f1:5d:81:f4:2b:6f:32:8a:3f:fe:e9:24: 13:64:92:54:c6:ec:16:1c:cc:d9:a1:80:25:bd:dd: e6:e1:8e:8a:c6:54:8d:27:7b:2a:59:a9:bc:03:dc: f3:e3:07:12:1f:63:5d:0f:44:7f:60:e1:51:a2:f8: ea:82:aa:b4:d0:30:3e:a4:24:99:9a:31:1f:05:11: 95:a5:6e:5c:bb:de:35:b7:d8:25:8f:c4:1f:2c:a3: a7:60:ee:70:e0:cc:56:63:37:c3:bd:eb:41:13:1e: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A0:AF:82:6B:4F:F7:0E:96:25:2E:D1:FA:D8:7F:D1:CC:57:E9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:43:f6:34:c1:8f:8b:c6:d2:87:d2:09:cb:7f:73:a9:4a:f0: 5a:0a:17:f7:2e:f8:53:54:ce:75:e2:54:1a:ee:98:ec:08:92: 17:e0:aa:c6:27:ba:2b:4f:c7:4e:b5:8d:5e:28:e7:39:d2:18: 72:f9:ac:2c:78:8e:d4:3f:8e:d4:5e:96:4b:f5:fc:c2:22:bf: 2d:7a:08:90:6f:72:56:76:34:d2:fe:c1:b4:96:1d:4d:3e:88: b0:1f:a3:51:c0:bd:88:6c:17:23:9c:18:ec:ad:74:c9:da:9e: 85:a3:fd:ef:0a:8d:cc:88:5f:54:67:bc:b1:ff:50:d1:f2:4d: 90:08:d6:b8:73:d9:31:fd:db:75:1f:38:7b:bd:2d:0f:26:58: ef:81:c8:1b:ca:06:2b:51:97:95:4e:9a:d4:f7:97:6a:db:d2: fe:e1:60:62:ed:72:37:ea:ea:eb:a9:38:f3:98:9f:aa:9a:a3: 27:bb:9f:29:4f:81:14:36:42:81:44:61:26:a0:1a:48:9d:a4: 68:fc:bc:ff:c5:b8:53:d9:9c:66:73:25:d7:95:b8:a1:3a:fd: d1:78:5a:08:16:a4:a8:4b:6e:b4:d3:98:d9:dd:6f:e1:57:76: 11:fa:6a:65:1d:ef:bb:11:14:07:82:2e:63:9c:ed:f5:6f:06: f4:8a:7b:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE27oEqsm2kTvlGri4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk MzcxN2MwOTAtZjYyOS00MDE1LWE5OTQtMzU2MjkxMjE2ZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1n0zpSJfvni6wbzivEcuoWlBEW1MeZqmQq7 IWzWyAVFZ0+hlMyCX8gy+GmnKEpeZ8E1HAK0XbmfvroFpvuAjmshi1L62OAT6wLK Owy9v5A2p+B93TRLkCQqxlxrL3ADkhqvIDa5/KpaAcuo9NSLe7/nPWNR2LXAnZzL ixj9Gjm0tDV3B7Z6dVWm0aQH302T2p8pVxduZNzxXYH0K28yij/+6SQTZJJUxuwW HMzZoYAlvd3m4Y6KxlSNJ3sqWam8A9zz4wcSH2NdD0R/YOFRovjqgqq00DA+pCSZ mjEfBRGVpW5cu941t9glj8QfLKOnYO5w4MxWYzfDvetBEx5WzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKgr4JrT/cOliUu0frYf9HMV+lLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjk4ZDYwYzEtNGU5MC0z NTU3LTk5MjYtYjA2MGU5OGE0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhD9jTBj4vG0ofSCct/c6lK8FoKF/cu+FNUznXiVBrumOwIkhfg qsYnuitPx061jV4o5znSGHL5rCx4jtQ/jtRelkv1/MIivy16CJBvclZ2NNL+wbSW HU0+iLAfo1HAvYhsFyOcGOytdMnanoWj/e8KjcyIX1RnvLH/UNHyTZAI1rhz2TH9 23UfOHu9LQ8mWO+ByBvKBitRl5VOmtT3l2rb0v7hYGLtcjfq6uupOPOYn6qaoye7 nylPgRQ2QoFEYSagGkidpGj8vP/FuFPZnGZzJdeVuKE6/dF4WggWpKhLbrTTmNnd b+FXdhH6amUd77sRFAeCLmOc7fVvBvSKe/0= -----END CERTIFICATE-----Generated at Wed May 13 09:19:40 2026 by rpki-client