$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa File: f2e5d719-b11f-3e63-ad51-8123166538ef.roa (raw, json) Hash identifier: HTym5nKdQ7lU3PSO6kzdV9hemk59QdxFwuzh7OVrhY4= Subject key identifier: 20:99:E2:B7:D2:66:9F:C7:60:9C:E3:11:B0:5C:B2:3C:08:7E:90:66 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F4973F3217076DA0FEC47D100 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 209181 IP address blocks: 2607:740:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f3:21:70:76:da:0f:ec:47:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b2f7d57-f7d5-4562-adf6-697e8e070384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:45:81:8a:8e:5e:10:85:a7:13:34:21:f2: 63:62:13:36:07:84:66:fc:85:d8:18:9d:6d:14:9b: bd:77:2e:50:b3:2d:92:c4:b4:a3:23:68:b1:3f:be: 68:1c:5e:ba:5a:7d:92:18:c9:4d:73:27:a7:56:ea: e6:01:ce:00:c5:83:73:49:9a:12:b7:b6:fc:1c:6f: 24:2d:d2:dd:5f:dc:b9:91:c7:17:47:40:01:89:f8: 25:64:93:77:cb:9d:55:76:54:aa:68:26:b9:57:1a: 07:9e:ec:4e:e6:49:f3:a2:d2:7f:a4:1c:f5:cd:97: 16:99:e3:9f:72:f3:fe:41:a6:8c:b1:b4:13:8d:81: 23:12:9d:b5:d1:a8:5b:1f:a2:53:b7:40:0c:45:86: 88:46:db:c0:be:bb:87:3d:d3:a5:2d:1a:f1:a8:dd: 03:20:8a:a2:e5:76:a9:65:5a:73:c8:3c:f2:49:db: 15:08:ef:02:74:1a:b8:43:44:12:c7:31:c7:34:e4: 2c:5b:22:d1:29:70:dc:20:6b:a1:9a:70:86:24:2e: 3a:8d:16:88:6c:59:06:01:28:26:b1:6f:d3:0e:8d: 8c:f9:26:f6:f4:1c:83:b2:0b:21:c4:02:c2:6a:3c: a4:c8:d3:9b:3b:e2:49:ea:ec:f2:ad:67:26:97:94: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:E2:B7:D2:66:9F:C7:60:9C:E3:11:B0:5C:B2:3C:08:7E:90:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:93:f5:a4:43:2d:01:42:ef:21:37:f6:a7:95:5c:bb:7a:63: 50:c5:fe:bd:a8:2b:3f:01:99:37:4b:00:4a:26:df:4b:0b:2f: e4:7d:e2:6d:9a:d3:07:2f:08:a7:88:7e:73:62:21:ea:93:db: 5d:47:0e:e9:a0:b9:32:48:f7:bd:b8:18:96:3b:c9:72:fe:90: a2:d4:1d:e3:e8:a1:d4:28:5d:1f:1d:7b:0f:e5:64:0a:5c:0a: d9:26:a9:bb:ce:ed:a5:3e:24:7b:c8:b8:9e:45:1e:2b:9a:e0: 8f:59:f8:54:ba:a0:9b:68:c6:24:52:fd:32:5e:c2:4b:eb:a4: 04:a2:29:3f:98:71:7d:7f:97:72:6c:8d:a2:e2:6c:0f:f0:30: 19:fb:86:db:b6:cc:1d:90:05:76:18:01:fe:3e:06:d3:47:38: 71:be:ad:ba:b3:6f:be:a9:2a:29:42:5f:62:48:fb:09:1d:10: cf:c5:88:73:1e:d0:ea:ad:95:01:f8:80:13:4a:8d:df:d7:f7: d2:ae:1d:61:0c:27:2e:6c:04:0f:f8:29:c4:32:1b:92:9f:e1: b2:09:17:ed:93:4c:34:3c:47:72:e1:3d:50:82:a0:a9:a9:3a: 9d:4b:c7:1c:1c:d9:b7:fa:83:82:98:09:03:67:3f:85:90:0d: a8:27:0e:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc/MhcHbaD+xH0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIyZjdkNTctZjdkNS00NTYyLWFkZjYtNjk3ZThlMDcwMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgndFgYqOXhCFpxM0IfJjYhM2B4Rm/IXYGJ1t FJu9dy5Qsy2SxLSjI2ixP75oHF66Wn2SGMlNcyenVurmAc4AxYNzSZoSt7b8HG8k LdLdX9y5kccXR0ABifglZJN3y51VdlSqaCa5VxoHnuxO5knzotJ/pBz1zZcWmeOf cvP+QaaMsbQTjYEjEp210ahbH6JTt0AMRYaIRtvAvruHPdOlLRrxqN0DIIqi5Xap ZVpzyDzySdsVCO8CdBq4Q0QSxzHHNOQsWyLRKXDcIGuhmnCGJC46jRaIbFkGASgm sW/TDo2M+Sb29ByDsgshxALCajykyNObO+JJ6uzyrWcml5QUBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCZ4rfSZp/HYJzjEbBcsjwIfpBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjJlNWQ3MTktYjExZi0z ZTYzLWFkNTEtODEyMzE2NjUzOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyT9aRDLQFC7yE39qeVXLt6Y1DF/r2oKz8BmTdLAEom30sLL+R9 4m2a0wcvCKeIfnNiIeqT211HDumguTJI9724GJY7yXL+kKLUHePoodQoXR8dew/l ZApcCtkmqbvO7aU+JHvIuJ5FHiua4I9Z+FS6oJtoxiRS/TJewkvrpASiKT+YcX1/ l3JsjaLibA/wMBn7htu2zB2QBXYYAf4+BtNHOHG+rbqzb76pKilCX2JI+wkdEM/F iHMe0OqtlQH4gBNKjd/X99KuHWEMJy5sBA/4KcQyG5Kf4bIJF+2TTDQ8R3LhPVCC oKmpOp1Lxxwc2bf6g4KYCQNnP4WQDagnDtc= -----END CERTIFICATE-----Generated at Sun Sep 27 10:42:42 2026 by rpki-client