$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa File: 99f57e95-f252-322c-b610-0e25f2a01dec.roa (raw, json) Hash identifier: DDFHcoMKU/iNCMxNhhJ/rWYVMF1IRmMctD+l9fCliu8= Subject key identifier: FF:F6:8F:A5:31:CA:EC:A8:B2:0B:6B:E7:6D:87:84:CF:6F:0E:4B:B6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CF422149ECA7D102C0E26A3A0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 9009 IP address blocks: 2607:740:6f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:14:9e:ca:7d:10:2c:0e:26:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=5887f35e-ab62-4a44-a23d-f058bfac8af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:86:e4:d6:93:72:54:cc:aa:dd:a2:19:74:06: b5:54:d5:9c:e0:45:e7:94:ae:dd:d6:e6:75:92:b3: 38:4f:1a:83:8d:e0:50:6f:8b:bb:68:0d:c9:f4:b5: f1:51:25:6e:82:4f:9e:cb:77:5c:81:e0:4c:41:e7: 0e:3d:66:8e:2e:d9:f1:23:ea:de:43:01:34:9b:4d: 2f:58:74:35:75:29:95:13:3c:86:40:51:27:d7:1b: c8:e9:75:d5:e5:b4:a3:ab:9b:98:37:d2:49:67:7e: 53:11:00:85:33:0a:f3:3c:a1:df:b8:0b:3a:74:41: a8:e4:35:39:ac:c9:62:0d:e6:12:17:cf:7a:95:27: 09:ef:03:1e:70:51:86:98:b8:6d:cf:ac:cf:bf:27: ff:04:19:40:fc:db:23:80:aa:f5:98:ae:81:82:92: fe:9c:d3:4a:f2:21:61:ca:09:be:81:c7:0a:c6:9f: 99:50:b7:6c:81:85:32:97:05:6f:4d:54:34:ed:84: c8:3c:0d:fb:5b:e0:91:95:a1:d7:6f:a5:69:45:42: 77:94:ca:a7:5f:8f:3b:e2:78:67:df:c2:b5:f1:63: 83:5e:42:4f:ed:2e:7c:5b:2d:63:6b:0d:11:58:4f: ee:7c:cd:3b:48:a9:b4:48:a5:b4:7f:16:fc:f0:69: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:8F:A5:31:CA:EC:A8:B2:0B:6B:E7:6D:87:84:CF:6F:0E:4B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:6f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:28:49:80:f9:06:f2:2a:41:47:57:bb:95:ac:87:fe:79:d0: 96:61:c6:c0:8d:c7:48:c4:67:9d:93:7f:e0:b9:fa:84:f6:1e: b3:ea:a9:5f:b9:cb:5a:3f:62:6c:8d:88:b6:be:14:de:02:53: 03:f6:5c:d6:3c:13:3c:8b:1c:a8:00:5f:61:c5:ba:7f:6c:8b: 17:5e:30:09:35:fe:97:81:b2:a4:64:7a:d6:bf:eb:58:28:74: 2f:8e:99:ea:98:ab:51:02:e8:eb:03:a1:fb:85:f7:29:49:33: 3c:b8:d6:1b:4f:ac:a0:6f:1b:b6:cd:06:77:d5:b4:99:df:fa: 2b:99:3b:5d:a8:29:32:bf:f2:14:73:a2:ed:00:af:25:39:c8: b5:77:55:68:5e:02:c1:2c:81:2d:b5:76:4b:d4:a3:7d:1c:53: 4d:d9:4a:5b:80:d9:8c:cc:cf:70:93:76:f0:8b:19:60:c3:94: 40:80:6e:83:ac:ce:fe:85:06:17:5f:c9:4e:24:27:0a:60:b3: a6:49:b7:fe:d8:f3:44:14:23:51:f4:ad:0e:ef:dc:7a:be:8f: 49:18:73:7a:a0:d5:e6:7c:ac:bf:c2:57:89:f6:0e:42:04:46: 8a:14:c4:d6:64:9b:96:8f:08:03:82:31:65:5a:54:21:05:a7: a2:ce:c5:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz0IhSeyn0QLA4mo6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk NTg4N2YzNWUtYWI2Mi00YTQ0LWEyM2QtZjA1OGJmYWM4YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4bk1pNyVMyq3aIZdAa1VNWc4EXnlK7d1uZ1 krM4TxqDjeBQb4u7aA3J9LXxUSVugk+ey3dcgeBMQecOPWaOLtnxI+reQwE0m00v WHQ1dSmVEzyGQFEn1xvI6XXV5bSjq5uYN9JJZ35TEQCFMwrzPKHfuAs6dEGo5DU5 rMliDeYSF896lScJ7wMecFGGmLhtz6zPvyf/BBlA/NsjgKr1mK6BgpL+nNNK8iFh ygm+gccKxp+ZULdsgYUylwVvTVQ07YTIPA37W+CRlaHXb6VpRUJ3lMqnX4874nhn 38K18WODXkJP7S58Wy1jaw0RWE/ufM07SKm0SKW0fxb88Gm/MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/2j6Uxyuyosgtr522HhM9vDku2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTlmNTdlOTUtZjI1Mi0z MjJjLWI2MTAtMGUyNWYyYTAxZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUoSYD5BvIqQUdXu5Wsh/550JZhxsCNx0jEZ52Tf+C5+oT2HrPq qV+5y1o/YmyNiLa+FN4CUwP2XNY8EzyLHKgAX2HFun9sixdeMAk1/peBsqRketa/ 61godC+OmeqYq1EC6OsDofuF9ylJMzy41htPrKBvG7bNBnfVtJnf+iuZO12oKTK/ 8hRzou0AryU5yLV3VWheAsEsgS21dkvUo30cU03ZSluA2YzMz3CTdvCLGWDDlECA boOszv6FBhdfyU4kJwpgs6ZJt/7Y80QUI1H0rQ7v3Hq+j0kYc3qg1eZ8rL/CV4n2 DkIERooUxNZkm5aPCAOCMWVaVCEFp6LOxWo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:53 2026 by rpki-client