$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa File: 4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa (raw, json) Hash identifier: +shO3A+4jOBogT3IBRNzdnQJ0AUp5lejgUFt89QuxOI= Subject key identifier: 91:65:7B:6A:BE:AD:3C:CC:B3:13:A2:E1:E4:60:F4:AF:B2:63:37:2F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CC07C7EC51067199950652FE0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 209181 IP address blocks: 2607:740:5a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:7e:c5:10:67:19:99:50:65:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=a221a067-08fa-4086-bca8-af9995850fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:8c:17:df:a0:cc:0e:52:f3:09:1d:35:6c: 5e:c0:31:0d:fc:e7:20:98:1a:7d:39:5a:36:c2:4c: d9:11:23:dc:fe:eb:76:c2:a5:84:77:6a:71:8e:eb: 4a:88:22:2d:dc:ed:9e:b3:a1:9f:83:ef:6d:9b:3c: 8f:44:5e:cc:69:38:75:e4:29:74:3e:23:ff:8b:17: 5e:60:9f:50:20:6e:e9:d0:ab:bc:2d:61:35:d5:0f: 45:5f:dc:a8:08:ba:07:2b:cf:8c:dc:fb:21:ba:59: c5:7a:21:f0:cc:59:ab:3a:78:15:dd:e2:ab:af:85: 59:3d:cb:d8:e6:99:45:26:a7:03:05:cf:ed:d2:7e: 8d:76:06:9d:fb:4a:ca:7c:ce:09:d2:36:a5:56:c4: b2:5f:a2:09:c8:2f:9f:a6:15:2c:63:86:1f:b7:38: 6a:8c:c6:ef:fc:45:16:76:ae:c6:1f:04:2b:95:16: 2c:ba:f0:78:a8:71:50:ab:a3:1c:46:8b:c8:86:f2: e4:93:64:0a:f2:5e:87:c0:f1:e1:7c:23:60:5d:a1: fb:e2:7f:03:fd:1e:1e:9b:d3:45:9b:f7:20:44:57: 92:61:bb:28:72:e1:8e:da:44:cb:35:3b:11:a5:85: 69:eb:56:80:53:52:d8:af:87:95:63:d0:a7:5f:8b: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:7B:6A:BE:AD:3C:CC:B3:13:A2:E1:E4:60:F4:AF:B2:63:37:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:20:27:5a:39:a8:24:7e:a0:f5:73:f3:21:8a:51:a2:d2:4b: 95:f0:8e:7f:f5:e7:53:e1:49:3f:ad:30:e5:08:97:1e:d1:75: 4b:2a:96:0a:cb:cf:60:38:a1:5c:26:af:af:dc:f4:f2:bd:77: 47:26:0f:24:cb:a5:32:6a:fa:aa:4a:94:ac:b3:b1:ec:35:3e: 8a:e9:d7:78:23:ee:64:fd:9d:da:a7:5b:a4:49:a4:04:dd:eb: 7b:0b:0d:ef:7c:80:40:9c:1c:d0:b5:f3:0e:c7:f8:87:38:9a: 99:bd:cd:9e:04:7f:73:38:c3:c8:76:75:0b:fa:0c:63:ca:78: b7:b4:b8:d5:dd:83:b9:ca:8c:47:9c:0b:9c:77:d1:86:20:de: 84:af:20:27:bf:dc:03:99:23:4c:40:aa:5c:1e:b6:be:64:fb: 12:fd:15:8d:0d:dc:de:e8:ce:57:ef:31:ed:8f:29:52:8b:65: 0a:81:9e:cc:f7:ce:6b:5b:64:2a:4b:7a:cf:c3:6f:f3:38:1e: fd:a2:ad:6d:0b:bd:7c:e9:1c:3f:59:b3:5b:9e:00:32:0a:39: e9:57:98:10:d9:8a:e3:21:00:8d:57:af:fd:d2:f7:fb:6e:ce: 8d:13:f0:ac:6b:f9:71:12:a2:ca:03:57:bb:fc:91:20:ee:f9: 4a:4e:98:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfH7FEGcZmVBlL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk YTIyMWEwNjctMDhmYS00MDg2LWJjYTgtYWY5OTk1ODUwZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl2MF9+gzA5S8wkdNWxewDEN/OcgmBp9OVo2 wkzZESPc/ut2wqWEd2pxjutKiCIt3O2es6Gfg+9tmzyPRF7MaTh15Cl0PiP/ixde YJ9QIG7p0Ku8LWE11Q9FX9yoCLoHK8+M3PshulnFeiHwzFmrOngV3eKrr4VZPcvY 5plFJqcDBc/t0n6Ndgad+0rKfM4J0jalVsSyX6IJyC+fphUsY4YftzhqjMbv/EUW dq7GHwQrlRYsuvB4qHFQq6McRovIhvLkk2QK8l6HwPHhfCNgXaH74n8D/R4em9NF m/cgRFeSYbsocuGO2kTLNTsRpYVp61aAU1LYr4eVY9CnX4tjvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFle2q+rTzMsxOi4eRg9K+yYzcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDAwOGI3NDMtMTYwYi0z YjNmLWFkNWQtYWE0YTg1ZjAxNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIgJ1o5qCR+oPVz8yGKUaLSS5Xwjn/151PhST+tMOUIlx7RdUsq lgrLz2A4oVwmr6/c9PK9d0cmDyTLpTJq+qpKlKyzsew1Porp13gj7mT9ndqnW6RJ pATd63sLDe98gECcHNC18w7H+Ic4mpm9zZ4Ef3M4w8h2dQv6DGPKeLe0uNXdg7nK jEecC5x30YYg3oSvICe/3AOZI0xAqlwetr5k+xL9FY0N3N7ozlfvMe2PKVKLZQqB nsz3zmtbZCpLes/Db/M4Hv2irW0LvXzpHD9Zs1ueADIKOelXmBDZiuMhAI1Xr/3S 9/tuzo0T8Kxr+XESosoDV7v8kSDu+UpOmAk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:35 2026 by rpki-client