$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa File: b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa (raw, json) Hash identifier: D5PL9EFcT7OIL/Sxg3Fc9LvyoPr/PQKI2FBFXyzGpUw= Subject key identifier: 52:50:F5:04:52:6A:C2:54:02:DC:26:AE:BF:E6:F1:EC:6E:AB:AD:90 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584BA39D19E8175E4D44E416C6E0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 2607:740:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:19:e8:17:5e:4d:44:e4:16:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8e04821e-1e4d-4807-8492-fe4d4571e5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:a2:0a:b0:e6:91:44:ac:b8:78:4e:50:1a: 18:d0:ca:00:ac:ea:30:f6:66:1f:d1:67:77:88:61: d1:dd:0f:52:c8:fe:ed:65:1a:56:15:21:42:3d:f2: 7c:0d:1d:08:6a:7b:f4:5e:ff:1a:f1:a6:82:48:66: 4c:53:3f:ea:3a:86:4e:92:fc:7e:f1:87:6e:78:8d: e5:46:34:33:a3:13:c2:a1:46:00:97:f3:62:c8:2b: 3c:1a:8e:58:b1:79:c5:46:75:a6:08:b2:73:4e:4f: 75:15:bc:83:9a:72:36:9e:22:35:1e:f7:62:bc:9e: a4:ee:c1:57:a7:ac:3e:65:cc:84:b1:ec:05:e1:cc: 17:ea:d0:c7:92:9e:5d:da:ec:4c:29:ee:23:fd:ef: 45:f0:f4:51:bf:1b:90:f8:a5:76:61:de:1f:f9:fc: d7:31:66:f9:5d:60:7f:ec:8a:11:06:bc:6a:11:fc: c9:c9:12:4e:21:e7:d0:44:4c:52:bf:71:c9:0d:e7: e6:18:b6:6f:7f:0c:ec:a1:c0:90:02:0a:d1:07:c8: ae:b3:3e:21:fd:32:83:a3:cb:78:98:19:c7:e1:c7: 09:d2:6e:f1:86:10:5b:cd:25:1d:12:62:83:78:2e: 04:e7:b3:71:5d:ab:f8:79:67:33:bd:69:69:e4:cf: 08:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:F5:04:52:6A:C2:54:02:DC:26:AE:BF:E6:F1:EC:6E:AB:AD:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b115bbc1-c061-3fca-9ca6-440a61fb4a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:6d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:22:e2:ac:41:ad:3e:d0:04:ab:01:dd:05:66:13:a9:fa:79: cd:3e:a5:0d:d9:d1:83:33:c4:44:d9:77:e1:46:06:a8:e7:66: c1:c7:a6:bc:95:a5:49:49:8e:2a:9a:af:ee:68:51:67:7b:3e: 05:17:0f:48:10:0a:16:73:3b:bb:07:02:b9:54:b4:f8:48:83: 3c:4a:59:27:da:1a:fd:0f:cb:30:14:a2:1d:d5:d0:b8:54:5b: 66:91:07:72:34:0a:a9:05:31:b7:56:b3:c7:70:c1:20:aa:29: 99:e8:0a:34:f6:3e:ed:3f:29:5e:5a:30:23:cf:11:fb:9d:0b: 1c:80:48:63:3d:9f:8f:bc:6f:7b:5f:2b:9c:a7:79:f2:37:f8: 4b:39:6f:72:1a:7a:f9:0e:a6:0b:b8:8a:d9:f4:e6:5e:c1:14: fa:2e:b3:9c:cd:8f:9d:99:b5:39:7d:e1:bd:f6:cf:0b:19:21: 78:fd:88:bc:6b:ad:ff:4b:c2:27:97:ba:e7:e7:42:3a:38:fb: f5:62:bc:11:cf:6e:03:d6:67:5a:7b:d2:b3:cf:8d:22:44:16: b1:b9:d3:14:8f:6c:4a:c1:a6:2f:2c:70:51:15:82:1a:59:a8: bb:f2:ab:c3:a4:b3:bb:9d:6e:a6:9c:3c:15:aa:85:7f:91:bd: a9:27:ab:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnRnoF15NROQWxuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGUwNDgyMWUtMWU0ZC00ODA3LTg0OTItZmU0ZDQ1NzFlNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8KiCrDmkUSsuHhOUBoY0MoArOow9mYf0Wd3 iGHR3Q9SyP7tZRpWFSFCPfJ8DR0Ianv0Xv8a8aaCSGZMUz/qOoZOkvx+8YdueI3l RjQzoxPCoUYAl/NiyCs8Go5YsXnFRnWmCLJzTk91FbyDmnI2niI1HvdivJ6k7sFX p6w+ZcyEsewF4cwX6tDHkp5d2uxMKe4j/e9F8PRRvxuQ+KV2Yd4f+fzXMWb5XWB/ 7IoRBrxqEfzJyRJOIefQRExSv3HJDefmGLZvfwzsocCQAgrRB8iusz4h/TKDo8t4 mBnH4ccJ0m7xhhBbzSUdEmKDeC4E57NxXav4eWczvWlp5M8IxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJQ9QRSasJUAtwmrr/m8exuq62QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjExNWJiYzEtYzA2MS0z ZmNhLTljYTYtNDQwYTYxZmI0YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoi4qxBrT7QBKsB3QVmE6n6ec0+pQ3Z0YMzxETZd+FGBqjnZsHH pryVpUlJjiqar+5oUWd7PgUXD0gQChZzO7sHArlUtPhIgzxKWSfaGv0PyzAUoh3V 0LhUW2aRB3I0CqkFMbdWs8dwwSCqKZnoCjT2Pu0/KV5aMCPPEfudCxyASGM9n4+8 b3tfK5ynefI3+Es5b3IaevkOpgu4itn05l7BFPous5zNj52ZtTl94b32zwsZIXj9 iLxrrf9LwieXuufnQjo4+/VivBHPbgPWZ1p70rPPjSJEFrG50xSPbErBpi8scFEV ghpZqLvyq8Oks7udbqacPBWqhX+Rvaknq4A= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:32 2025 by rpki-client