$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa File: b98d60c1-4e90-3557-9926-b060e98a4fe0.roa (raw, json) Hash identifier: 3Q/+ci7TlRF3D9nOKhppbuyHxzSoW2P7gOuQFlyeu6o= Subject key identifier: 2C:04:77:D1:F2:94:CF:14:23:8F:36:D0:46:CF:D1:39:8D:53:DF:94 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B1AD17D4F8D2FF606359E2BE0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 9009 IP address blocks: 2607:740:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7d:4f:8d:2f:f6:06:35:9e:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=845547c5-8eb9-432a-aa9f-4dc457b7b970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:f5:1c:6b:47:1a:61:96:d0:bd:c4:eb:ba: 86:66:0c:f3:5d:1f:1f:e1:f2:76:e4:60:00:1e:b8: 13:05:7c:1e:01:d2:72:86:3e:a9:58:58:e3:c5:c6: d2:46:7d:8e:d5:8e:83:16:f2:07:74:3b:b8:2a:7b: 74:27:7e:db:32:1e:56:dd:1a:d3:79:a6:69:e7:e7: dc:ba:97:1a:c6:64:14:13:bd:57:80:79:df:e2:4f: be:55:cd:78:0e:b5:27:33:6c:a3:5f:03:d7:48:dd: 34:ca:3b:01:81:81:c8:6f:3a:c4:82:14:2d:1a:c3: 73:99:eb:37:c8:e5:7c:6a:ba:a9:ec:9b:f1:77:78: 9e:9d:56:7a:be:22:cf:78:11:6b:f6:8b:96:93:bb: 93:e6:bf:e3:14:06:31:2e:3a:b6:e2:e8:de:28:8d: a8:41:aa:9c:8d:47:60:57:f3:34:2b:da:1c:f6:eb: 3e:bf:89:e3:07:bd:ad:3e:37:44:0f:54:14:51:de: b9:bd:86:13:36:9e:88:a7:f9:ea:33:e0:8f:15:b6: 46:b1:c1:98:cc:69:ed:62:91:4d:12:54:ac:e9:67: f0:b0:74:6b:b4:5a:a7:33:91:2c:0b:40:d1:f0:e6: fc:47:4a:ec:c7:79:69:2d:32:6e:f8:2a:66:e5:ff: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:77:D1:F2:94:CF:14:23:8F:36:D0:46:CF:D1:39:8D:53:DF:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b98d60c1-4e90-3557-9926-b060e98a4fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:50:1e:35:ba:16:0a:b9:b4:93:d2:c1:86:99:b3:00:ee:20: b3:a6:ab:26:d1:ed:cd:85:ed:04:1c:d3:e5:03:36:89:c8:10: c0:6f:f6:d4:16:d6:39:39:27:73:bc:3c:f5:72:2f:b7:b5:7c: 52:2a:6e:4a:65:3f:3a:9b:1f:50:29:3a:14:6a:fc:58:94:fa: 3b:1c:c3:c8:e8:8f:df:a8:b2:4a:2f:8b:83:0d:bc:03:07:e7: 4f:f7:97:33:17:78:fa:4a:db:11:36:56:10:07:bb:be:0c:6a: fe:30:42:00:61:c1:45:34:ae:28:0e:45:ab:7b:d5:ab:68:03: c0:2a:76:37:05:e2:b5:ed:bf:c4:d2:0f:0e:89:07:56:b1:b6: 1c:3c:00:bb:b6:2f:5b:24:76:e1:60:cc:6d:e9:82:74:6d:4a: 31:24:c4:7e:56:3d:ad:7c:72:2a:9a:4d:68:5f:d2:5a:da:04: f2:40:e6:87:3d:74:d4:ba:cb:16:95:7e:35:8e:fd:a1:c3:ba: 6e:bf:52:aa:09:3d:ac:82:24:a9:53:99:50:c5:46:d3:c8:b3: 36:64:50:3a:0a:75:35:60:54:20:5c:7c:c4:bb:c6:24:b6:09: a3:df:a2:bb:c5:da:6b:91:3c:97:70:12:25:c8:c9:92:cd:67: 04:e4:16:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0X1PjS/2BjWeK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODQ1NTQ3YzUtOGViOS00MzJhLWFhOWYtNGRjNDU3YjdiOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQX1HGtHGmGW0L3E67qGZgzzXR8f4fJ25GAA HrgTBXweAdJyhj6pWFjjxcbSRn2O1Y6DFvIHdDu4Knt0J37bMh5W3RrTeaZp5+fc upcaxmQUE71XgHnf4k++Vc14DrUnM2yjXwPXSN00yjsBgYHIbzrEghQtGsNzmes3 yOV8arqp7Jvxd3ienVZ6viLPeBFr9ouWk7uT5r/jFAYxLjq24ujeKI2oQaqcjUdg V/M0K9oc9us+v4njB72tPjdED1QUUd65vYYTNp6Ip/nqM+CPFbZGscGYzGntYpFN ElSs6WfwsHRrtFqnM5EsC0DR8Ob8R0rsx3lpLTJu+Cpm5f8bYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCwEd9HylM8UI4820EbP0TmNU9+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjk4ZDYwYzEtNGU5MC0z NTU3LTk5MjYtYjA2MGU5OGE0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFQHjW6Fgq5tJPSwYaZswDuILOmqybR7c2F7QQc0+UDNonIEMBv 9tQW1jk5J3O8PPVyL7e1fFIqbkplPzqbH1ApOhRq/FiU+jscw8joj9+oskovi4MN vAMH50/3lzMXePpK2xE2VhAHu74Mav4wQgBhwUU0rigORat71atoA8AqdjcF4rXt v8TSDw6JB1axthw8ALu2L1skduFgzG3pgnRtSjEkxH5WPa18ciqaTWhf0lraBPJA 5oc9dNS6yxaVfjWO/aHDum6/UqoJPayCJKlTmVDFRtPIszZkUDoKdTVgVCBcfMS7 xiS2CaPforvF2muRPJdwEiXIyZLNZwTkFuc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:06:50 2025 by rpki-client