$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c89560b5-8734-312b-971d-cd58c3e9fa38.roa File: c89560b5-8734-312b-971d-cd58c3e9fa38.roa (raw, json) Hash identifier: 96sHMahUNLvC5uvVEURNy4WYIBzuakn5klILQ+a/WGU= Subject key identifier: 82:10:D4:71:42:BE:9E:8E:BE:9B:B0:37:E6:96:E2:56:37:33:16:C0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D2A74DD0312186689F95BF280 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c89560b5-8734-312b-971d-cd58c3e9fa38.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 9009 IP address blocks: 2607:740:76::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:dd:03:12:18:66:89:f9:5b:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=1f73bdf1-c3fa-424e-b0a1-26abe2d74b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:05:d2:5e:a6:fb:66:dc:04:09:0c:c6:73: b7:56:86:32:97:5f:7d:6f:8d:5f:cd:3b:13:3d:76: 61:f4:1f:00:4f:cb:b9:d3:f0:d3:ac:fd:d1:31:bc: 4f:07:bd:4f:f0:8f:40:bd:74:f3:73:54:72:32:f9: fe:5b:ba:47:85:19:99:48:98:ae:54:8e:ab:b8:e5: 9c:13:c0:e5:0e:05:6f:80:ee:9e:9a:b6:85:9c:18: 0b:79:b5:04:70:45:59:d0:fc:3b:7e:76:cc:ac:58: f8:95:65:82:62:d5:e3:5f:5c:b2:f8:92:20:7d:e2: 71:5f:db:28:e2:1f:3b:ec:c6:53:62:00:a2:41:c6: f1:82:57:a2:af:d2:dd:4a:fa:b1:ac:c5:48:aa:64: ad:b9:8f:90:c6:04:6e:00:20:89:6c:4a:a5:16:69: f5:62:d4:d3:15:8d:83:5b:2b:08:94:21:03:18:f0: 92:f8:ec:77:d5:9e:bb:2b:ed:9a:ac:ed:d2:a1:8e: b9:96:5c:8d:c0:f2:26:3e:6d:fa:70:b7:9c:9b:31: 62:34:90:af:75:b1:8b:6b:30:e6:57:3f:39:a2:84: 44:db:78:0a:9f:2f:8c:5e:bd:f1:a9:36:d4:dc:c4: 6c:61:fa:76:d7:94:4f:eb:0d:3f:74:47:47:48:66: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:10:D4:71:42:BE:9E:8E:BE:9B:B0:37:E6:96:E2:56:37:33:16:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c89560b5-8734-312b-971d-cd58c3e9fa38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:76::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f9:68:2f:a4:ec:2f:77:3b:c9:89:1b:2a:da:86:dd:3e:86: 54:7d:73:72:c0:c4:16:d5:1f:1d:80:ac:0f:e7:2a:a8:cb:b9: 74:e7:76:f4:50:37:c0:52:7e:37:3c:6a:35:6b:51:c7:18:2d: fa:50:75:36:8b:08:03:22:70:7b:81:17:df:cd:a3:29:af:d5: a4:d2:95:09:45:bf:d1:b1:85:36:70:53:fa:4b:22:20:6f:13: 5f:60:f6:a5:83:48:c7:47:e1:a2:a1:2a:0e:f5:ae:1d:52:04: 37:d5:37:2e:62:e2:ae:b9:fe:1b:5e:f2:89:4b:e0:1d:36:35: 27:56:ff:94:af:00:0b:e0:5d:ef:ea:b5:e2:f7:6c:52:71:97: 80:92:0c:63:dd:66:e1:d9:6e:e7:47:ad:d2:a6:ef:37:b9:04: 8a:f6:25:80:96:32:d4:0d:22:68:f8:5b:81:09:7d:d6:03:6e: 7a:7a:5f:b8:1a:e5:bc:59:39:21:5d:6c:d0:d2:22:d7:15:28: 30:bf:1f:13:a3:45:68:2f:f6:cc:f0:59:7b:b8:eb:1a:ff:77: 5c:9f:ef:66:f3:c0:6a:a6:69:83:ca:a2:1c:94:57:af:5e:aa: 6d:32:a5:16:73:15:e7:b7:72:80:4d:44:dc:e6:37:46:fe:87: 89:19:33:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0qdN0DEhhmiflb8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MWY3M2JkZjEtYzNmYS00MjRlLWIwYTEtMjZhYmUyZDc0YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknoF0l6m+2bcBAkMxnO3VoYyl199b41fzTsT PXZh9B8AT8u50/DTrP3RMbxPB71P8I9AvXTzc1RyMvn+W7pHhRmZSJiuVI6ruOWc E8DlDgVvgO6emraFnBgLebUEcEVZ0Pw7fnbMrFj4lWWCYtXjX1yy+JIgfeJxX9so 4h877MZTYgCiQcbxgleir9LdSvqxrMVIqmStuY+QxgRuACCJbEqlFmn1YtTTFY2D WysIlCEDGPCS+Ox31Z67K+2arO3SoY65llyNwPImPm36cLecmzFiNJCvdbGLazDm Vz85ooRE23gKny+MXr3xqTbU3MRsYfp215RP6w0/dEdHSGb32QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIQ1HFCvp6OvpuwN+aW4lY3MxbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYzg5NTYwYjUtODczNC0z MTJiLTk3MWQtY2Q1OGMzZTlmYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAB2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADr5aC+k7C93O8mJGyraht0+hlR9c3LAxBbVHx2ArA/nKqjLuXTn dvRQN8BSfjc8ajVrUccYLfpQdTaLCAMicHuBF9/Noymv1aTSlQlFv9GxhTZwU/pL IiBvE19g9qWDSMdH4aKhKg71rh1SBDfVNy5i4q65/hte8olL4B02NSdW/5SvAAvg Xe/qteL3bFJxl4CSDGPdZuHZbudHrdKm7ze5BIr2JYCWMtQNImj4W4EJfdYDbnp6 X7ga5bxZOSFdbNDSItcVKDC/HxOjRWgv9szwWXu46xr/d1yf72bzwGqmaYPKohyU V69eqm0ypRZzFee3coBNRNzmN0b+h4kZM7s= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:42 2026 by rpki-client