$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/967cf06d-ac41-3bb7-938b-1344e6961d8d.roa File: 967cf06d-ac41-3bb7-938b-1344e6961d8d.roa (raw, json) Hash identifier: etZX0UBg5jKuLSBsK8qH3XEHw9gX+MvtitR7Ro6X8JA= Subject key identifier: 8B:42:A4:46:9D:6C:D8:27:8F:93:50:9D:D6:7F:A1:49:C1:82:B1:D1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D67DFFA5FBE651BAC12554880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/967cf06d-ac41-3bb7-938b-1344e6961d8d.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 212238 IP address blocks: 2607:740:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:fa:5f:be:65:1b:ac:12:55:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=2ea280b6-fbdd-4035-93ed-5241f0631433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:89:82:cd:2f:cb:96:c3:19:2f:98:92:db:63: fd:31:5f:5f:8a:e6:f1:c7:75:eb:c6:5a:27:02:74: ec:7c:0b:e0:1a:e4:bd:26:66:c7:50:51:dc:3d:fd: 2f:9c:9b:fb:6f:5a:a4:f6:9b:52:e0:cd:15:23:df: 0f:a9:3c:67:96:cc:1b:21:60:04:e1:b1:f7:1c:65: c5:6c:de:da:e4:21:c2:8f:cf:70:41:07:aa:83:4d: 6b:98:e8:0c:d1:9d:3f:03:dd:a4:f7:1d:a6:13:76: 82:0e:26:99:a6:b5:50:43:68:cb:12:d2:3a:36:60: c8:61:e5:c1:8b:3a:3b:0f:bf:46:34:98:69:d9:51: 73:3b:a7:f3:7e:7b:fd:eb:5c:11:35:c3:6f:35:54: 63:66:63:56:61:5f:04:7d:e7:54:cb:fd:51:d3:36: d1:a7:f3:fa:bd:63:03:c3:f1:1f:e4:cb:e1:30:09: 9c:0e:5c:49:10:6c:f6:fe:d9:b4:10:9d:51:65:91: 40:83:db:b3:57:1a:41:a1:5f:3f:8e:cb:f4:83:42: 50:57:e1:53:03:6c:6f:fa:46:88:fe:7d:d7:56:05: 92:9d:3b:ae:c3:05:c8:ff:42:c6:f3:2f:a5:8c:1e: ab:5e:6e:44:e3:65:81:87:77:67:92:92:7c:98:24: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:42:A4:46:9D:6C:D8:27:8F:93:50:9D:D6:7F:A1:49:C1:82:B1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/967cf06d-ac41-3bb7-938b-1344e6961d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a6:88:20:7d:5e:7b:a9:79:73:f2:de:dd:e1:17:68:ba:7f: f7:3c:c3:ab:ff:ac:42:33:96:f5:82:99:25:82:c9:e0:0d:36: ea:38:27:e4:e5:3c:2e:1f:26:9e:39:31:92:92:a8:d2:94:d9: 30:d7:0a:2f:05:50:2c:0c:78:ba:0c:3d:cc:69:f1:c0:64:b6: 23:86:cb:94:02:05:56:7a:d5:40:1f:fb:7e:8e:30:8e:fd:a2: 99:71:50:d3:92:ec:8a:36:24:ad:a9:ed:39:51:4a:c8:61:d1: 8b:c7:6e:af:9c:9c:30:f6:f4:a0:94:76:7b:d7:69:47:2f:1e: 1e:a4:b2:3a:c7:3b:fe:48:3d:b0:77:9c:a5:c3:08:83:11:a7: 49:ec:fc:b2:98:74:c1:56:72:c2:30:5f:2a:b7:45:ab:df:d8: 56:24:75:84:1f:be:a9:db:ec:c7:01:3b:87:23:45:2f:1a:34: 50:37:6a:5b:c0:17:49:78:4c:8f:d4:55:0c:9c:37:fa:33:0c: e4:6a:ad:b9:cf:c2:88:62:2e:74:dc:5e:64:fb:bd:95:bd:98: fd:2a:bb:4d:0d:59:39:ce:6a:a9:5c:62:d8:31:11:14:8f:c8: 11:73:82:33:c4:65:54:71:d4:8c:82:e3:87:34:5f:b1:86:66: 52:b1:b2:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n3/pfvmUbrBJVSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MmVhMjgwYjYtZmJkZC00MDM1LTkzZWQtNTI0MWYwNjMxNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgomCzS/LlsMZL5iS22P9MV9fiubxx3Xrxlon AnTsfAvgGuS9JmbHUFHcPf0vnJv7b1qk9ptS4M0VI98PqTxnlswbIWAE4bH3HGXF bN7a5CHCj89wQQeqg01rmOgM0Z0/A92k9x2mE3aCDiaZprVQQ2jLEtI6NmDIYeXB izo7D79GNJhp2VFzO6fzfnv961wRNcNvNVRjZmNWYV8EfedUy/1R0zbRp/P6vWMD w/Ef5MvhMAmcDlxJEGz2/tm0EJ1RZZFAg9uzVxpBoV8/jsv0g0JQV+FTA2xv+kaI /n3XVgWSnTuuwwXI/0LG8y+ljB6rXm5E42WBh3dnkpJ8mCSWawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFItCpEadbNgnj5NQndZ/oUnBgrHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTY3Y2YwNmQtYWM0MS0z YmI3LTkzOGItMTM0NGU2OTYxZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqmiCB9XnupeXPy3t3hF2i6f/c8w6v/rEIzlvWCmSWCyeANNuo4 J+TlPC4fJp45MZKSqNKU2TDXCi8FUCwMeLoMPcxp8cBktiOGy5QCBVZ61UAf+36O MI79oplxUNOS7Io2JK2p7TlRSshh0YvHbq+cnDD29KCUdnvXaUcvHh6ksjrHO/5I PbB3nKXDCIMRp0ns/LKYdMFWcsIwXyq3Ravf2FYkdYQfvqnb7McBO4cjRS8aNFA3 alvAF0l4TI/UVQycN/ozDORqrbnPwohiLnTcXmT7vZW9mP0qu00NWTnOaqlcYtgx ERSPyBFzgjPEZVRx1IyC44c0X7GGZlKxshY= -----END CERTIFICATE-----Generated at Fri Apr 17 10:21:33 2026 by rpki-client