$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa File: aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa (raw, json) Hash identifier: RRzFeuAhNAbzsYk1Gehmd0Jyw7WmI6mMjIjbnhGDxCk= Subject key identifier: AD:B9:F8:7C:9F:90:63:80:C2:9D:CD:A8:B9:BD:ED:97:BB:ED:02:BB Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D07ACF16EF38D2060D8B298C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 209181 IP address blocks: 2607:740:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f1:6e:f3:8d:20:60:d8:b2:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=e9ed7cf9-bcac-4fe6-9140-b7d1a0f7921c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:30:2e:99:d7:42:67:ef:a6:e7:ad:87:fd: 20:33:ef:4c:14:b0:4f:72:7e:da:90:2d:9f:a7:41: b9:82:be:f9:45:4a:d8:6d:89:1d:fa:34:0c:2f:10: a0:53:7b:ef:b5:9b:45:7c:66:6a:16:46:2b:81:df: 7a:47:d0:7a:57:fd:2e:28:30:7b:96:12:4a:f0:72: 70:2b:38:15:23:dd:83:cf:7e:c3:24:99:e1:9c:bc: 77:c7:d0:a6:bd:95:d1:60:d5:0b:b6:e5:c8:ec:c5: 7b:7f:b4:02:e5:15:12:ed:1c:6c:bd:47:39:b9:4a: 9d:55:ad:d0:89:68:f2:d7:68:73:2a:03:13:96:5d: be:f2:ad:74:08:87:05:dd:f0:69:8a:c4:a2:41:5d: 28:cb:99:08:c4:37:93:dc:ef:ff:76:b3:3e:17:36: 4d:39:0e:ac:87:96:c0:e0:c8:e2:9e:8c:d2:3a:03: 7a:e9:39:c5:48:1a:a8:47:5f:23:fa:46:ef:51:7f: 13:cf:b4:ef:9f:13:bc:6a:49:0c:25:df:61:f9:17: 23:da:c1:85:b5:d2:e4:d1:a2:cd:a6:3a:8d:b4:fd: 99:49:55:25:18:02:4a:03:6c:f5:6a:2a:4a:73:9a: 08:57:c7:5c:cd:db:78:6a:c8:9f:f5:66:0e:62:5d: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B9:F8:7C:9F:90:63:80:C2:9D:CD:A8:B9:BD:ED:97:BB:ED:02:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3e:d3:8a:9a:84:de:40:9f:14:39:a8:f4:52:81:77:f2:b6: 2b:32:69:57:c9:3d:da:47:4a:bf:44:80:97:6a:c5:51:70:36: 63:27:ec:9e:23:0e:53:2e:77:c6:5f:aa:4f:e3:0f:40:54:41: f7:26:75:d0:6a:32:a9:f2:54:23:4d:4f:6c:0f:c1:85:97:a0: 70:a0:88:d2:eb:ae:cc:04:b2:5d:3b:04:1d:ac:b1:72:30:a9: 45:38:b1:6b:82:fe:25:66:50:c3:8b:cd:32:76:d4:e0:f5:0c: 69:90:e7:33:37:76:75:a7:c2:e5:d9:86:7f:7a:d8:5e:07:78: 26:66:18:00:52:76:99:99:4d:af:6c:54:5e:14:7a:fa:c6:48: a9:b5:a1:3b:e1:9f:84:dd:a1:37:8f:57:5d:38:ab:68:35:71: fa:01:25:e8:7d:75:50:24:5e:a2:2b:7e:c0:b9:7d:04:e8:cd: 76:d3:d9:01:76:59:f2:dc:57:a3:3a:75:41:18:b9:6b:11:cb: 15:98:1f:70:02:99:14:41:20:8b:f2:8e:54:41:f9:8f:2b:11: 48:1a:30:6f:12:6e:a9:dc:96:e7:5e:ef:08:ff:da:db:df:cd: c2:4b:b6:40:d4:c2:92:65:f2:1f:42:66:ab:89:ca:c3:1c:9f: 8d:d7:52:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrPFu840gYNiymMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZTllZDdjZjktYmNhYy00ZmU2LTkxNDAtYjdkMWEwZjc5MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgAwLpnXQmfvpueth/0gM+9MFLBPcn7akC2f p0G5gr75RUrYbYkd+jQMLxCgU3vvtZtFfGZqFkYrgd96R9B6V/0uKDB7lhJK8HJw KzgVI92Dz37DJJnhnLx3x9CmvZXRYNULtuXI7MV7f7QC5RUS7RxsvUc5uUqdVa3Q iWjy12hzKgMTll2+8q10CIcF3fBpisSiQV0oy5kIxDeT3O//drM+FzZNOQ6sh5bA 4MjinozSOgN66TnFSBqoR18j+kbvUX8Tz7TvnxO8akkMJd9h+Rcj2sGFtdLk0aLN pjqNtP2ZSVUlGAJKA2z1aipKc5oIV8dczdt4asif9WYOYl2PCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK25+HyfkGOAwp3NqLm97Ze77QK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYWVmYjVmOTctNWNlMC0z YmI0LWI4MTAtN2JkOGFhNDE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHc+04qahN5AnxQ5qPRSgXfytisyaVfJPdpHSr9EgJdqxVFwNmMn 7J4jDlMud8Zfqk/jD0BUQfcmddBqMqnyVCNNT2wPwYWXoHCgiNLrrswEsl07BB2s sXIwqUU4sWuC/iVmUMOLzTJ21OD1DGmQ5zM3dnWnwuXZhn962F4HeCZmGABSdpmZ Ta9sVF4UevrGSKm1oTvhn4TdoTePV104q2g1cfoBJeh9dVAkXqIrfsC5fQTozXbT 2QF2WfLcV6M6dUEYuWsRyxWYH3ACmRRBIIvyjlRB+Y8rEUgaMG8Sbqnclude7wj/ 2tvfzcJLtkDUwpJl8h9CZquJysMcn43XUo4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:31:27 2026 by rpki-client