$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa File: 4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa (raw, json) Hash identifier: OhOWzqs8K4PWYJi0vO6le8R0TFKCe/tTIVJ/YCz4jY4= Subject key identifier: 65:02:81:23:BD:9F:CB:E1:15:96:0F:EF:34:DA:55:F7:6C:70:54:76 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F23C283F80A21E55066B7C780 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 209181 IP address blocks: 2607:740:5a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:83:f8:0a:21:e5:50:66:b7:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=0b1e87e6-b30a-46c4-be98-55be4038e8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:88:20:1c:43:7e:e5:c7:b9:6b:d0:9d:8d: ee:9c:0d:e7:47:07:fb:a0:24:8f:98:be:a8:70:8b: 8f:03:45:01:cf:4c:29:d3:5b:f9:31:45:c6:b0:82: ff:a9:34:1c:bf:b8:b1:f9:7c:91:04:c0:87:fc:71: cf:cf:9e:98:83:55:29:61:35:37:dc:0f:07:0e:05: 21:0e:56:3b:e4:7a:c3:d5:61:ed:00:ed:0f:f6:ae: d6:22:b6:a3:94:c6:b9:e5:72:30:ec:81:25:64:7a: eb:fc:7e:af:e7:35:ec:1a:3a:79:20:66:83:4a:36: 78:14:d3:e5:c5:2d:aa:21:02:12:bc:52:3e:57:a4: 7b:69:a6:51:82:bf:e7:6d:5b:b7:2a:9e:98:97:ba: 0d:da:a4:38:ae:22:65:8c:0f:fa:2a:b8:32:f8:ad: bd:2e:d3:97:15:d1:61:9f:b0:b7:1f:1b:d1:64:ad: f1:e6:99:d6:1a:76:e0:f2:fe:15:49:2a:bc:65:25: f2:0e:6c:f6:d3:94:98:18:6c:2e:24:f5:cb:a7:d7: 08:d2:cd:2c:cf:86:27:1e:65:25:74:2f:b1:a8:90: 01:7c:1e:07:77:86:2c:e0:b5:34:8d:c8:23:12:dd: d2:82:57:17:df:96:2a:19:b7:b1:d2:6e:b3:a0:05: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:02:81:23:BD:9F:CB:E1:15:96:0F:EF:34:DA:55:F7:6C:70:54:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4008b743-160b-3b3f-ad5d-aa4a85f0150b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:5a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a2:16:d6:24:54:eb:79:52:a6:84:8b:7f:16:0b:f9:69:67: ed:f8:a8:97:f6:3a:ba:8e:6c:ce:50:36:93:4c:c4:d3:8f:8e: d0:6c:28:28:1e:a3:a1:eb:57:b5:0f:ce:43:15:da:d4:ba:6c: 3c:47:d9:49:6d:87:09:23:dd:2a:15:d8:8f:a2:fb:16:4f:2f: ff:aa:6b:8f:b4:12:14:70:bd:64:67:a9:8e:11:bb:d5:43:01: 04:c6:61:01:70:0f:50:10:01:9a:03:1b:82:c0:81:0b:c6:44: 9c:b1:02:99:f3:98:c6:e8:6f:80:13:c9:aa:fc:97:31:08:b2: 39:88:3a:fc:38:a4:f3:a9:15:51:e7:0e:d5:9d:67:ae:ad:d1: 8d:1a:10:e8:f8:69:99:d7:58:36:e4:c5:25:3e:cf:56:88:d3: f4:d2:00:6b:ea:c4:ae:b2:2f:1d:7f:2c:5f:23:b9:b7:05:c7: 9d:9a:29:c2:92:5a:64:b2:a6:bb:1e:c2:1f:9d:1c:52:87:2c: 50:9c:2e:47:e3:3f:de:88:aa:ff:5a:94:b5:53:54:24:28:e2: e1:0a:0c:4d:b8:54:81:b3:eb:b4:4c:9e:43:d5:58:ca:23:3b: b5:73:e1:50:4c:53:7e:d4:6e:aa:24:de:ea:e5:ca:71:49:fa: ea:fc:e7:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwoP4CiHlUGa3x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MGIxZTg3ZTYtYjMwYS00NmM0LWJlOTgtNTViZTQwMzhlOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd6IIBxDfuXHuWvQnY3unA3nRwf7oCSPmL6o cIuPA0UBz0wp01v5MUXGsIL/qTQcv7ix+XyRBMCH/HHPz56Yg1UpYTU33A8HDgUh DlY75HrD1WHtAO0P9q7WIrajlMa55XIw7IElZHrr/H6v5zXsGjp5IGaDSjZ4FNPl xS2qIQISvFI+V6R7aaZRgr/nbVu3Kp6Yl7oN2qQ4riJljA/6Krgy+K29LtOXFdFh n7C3HxvRZK3x5pnWGnbg8v4VSSq8ZSXyDmz205SYGGwuJPXLp9cI0s0sz4YnHmUl dC+xqJABfB4Hd4Ys4LU0jcgjEt3SglcX35YqGbex0m6zoAXuEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUCgSO9n8vhFZYP7zTaVfdscFR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDAwOGI3NDMtMTYwYi0z YjNmLWFkNWQtYWE0YTg1ZjAxNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqiFtYkVOt5UqaEi38WC/lpZ+34qJf2OrqObM5QNpNMxNOPjtBs KCgeo6HrV7UPzkMV2tS6bDxH2Ulthwkj3SoV2I+i+xZPL/+qa4+0EhRwvWRnqY4R u9VDAQTGYQFwD1AQAZoDG4LAgQvGRJyxApnzmMbob4ATyar8lzEIsjmIOvw4pPOp FVHnDtWdZ66t0Y0aEOj4aZnXWDbkxSU+z1aI0/TSAGvqxK6yLx1/LF8jubcFx52a KcKSWmSyprsewh+dHFKHLFCcLkfjP96Iqv9alLVTVCQo4uEKDE24VIGz67RMnkPV WMojO7Vz4VBMU37Ubqok3urlynFJ+ur85zo= -----END CERTIFICATE-----Generated at Tue Sep 22 22:19:51 2026 by rpki-client