$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa File: f33be0ff-24c5-33cf-975f-4f33a85de390.roa (raw, json) Hash identifier: zDBsdslY2m9e4yTWEZ/h7SSamdbp0DNJ7D+4Wo+Qulg= Subject key identifier: 0E:71:3E:51:08:07:7C:88:5C:FD:F3:05:74:51:F8:AB:3B:10:C1:BF Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F498B3A8B9B12BF8D81692280 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 2607:740:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:3a:8b:9b:12:bf:8d:81:69:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5dbc6087-c82d-4d7a-ad0a-5fedeb487ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:b2:0d:12:12:34:77:9b:0d:2a:95:2d:93: 47:83:01:2b:4b:9e:90:98:4c:ce:d1:a2:a0:91:74: e7:dd:34:99:73:a4:bd:4c:b8:80:fe:7e:ca:3e:80: c0:aa:66:80:a4:e5:08:d4:e9:02:38:b4:68:5b:e2: 69:d8:4e:dd:50:f7:0f:8a:29:62:f4:ad:42:e0:79: 94:ee:fe:32:21:db:6d:5a:33:a8:90:57:1f:bd:ed: 4d:a9:b0:de:bd:b1:ac:fc:23:11:cf:25:fb:af:76: 8b:47:4d:80:cb:ed:f9:33:ea:8c:6b:ce:44:ba:b5: 8a:83:5c:d9:2a:e9:21:aa:3d:3a:5f:20:85:ad:bc: 62:b7:e0:1b:b1:f4:1f:89:17:5d:39:1e:eb:c5:07: e8:f1:76:d3:63:74:1b:5f:97:61:d1:e4:3f:3c:b5: e5:35:4b:90:da:61:a6:c0:53:0f:fc:2f:a5:06:a2: 53:4e:91:22:37:7c:16:51:2e:46:36:4c:97:6a:44: 94:51:24:08:15:65:b2:61:01:76:98:00:f1:b3:1c: cd:8b:61:5d:e8:2c:61:c6:4e:d6:c5:1c:ae:0e:af: 94:93:c5:e1:92:18:46:2b:d0:ac:00:be:f6:14:65: f8:3c:84:89:88:d6:f7:f5:6f:47:63:df:64:5d:0c: 38:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:71:3E:51:08:07:7C:88:5C:FD:F3:05:74:51:F8:AB:3B:10:C1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:da:ca:6c:87:90:2e:72:95:9e:3f:b2:a8:bc:dc:6c:03:8b: b2:52:2d:c2:12:18:55:cf:7a:d3:63:33:f5:d5:b6:26:2d:84: 21:13:47:15:c2:84:e7:7a:7a:3b:2c:8b:fa:65:d0:f5:84:d7: fd:2f:f2:43:de:b6:5f:e3:88:a8:cf:dd:1f:84:8c:59:15:63: 77:b5:47:f1:a2:3b:81:c0:28:49:df:a0:de:8a:ec:0b:4f:26: 75:74:cc:fa:74:3f:8a:95:a6:8a:83:6c:f8:a5:85:b9:64:dc: fb:f9:68:2d:0b:72:9e:ec:6a:e9:53:76:00:da:18:c1:37:be: d0:2d:eb:31:4c:a0:01:f0:25:c0:d9:ad:c9:df:36:65:5c:16: 94:72:43:5b:28:f6:95:1d:e5:ce:2f:06:36:e7:ff:21:cc:f9: db:2c:c9:2c:b8:fc:30:0c:1a:00:57:98:99:4a:08:be:13:96: 5a:fe:7c:de:db:73:80:94:dd:d1:c7:05:4e:3b:67:a8:03:5e: cc:81:f2:fb:78:9b:0d:7d:bf:3a:a6:ce:37:69:c6:00:4c:8e: 1b:6b:d3:0e:21:e2:e6:49:b8:05:67:12:46:28:25:69:ce:22: c9:64:db:55:65:bb:2c:c9:a7:e4:c4:c1:38:f2:1d:d8:9e:77: 0a:2f:70:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JizqLmxK/jYFpIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRiYzYwODctYzgyZC00ZDdhLWFkMGEtNWZlZGViNDg3ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2yDRISNHebDSqVLZNHgwErS56QmEzO0aKg kXTn3TSZc6S9TLiA/n7KPoDAqmaApOUI1OkCOLRoW+Jp2E7dUPcPiili9K1C4HmU 7v4yIdttWjOokFcfve1NqbDevbGs/CMRzyX7r3aLR02Ay+35M+qMa85EurWKg1zZ Kukhqj06XyCFrbxit+AbsfQfiRddOR7rxQfo8XbTY3QbX5dh0eQ/PLXlNUuQ2mGm wFMP/C+lBqJTTpEiN3wWUS5GNkyXakSUUSQIFWWyYQF2mADxsxzNi2Fd6Cxhxk7W xRyuDq+Uk8XhkhhGK9CsAL72FGX4PISJiNb39W9HY99kXQw4hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA5xPlEIB3yIXP3zBXRR+Ks7EMG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjMzYmUwZmYtMjRjNS0z M2NmLTk3NWYtNGYzM2E4NWRlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnaymyHkC5ylZ4/sqi83GwDi7JSLcISGFXPetNjM/XVtiYthCET RxXChOd6ejssi/pl0PWE1/0v8kPetl/jiKjP3R+EjFkVY3e1R/GiO4HAKEnfoN6K 7AtPJnV0zPp0P4qVpoqDbPilhblk3Pv5aC0Lcp7saulTdgDaGME3vtAt6zFMoAHw JcDZrcnfNmVcFpRyQ1so9pUd5c4vBjbn/yHM+dssySy4/DAMGgBXmJlKCL4Tllr+ fN7bc4CU3dHHBU47Z6gDXsyB8vt4mw19vzqmzjdpxgBMjhtr0w4h4uZJuAVnEkYo JWnOIslk21VluyzJp+TEwTjyHdiedwovcFY= -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:34 2026 by rpki-client