$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa File: 1a7ac156-e8f8-36e2-a881-e2f18167880c.roa (raw, json) Hash identifier: eJnH3qdV7+FPTd5eeBJoL4LbeV687tDDyy3HObV8/8o= Subject key identifier: EF:91:B4:17:9F:E3:8A:18:DD:2C:ED:D5:60:6D:00:84:89:2E:22:B4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584BA69BB89A5C1D5DE2573AD540 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa Signing time: Sun 26 Oct 2025 14:45:39 +0000 ROA not before: Sun 26 Oct 2025 14:45:39 +0000 ROA not after: Sat 24 Jan 2026 15:45:39 +0000 asID: 212238 IP address blocks: 2607:740:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:9b:b8:9a:5c:1d:5d:e2:57:3a:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 26 14:45:39 2025 GMT Not After : Jan 24 15:45:39 2026 GMT Subject: CN=f4d6be8a-36fa-4cca-906d-9faecc6adefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:82:e5:7b:47:04:6f:2c:23:45:a4:2f:fa: d4:cb:00:0b:c0:82:0a:a5:61:77:c3:4b:0f:9b:e7: 20:60:69:a8:2e:6b:5a:fa:20:58:8c:af:c8:60:61: 5b:eb:9e:5f:9f:a9:26:3f:74:72:d2:d0:97:b6:32: 8d:7e:89:0f:9a:8f:8e:9f:d2:93:46:48:7a:2c:bd: 6b:f7:b5:06:19:35:3e:11:02:ae:bb:83:1c:87:77: c7:50:ab:06:f6:54:0a:a0:fd:d8:dc:51:2d:f8:11: 3e:98:d9:1d:45:58:fa:ad:70:ca:29:34:6a:32:9e: 45:19:e4:35:95:0c:a6:36:21:c8:21:18:0d:03:f5: 15:12:16:f1:79:41:93:64:7c:54:3c:89:3d:6a:0d: b2:7f:39:24:c6:cf:47:81:5d:db:08:2a:65:90:24: 44:14:9f:13:01:40:f3:7e:ad:4e:4e:34:8c:11:e1: 38:c5:b8:23:ae:dc:40:d8:da:12:37:c2:bd:de:b2: 44:11:cb:73:43:6d:68:c3:8f:e6:44:af:bb:a7:a8: 01:57:d1:3a:d6:f2:5d:0c:59:da:0c:4a:4b:c6:c2: be:3c:3b:b1:e2:ff:dd:7f:bf:2a:d8:11:94:92:0f: 6e:15:49:70:a3:76:a2:d7:04:3f:34:36:35:76:2a: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:91:B4:17:9F:E3:8A:18:DD:2C:ED:D5:60:6D:00:84:89:2E:22:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a7ac156-e8f8-36e2-a881-e2f18167880c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:dc:d8:f7:f9:f5:e1:2d:23:37:29:d1:07:df:70:15:d3:52: a3:8a:b8:10:5b:e0:b6:ff:d8:54:ae:16:cd:03:05:c7:20:c3: a1:82:86:c6:75:0e:f3:d6:ab:6a:71:ac:40:c6:b5:38:5e:49: 1d:07:a2:de:2a:c9:39:fd:57:1a:a6:13:25:fa:ed:88:2c:bf: 60:a6:55:df:b4:73:95:85:02:d9:9e:e3:20:e5:94:fc:f7:22: d1:61:9b:bb:c6:3b:75:89:2b:db:23:11:23:7f:9f:10:7c:d5: ab:64:38:b1:f5:9f:01:7d:e3:df:c9:30:6d:27:59:0d:90:4c: 27:73:ea:b9:ec:27:35:70:25:62:65:a6:9a:ed:20:51:3e:76: 03:e4:31:af:83:cc:c1:9a:9c:8f:36:86:e4:86:48:e7:f2:94: 73:f6:ad:0f:5a:29:69:6f:af:d2:59:88:36:b8:35:cc:f6:6e: 30:b2:1a:48:a2:3d:cb:8b:37:79:51:41:e3:02:c7:16:96:e8: 5b:5c:64:43:71:8f:bc:f8:41:03:f9:50:cb:18:7d:79:9f:92: 3b:9c:b3:64:56:6f:a8:43:1e:e1:e2:d9:53:70:ff:bb:7f:9e: 83:98:c4:89:a4:e4:ad:34:4c:ff:b8:05:09:de:e9:ce:78:92: f3:d4:6c:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEumm7iaXB1d4lc61UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAyNjE0NDUzOVoXDTI2MDEyNDE1NDUzOVowLzEtMCsGA1UEAxMk ZjRkNmJlOGEtMzZmYS00Y2NhLTkwNmQtOWZhZWNjNmFkZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwSC5XtHBG8sI0WkL/rUywALwIIKpWF3w0sP m+cgYGmoLmta+iBYjK/IYGFb655fn6kmP3Ry0tCXtjKNfokPmo+On9KTRkh6LL1r 97UGGTU+EQKuu4Mch3fHUKsG9lQKoP3Y3FEt+BE+mNkdRVj6rXDKKTRqMp5FGeQ1 lQymNiHIIRgNA/UVEhbxeUGTZHxUPIk9ag2yfzkkxs9HgV3bCCplkCREFJ8TAUDz fq1OTjSMEeE4xbgjrtxA2NoSN8K93rJEEctzQ21ow4/mRK+7p6gBV9E61vJdDFna DEpLxsK+PDux4v/df78q2BGUkg9uFUlwo3ai1wQ/NDY1dipI2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO+RtBef44oY3Szt1WBtAISJLiK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWE3YWMxNTYtZThmOC0z NmUyLWE4ODEtZTJmMTgxNjc4ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHbc2Pf59eEtIzcp0QffcBXTUqOKuBBb4Lb/2FSuFs0DBccgw6GC hsZ1DvPWq2pxrEDGtTheSR0Hot4qyTn9VxqmEyX67Ygsv2CmVd+0c5WFAtme4yDl lPz3ItFhm7vGO3WJK9sjESN/nxB81atkOLH1nwF949/JMG0nWQ2QTCdz6rnsJzVw JWJlpprtIFE+dgPkMa+DzMGanI82huSGSOfylHP2rQ9aKWlvr9JZiDa4Ncz2bjCy GkiiPcuLN3lRQeMCxxaW6FtcZENxj7z4QQP5UMsYfXmfkjucs2RWb6hDHuHi2VNw /7t/noOYxImk5K00TP+4BQne6c54kvPUbHk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:51 2025 by rpki-client