$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d1deef13-731f-3ecc-8c19-4aed187675e1.roa File: d1deef13-731f-3ecc-8c19-4aed187675e1.roa (raw, json) Hash identifier: PE+5S7YvgxtTX2I1+wn6DdWODW2RWmrCJRbGPv1C3yc= Subject key identifier: E5:73:CD:E5:4C:38:74:8D:A5:64:C5:FD:66:FF:23:A6:5E:4F:9E:A4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D0BDD00EADEA2FBE0FFF8B480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d1deef13-731f-3ecc-8c19-4aed187675e1.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 212238 IP address blocks: 2607:740:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:00:ea:de:a2:fb:e0:ff:f8:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=31e5cdea-02a0-45d0-8afc-6c051fa0c5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:23:33:f3:9c:3e:a1:cd:e7:d2:0a:51:7f:75: 69:2c:95:1c:8d:c0:b7:84:81:ed:20:67:32:cb:38: 76:a5:d4:87:a4:92:fe:72:94:10:64:5f:a0:a8:cf: d6:6d:85:ff:90:4f:5b:d0:f1:d9:a2:d3:65:02:bc: ee:e0:6a:73:97:d4:7c:e6:44:ee:c7:90:c3:a2:b3: ec:c7:0c:ae:d3:8f:4b:8e:fc:f7:bf:87:eb:88:2f: b2:ef:57:09:05:56:10:ee:60:fc:da:bd:8e:86:84: 69:56:09:c8:3c:e2:33:08:eb:a6:2c:51:ca:69:14: af:cf:90:51:ff:d3:da:17:3d:4e:bd:d1:26:81:71: d5:04:ff:39:2a:a8:c0:60:7c:00:87:f4:8d:12:fe: 7a:e5:66:29:31:77:49:67:a6:27:11:3f:2a:a6:e6: fb:b9:62:04:90:ff:4d:8b:cb:6a:68:02:b5:59:c5: ca:53:ae:e7:0e:a5:f0:f6:87:bb:12:65:04:56:bd: b1:72:f8:25:62:45:e4:6f:19:e1:de:e2:ae:34:60: 91:cd:0c:49:5b:8a:d7:c4:9c:62:fe:fa:2e:4b:80: 52:e4:3f:6d:6e:81:83:c7:33:03:2e:10:18:e5:fd: 43:7c:61:55:6d:67:cb:8d:c1:72:5c:c0:8b:14:ab: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:CD:E5:4C:38:74:8D:A5:64:C5:FD:66:FF:23:A6:5E:4F:9E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d1deef13-731f-3ecc-8c19-4aed187675e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ab:d5:94:ad:3c:cd:65:d4:ba:60:e9:7d:6f:69:7c:3a:76: e8:90:d9:e4:f3:f5:69:51:a2:64:ca:4c:48:d7:fd:66:ae:e1: 03:04:5b:22:79:07:ad:d3:07:7b:6b:18:4a:c3:08:05:3f:e6: 00:01:0b:cc:f9:90:d5:c2:a0:4d:42:e8:39:19:17:d5:fd:16: 41:ec:0b:a9:d6:19:dd:1a:49:d3:69:44:5d:5e:ac:e7:ef:62: 0a:b6:d5:98:f3:fd:e7:58:3f:cc:c7:0b:f1:db:35:f5:a6:78: 1f:c9:0a:38:d0:a9:38:ea:5e:d1:47:67:88:b6:26:f1:07:79: 62:b3:55:bf:35:fb:b8:25:7b:fb:29:4e:30:4f:63:bd:8d:33: e2:63:ce:71:e2:35:99:a4:7d:8b:a0:70:2b:34:fc:a1:aa:0c: 58:ef:c7:83:54:c3:68:c4:1e:a6:7c:3e:c1:6f:db:19:11:41: 89:bc:e9:4e:40:e7:b1:1b:59:af:09:f8:54:da:8a:79:a7:8e: 6a:a9:4a:c8:df:0e:d0:f9:61:18:64:85:aa:5a:2d:ea:75:7f: 44:b2:c2:93:44:fd:54:03:d7:f2:83:13:a8:e4:7e:3a:f8:4c: 57:94:ae:bb:c0:cd:a0:58:09:ed:ad:64:94:bf:71:40:1c:e7: 2e:90:a9:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0L3QDq3qL74P/4tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MzFlNWNkZWEtMDJhMC00NWQwLThhZmMtNmMwNTFmYTBjNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yMz85w+oc3n0gpRf3VpLJUcjcC3hIHtIGcy yzh2pdSHpJL+cpQQZF+gqM/WbYX/kE9b0PHZotNlArzu4Gpzl9R85kTux5DDorPs xwyu049Ljvz3v4friC+y71cJBVYQ7mD82r2OhoRpVgnIPOIzCOumLFHKaRSvz5BR /9PaFz1OvdEmgXHVBP85KqjAYHwAh/SNEv565WYpMXdJZ6YnET8qpub7uWIEkP9N i8tqaAK1WcXKU67nDqXw9oe7EmUEVr2xcvglYkXkbxnh3uKuNGCRzQxJW4rXxJxi /vouS4BS5D9tboGDxzMDLhAY5f1DfGFVbWfLjcFyXMCLFKseSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOVzzeVMOHSNpWTF/Wb/I6ZeT56kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDFkZWVmMTMtNzMxZi0z ZWNjLThjMTktNGFlZDE4NzY3NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6r1ZStPM1l1Lpg6X1vaXw6duiQ2eTz9WlRomTKTEjX/Wau4QME WyJ5B63TB3trGErDCAU/5gABC8z5kNXCoE1C6DkZF9X9FkHsC6nWGd0aSdNpRF1e rOfvYgq21Zjz/edYP8zHC/HbNfWmeB/JCjjQqTjqXtFHZ4i2JvEHeWKzVb81+7gl e/spTjBPY72NM+JjznHiNZmkfYugcCs0/KGqDFjvx4NUw2jEHqZ8PsFv2xkRQYm8 6U5A57EbWa8J+FTainmnjmqpSsjfDtD5YRhkhapaLep1f0SywpNE/VQD1/KDE6jk fjr4TFeUrrvAzaBYCe2tZJS/cUAc5y6QqfY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:22 2026 by rpki-client