$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa File: 5aa51862-3d2c-39bf-be77-93452e666607.roa (raw, json) Hash identifier: tnTM+6QilvmC/pYiYTpIG/cj3AeDzwt7rao51/paISo= Subject key identifier: 8D:7C:70:9C:60:69:B7:8B:3B:AF:9D:19:EB:9D:F0:28:97:77:99:77 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B1F0173505DAC175A628DBC70 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 133480 IP address blocks: 2607:740:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:73:50:5d:ac:17:5a:62:8d:bc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f16cd9b1-40fd-4d98-bcd9-f87a99d4a1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:da:8f:1c:df:13:b8:ed:e5:50:27:13:f3: fb:c4:1f:9d:75:ad:30:89:20:f9:32:06:fc:07:42: 7f:b6:82:cc:c7:33:1d:56:74:43:44:45:12:f8:8f: c6:ed:60:9b:6d:63:71:5d:aa:ab:03:2c:b3:1a:ac: 0e:54:91:c2:fb:d6:a4:7e:46:f6:fe:63:db:7d:cb: 65:67:74:cb:82:2f:68:c3:fb:81:cc:41:4c:a6:08: a6:90:f7:61:80:8c:e6:f8:23:10:ce:97:0b:6b:d8: d0:5f:9e:bb:c7:81:26:8d:ca:61:71:ae:29:7a:f7: 35:96:75:41:f3:45:62:f0:a8:11:a2:83:ba:39:64: af:f2:fd:4e:47:97:59:96:f2:8c:6d:9c:1d:07:c7: 8e:35:31:fe:7f:74:4a:66:62:41:9f:b6:b8:7b:41: 50:5e:28:a1:88:a6:19:3d:92:6a:41:29:8c:59:93: cc:1f:8a:35:1c:ac:10:d1:c2:9f:d0:14:19:a4:39: e6:1c:60:c7:75:27:e2:3f:fa:ab:f0:fa:bd:6c:05: ac:7c:ec:fd:74:84:0f:ce:63:a7:c4:88:65:33:7f: 6e:67:e7:72:66:e7:54:14:9a:c4:34:d4:18:21:69: d9:00:0a:96:e6:1f:58:00:5a:4f:06:7c:02:2c:f4: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7C:70:9C:60:69:B7:8B:3B:AF:9D:19:EB:9D:F0:28:97:77:99:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d6:51:29:59:91:bd:bc:76:ea:c3:dc:e9:8e:43:09:b3:a2: b0:58:c5:7f:60:a9:df:20:c3:4d:58:77:08:f9:63:04:34:f3: 04:04:a0:b1:7b:f6:cb:a9:6f:54:17:17:2c:57:6e:bb:92:1d: 41:b5:a9:57:45:32:e3:a5:5d:f9:a9:5b:d3:88:b5:da:f8:ba: b1:72:97:64:59:55:9a:fc:61:6e:9b:15:1c:76:7e:90:7b:cc: 03:53:f9:24:37:9c:0d:1f:59:c6:a0:b5:0f:bc:00:ff:c8:37: e8:0f:d6:8c:a2:ff:93:99:5e:e5:4b:9c:0b:e5:f6:57:de:ec: 37:59:9d:8a:5a:61:d4:e6:a7:56:aa:00:2a:ac:7a:e2:6a:9d: 5d:30:6f:d5:bc:15:6f:d4:5c:40:19:2f:d2:0c:7f:f3:4f:11: ec:c9:aa:ba:35:35:28:ac:ef:67:1b:af:b6:74:2c:9e:a9:90: 49:d4:43:34:f5:45:01:5e:74:25:ed:ce:60:7b:3e:4a:d8:ca: 78:14:28:f9:f0:dc:36:62:c8:e9:da:7e:9e:24:42:8f:f3:fd: eb:7a:9a:18:a6:bc:13:74:df:75:a0:27:ff:c3:c2:ce:eb:a4: b6:f4:af:e0:ee:6c:43:04:35:ff:ec:a7:67:57:d5:b9:a1:44: 12:22:17:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAXNQXawXWmKNvHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjE2Y2Q5YjEtNDBmZC00ZDk4LWJjZDktZjg3YTk5ZDRhMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGjajxzfE7jt5VAnE/P7xB+dda0wiSD5Mgb8 B0J/toLMxzMdVnRDREUS+I/G7WCbbWNxXaqrAyyzGqwOVJHC+9akfkb2/mPbfctl Z3TLgi9ow/uBzEFMpgimkPdhgIzm+CMQzpcLa9jQX567x4Emjcphca4pevc1lnVB 80Vi8KgRooO6OWSv8v1OR5dZlvKMbZwdB8eONTH+f3RKZmJBn7a4e0FQXiihiKYZ PZJqQSmMWZPMH4o1HKwQ0cKf0BQZpDnmHGDHdSfiP/qr8Pq9bAWsfOz9dIQPzmOn xIhlM39uZ+dyZudUFJrENNQYIWnZAAqW5h9YAFpPBnwCLPRsBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI18cJxgabeLO6+dGeud8CiXd5l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNWFhNTE4NjItM2QyYy0z OWJmLWJlNzctOTM0NTJlNjY2NjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvWUSlZkb28durD3OmOQwmzorBYxX9gqd8gw01Ydwj5YwQ08wQE oLF79supb1QXFyxXbruSHUG1qVdFMuOlXfmpW9OItdr4urFyl2RZVZr8YW6bFRx2 fpB7zANT+SQ3nA0fWcagtQ+8AP/IN+gP1oyi/5OZXuVLnAvl9lfe7DdZnYpaYdTm p1aqACqseuJqnV0wb9W8FW/UXEAZL9IMf/NPEezJqro1NSis72cbr7Z0LJ6pkEnU QzT1RQFedCXtzmB7PkrYyngUKPnw3DZiyOnafp4kQo/z/et6mhimvBN033WgJ//D ws7rpLb0r+DubEMENf/sp2dX1bmhRBIiF+o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:27 2025 by rpki-client