$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4c3112d-8899-34be-b543-1cb45e2a7174.roa File: a4c3112d-8899-34be-b543-1cb45e2a7174.roa (raw, json) Hash identifier: Ok8YD6fNC8K6QInV7D/8XB3MAlZ+hbrgJhIlA01I5Yg= Subject key identifier: 40:32:D3:3B:6A:F3:82:B6:7D:D6:14:B2:40:C2:B7:21:00:65:67:BC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B9CCCC5BCA71D0E84B0FA9780 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4c3112d-8899-34be-b543-1cb45e2a7174.roa Signing time: Thu 23 Oct 2025 02:26:24 +0000 ROA not before: Thu 23 Oct 2025 02:26:24 +0000 ROA not after: Wed 21 Jan 2026 03:26:24 +0000 asID: 212238 IP address blocks: 2607:740:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:cc:c5:bc:a7:1d:0e:84:b0:fa:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 23 02:26:24 2025 GMT Not After : Jan 21 03:26:24 2026 GMT Subject: CN=b52ba79d-4135-4ca7-b720-2bffd7fe8e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:e4:36:b0:d5:d2:08:fe:eb:3e:16:eb:b6: 5f:e9:88:68:0a:d8:a7:14:20:f4:f6:b6:b9:76:0c: b4:ed:3c:78:60:f6:9a:e1:29:05:2a:58:9b:54:ee: b8:0b:5f:f8:f0:ae:4b:f1:31:2a:e4:91:74:10:9f: 67:a7:eb:05:36:de:8a:43:13:ac:25:5d:7c:28:04: ac:b2:ae:8f:c8:b9:41:24:a2:1c:10:e8:76:98:4a: 1c:39:6e:25:56:76:c4:d0:2f:52:8e:a4:a9:3c:4b: 91:b7:a0:c2:3b:9b:d0:fa:ee:0b:62:ac:94:76:c7: b0:00:a1:29:67:65:b4:8b:64:c5:74:04:0c:e8:86: 85:15:a6:1b:08:94:65:2a:9e:d1:58:bc:e6:c2:e8: 3a:f1:60:0f:30:5e:ce:c4:45:e6:07:af:6a:af:7d: ba:84:bc:1c:27:5f:9a:38:15:55:9f:50:ba:60:e2: ed:cd:ac:27:ec:ed:ca:8b:92:47:d5:12:cb:67:5b: 37:ff:54:8d:b1:4f:af:26:c3:4e:cc:aa:37:43:4a: af:a3:0d:f1:24:4a:b8:f5:0a:d1:bb:92:3c:98:af: 97:e9:25:03:df:9d:3c:a7:32:6b:79:f2:8f:cd:7f: 3a:9d:4c:2c:f5:27:55:2a:d4:c1:e6:75:d5:c7:98: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:D3:3B:6A:F3:82:B6:7D:D6:14:B2:40:C2:B7:21:00:65:67:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a4c3112d-8899-34be-b543-1cb45e2a7174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:70:4c:45:d9:f3:4c:00:9a:83:4e:90:dc:eb:e5:da:29:14: c7:5a:07:76:8f:10:ab:5a:e1:61:be:5c:da:b8:fd:40:19:98: 3d:dc:7f:be:90:46:bf:68:10:d1:d7:de:0a:89:45:aa:01:29: c7:19:22:2c:0b:2e:68:d6:c2:74:61:bb:0f:e5:59:9d:ad:cf: 2f:db:50:19:7f:f7:f2:ca:10:e8:4e:2f:b0:1c:c3:14:30:22: ef:da:e0:b4:09:76:7e:38:58:d9:45:23:11:06:15:96:69:b8: 75:06:83:5b:03:0d:3c:a2:2b:c2:85:9a:81:1a:0e:6d:0d:41: 81:d4:15:1e:47:9e:cd:6a:6c:ae:b0:e7:90:c4:b2:51:e9:a0: e8:8f:c3:35:e5:86:60:02:4e:4f:57:31:bd:30:8a:b0:9a:66: 7f:e1:13:25:d1:c1:63:af:1c:d7:7b:0b:d2:2b:b9:67:dc:c2: e7:29:33:9e:1e:14:2b:6e:7e:7a:39:00:91:1e:fb:a1:82:9a: 2e:fd:64:8e:91:69:c8:c4:2d:60:ef:31:86:d3:9f:f4:dd:7f: 9b:be:1d:79:a0:09:0f:fc:13:9f:0a:33:34:7b:25:1a:3c:8f: 8e:55:b9:f8:a8:81:09:86:b6:8b:b3:e7:21:02:ef:6e:db:ae: f3:21:7d:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuczMW8px0OhLD6l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAyMzAyMjYyNFoXDTI2MDEyMTAzMjYyNFowLzEtMCsGA1UEAxMk YjUyYmE3OWQtNDEzNS00Y2E3LWI3MjAtMmJmZmQ3ZmU4ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyejkNrDV0gj+6z4W67Zf6YhoCtinFCD09ra5 dgy07Tx4YPaa4SkFKlibVO64C1/48K5L8TEq5JF0EJ9np+sFNt6KQxOsJV18KASs sq6PyLlBJKIcEOh2mEocOW4lVnbE0C9SjqSpPEuRt6DCO5vQ+u4LYqyUdsewAKEp Z2W0i2TFdAQM6IaFFaYbCJRlKp7RWLzmwug68WAPMF7OxEXmB69qr326hLwcJ1+a OBVVn1C6YOLtzawn7O3Ki5JH1RLLZ1s3/1SNsU+vJsNOzKo3Q0qvow3xJEq49QrR u5I8mK+X6SUD3508pzJrefKPzX86nUws9SdVKtTB5nXVx5iLdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEAy0ztq84K2fdYUskDCtyEAZWe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYTRjMzExMmQtODg5OS0z NGJlLWI1NDMtMWNiNDVlMmE3MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdwTEXZ80wAmoNOkNzr5dopFMdaB3aPEKta4WG+XNq4/UAZmD3c f76QRr9oENHX3gqJRaoBKccZIiwLLmjWwnRhuw/lWZ2tzy/bUBl/9/LKEOhOL7Ac wxQwIu/a4LQJdn44WNlFIxEGFZZpuHUGg1sDDTyiK8KFmoEaDm0NQYHUFR5Hns1q bK6w55DEslHpoOiPwzXlhmACTk9XMb0wirCaZn/hEyXRwWOvHNd7C9IruWfcwucp M54eFCtufno5AJEe+6GCmi79ZI6RacjELWDvMYbTn/Tdf5u+HXmgCQ/8E58KMzR7 JRo8j45VufiogQmGtouz5yEC727brvMhfRU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:05 2025 by rpki-client