$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4c3112d-8899-34be-b543-1cb45e2a7174.roa File: a4c3112d-8899-34be-b543-1cb45e2a7174.roa (raw, json) Hash identifier: jG/aJYg8UA+uv1Pddo4ddF3KZfLxoJ5Ioxd76bmqzHw= Subject key identifier: B7:EA:41:D7:C8:94:51:8D:DE:D8:B8:FE:D6:89:5C:70:8B:42:7C:95 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D5E1A7E5C6665283514C90900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4c3112d-8899-34be-b543-1cb45e2a7174.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 212238 IP address blocks: 2607:740:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7e:5c:66:65:28:35:14:c9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=6effdd6c-7002-4ec2-b003-29e1059d3bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:4e:23:6e:34:99:c4:7f:36:16:00:aa:20: c5:ab:f4:f7:d6:5c:2f:5f:71:6b:4a:e8:bb:4e:c2: 02:dd:74:3d:66:a2:f4:cc:77:a9:eb:81:69:c2:05: 50:cf:96:53:78:ac:af:34:d8:a9:f0:06:07:ad:17: f8:20:c6:40:4f:b8:f3:d5:aa:2d:c9:ae:b1:24:05: 60:26:b3:a9:c3:b7:00:52:ee:87:b9:f9:27:f3:62: ae:8c:1a:d3:57:24:6d:b1:05:f5:88:cb:c4:88:82: 4f:95:a8:8b:50:af:75:86:03:4f:3d:16:bc:3c:92: 3d:ac:82:fd:68:50:df:21:94:ee:52:6e:df:a9:a0: 4b:de:72:e5:0d:47:26:15:49:74:f8:44:a8:40:69: 3d:6c:39:4a:6f:82:ca:6a:08:02:d4:58:b2:36:39: 93:57:5e:c5:59:fb:e4:5d:15:87:1b:92:6f:69:50: b4:fc:18:97:1d:f8:91:19:f7:a1:41:bc:6a:c3:f1: 18:d0:57:3b:4c:1d:05:55:be:7a:35:41:64:ac:62: 47:4e:62:c7:ea:0b:ce:29:3a:c0:78:e0:71:f6:1c: 45:30:85:89:ef:6f:d0:39:38:e3:cf:f6:ac:3f:52: 75:38:98:97:9c:79:40:4c:95:70:f5:6d:7c:79:2f: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:41:D7:C8:94:51:8D:DE:D8:B8:FE:D6:89:5C:70:8B:42:7C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4c3112d-8899-34be-b543-1cb45e2a7174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:10:53:dc:af:1f:9c:04:88:f2:f3:f3:d7:7b:65:ad:f7:c0: c5:b9:b3:8f:9e:cc:cd:cc:00:01:8d:71:02:50:0b:53:36:e0: 6e:d6:ef:5b:12:57:d8:4b:4f:2f:b2:98:7a:cd:4f:3a:9a:92: 0a:56:59:ac:98:05:9f:b7:63:ae:2e:7f:4c:75:1b:e5:35:47: c5:b6:91:08:5f:b1:5f:5b:b7:dc:9d:10:3e:7f:f0:c9:de:5f: be:b0:01:fb:2b:06:b7:51:61:6f:ea:67:13:4e:48:0a:ca:13: 57:49:a8:0b:c0:0e:6f:04:88:2e:a9:16:2a:36:9a:04:ff:39: 1f:2f:ba:53:3d:e9:7f:64:02:30:0a:49:f7:15:60:ce:97:47: f9:af:0e:4b:1b:4c:af:e8:ca:2e:16:56:f9:bb:b5:8a:c8:22: bb:7a:41:12:8e:33:11:5d:77:aa:74:a8:db:85:c8:f1:d2:4a: c5:b3:c5:41:ff:23:0d:05:99:92:7a:d6:21:26:e6:d0:ab:78: c0:30:57:15:2c:a8:4b:11:4d:0b:1f:23:84:55:ec:c7:9a:01: 98:bc:fc:a9:43:b9:39:e6:3d:29:fd:9d:1d:1a:20:39:50:e5: 45:ff:17:3b:d0:6b:f5:c3:3d:6c:23:f5:3f:8a:20:31:c5:6e: ae:93:0c:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGn5cZmUoNRTJCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NmVmZmRkNmMtNzAwMi00ZWMyLWIwMDMtMjllMTA1OWQzYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaZOI240mcR/NhYAqiDFq/T31lwvX3FrSui7 TsIC3XQ9ZqL0zHep64FpwgVQz5ZTeKyvNNip8AYHrRf4IMZAT7jz1aotya6xJAVg JrOpw7cAUu6Hufkn82KujBrTVyRtsQX1iMvEiIJPlaiLUK91hgNPPRa8PJI9rIL9 aFDfIZTuUm7fqaBL3nLlDUcmFUl0+ESoQGk9bDlKb4LKaggC1FiyNjmTV17FWfvk XRWHG5JvaVC0/BiXHfiRGfehQbxqw/EY0Fc7TB0FVb56NUFkrGJHTmLH6gvOKTrA eOBx9hxFMIWJ72/QOTjjz/asP1J1OJiXnHlATJVw9W18eS87PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfqQdfIlFGN3ti4/taJXHCLQnyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTRjMzExMmQtODg5OS0z NGJlLWI1NDMtMWNiNDVlMmE3MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0QU9yvH5wEiPLz89d7Za33wMW5s4+ezM3MAAGNcQJQC1M24G7W 71sSV9hLTy+ymHrNTzqakgpWWayYBZ+3Y64uf0x1G+U1R8W2kQhfsV9bt9ydED5/ 8MneX76wAfsrBrdRYW/qZxNOSArKE1dJqAvADm8EiC6pFio2mgT/OR8vulM96X9k AjAKSfcVYM6XR/mvDksbTK/oyi4WVvm7tYrIIrt6QRKOMxFdd6p0qNuFyPHSSsWz xUH/Iw0FmZJ61iEm5tCreMAwVxUsqEsRTQsfI4RV7MeaAZi8/KlDuTnmPSn9nR0a IDlQ5UX/FzvQa/XDPWwj9T+KIDHFbq6TDBw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:40 2026 by rpki-client