$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa File: f7d21d96-d256-3aab-9e7e-57e21046fd47.roa (raw, json) Hash identifier: y9koiKawHDvIbqX/iXk2SBP/GSi6jHatHO5qjWRl1IY= Subject key identifier: 65:F0:12:0C:6A:30:B9:50:17:88:00:18:86:B2:FF:4F:AE:A8:AD:2D Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1AC6B70D183DDCAD76880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ac:6b:70:d1:83:dd:ca:d7:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=acd0fda1-e991-45d1-8cb5-0ad56754be3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:74:73:45:2c:4b:cb:3e:f0:ac:37:7f:01: 58:c0:37:77:97:ca:77:bb:c8:f2:67:f9:ae:68:3b: 63:4b:6e:ff:06:83:37:ef:e8:5a:a3:de:1d:fc:b5: 00:fd:ff:87:99:83:1c:60:55:d1:89:6b:c2:65:94: 58:87:19:d8:61:a2:ae:94:e9:17:04:67:7c:a5:11: 02:00:c4:6c:ab:18:6c:64:7a:59:ad:0b:34:29:43: 84:a9:96:92:99:fb:95:0a:f3:20:29:bc:c1:27:e3: 9b:ca:4a:1d:6a:53:93:18:a4:71:af:00:aa:47:e0: 02:53:6e:14:f6:28:54:b3:07:ab:80:6d:3f:cf:f8: 00:a4:4f:e5:fa:0b:5d:71:1c:46:82:d7:2f:f4:89: 5b:ed:93:03:d5:38:89:6e:19:cb:ed:bf:39:71:07: 1e:1e:a6:f1:3f:83:db:a1:5d:91:ad:c4:e4:5f:97: 6f:0e:ff:56:64:51:bd:f5:dc:89:7a:fe:94:14:29: 22:d6:11:e9:4e:49:fc:66:71:76:7d:5f:1b:2c:ab: ca:2d:a0:ad:7c:da:40:14:3d:62:e7:20:2b:66:70: 5f:84:16:fc:8c:74:d4:87:7e:0b:e3:df:e8:d3:ea: d0:1f:fe:41:74:09:a6:b4:a5:4e:7a:ff:04:ad:95: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F0:12:0C:6A:30:B9:50:17:88:00:18:86:B2:FF:4F:AE:A8:AD:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:35::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:48:24:16:a6:ec:89:5e:21:bb:03:c0:d8:62:b2:e2:c0:41: 46:18:b9:ca:32:1e:23:7d:39:d1:e9:9e:bd:0d:ea:5c:3d:0b: b0:80:bd:0b:de:04:de:85:3c:aa:ee:98:ec:ec:55:90:25:6b: 32:41:88:2e:36:62:91:f7:8b:31:74:ca:9f:58:4e:dc:71:ce: ea:b0:b9:35:89:d3:e4:99:a3:cb:69:2c:0c:7f:14:aa:42:c0: 9c:42:66:ea:10:86:1d:24:04:b1:d1:b4:cf:d2:55:6a:95:d2: d7:ec:43:e0:7e:c9:15:e0:d6:1d:40:10:dd:4a:bc:50:c7:0b: ef:a3:b5:f5:bf:b9:29:e1:be:ed:c5:5b:ab:b4:ac:06:77:63: 28:56:15:1f:72:cf:79:d9:7d:d3:94:8b:04:47:d7:18:49:5c: e0:f6:cf:78:80:17:0e:51:13:63:0e:a7:fd:c5:ca:e8:96:b4: 96:36:53:23:3e:1b:09:4b:b9:bc:ed:21:78:b1:63:ee:52:b5: d1:9d:d3:15:bf:e4:4c:db:fc:c6:c7:7c:0a:29:e6:e1:6c:31: 53:2e:98:7e:5f:80:26:a9:90:e5:a9:8b:cb:f8:00:20:86:79: a3:fd:9c:ea:00:f3:91:c1:fe:93:38:a9:40:aa:68:90:2d:3a: 51:64:b1:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4axrcNGD3crXaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YWNkMGZkYTEtZTk5MS00NWQxLThjYjUtMGFkNTY3NTRiZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39J0c0UsS8s+8Kw3fwFYwDd3l8p3u8jyZ/mu aDtjS27/BoM37+hao94d/LUA/f+HmYMcYFXRiWvCZZRYhxnYYaKulOkXBGd8pREC AMRsqxhsZHpZrQs0KUOEqZaSmfuVCvMgKbzBJ+ObykodalOTGKRxrwCqR+ACU24U 9ihUswergG0/z/gApE/l+gtdcRxGgtcv9Ilb7ZMD1TiJbhnL7b85cQceHqbxP4Pb oV2RrcTkX5dvDv9WZFG99dyJev6UFCki1hHpTkn8ZnF2fV8bLKvKLaCtfNpAFD1i 5yArZnBfhBb8jHTUh34L49/o0+rQH/5BdAmmtKVOev8ErZXxrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXwEgxqMLlQF4gAGIay/0+uqK0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjdkMjFkOTYtZDI1Ni0z YWFiLTllN2UtNTdlMjEwNDZmZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1IJBam7IleIbsDwNhisuLAQUYYucoyHiN9OdHpnr0N6lw9C7CA vQveBN6FPKrumOzsVZAlazJBiC42YpH3izF0yp9YTtxxzuqwuTWJ0+SZo8tpLAx/ FKpCwJxCZuoQhh0kBLHRtM/SVWqV0tfsQ+B+yRXg1h1AEN1KvFDHC++jtfW/uSnh vu3FW6u0rAZ3YyhWFR9yz3nZfdOUiwRH1xhJXOD2z3iAFw5RE2MOp/3FyuiWtJY2 UyM+GwlLubztIXixY+5StdGd0xW/5Ezb/MbHfAop5uFsMVMumH5fgCapkOWpi8v4 ACCGeaP9nOoA85HB/pM4qUCqaJAtOlFksYs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:33 2025 by rpki-client