$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa File: e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa (raw, json) Hash identifier: 3BRWX5IiHZO1j6kWzqdn8z4l3yvFkuNbjH4U7tAwD8I= Subject key identifier: 49:E4:38:DE:10:31:FF:92:78:02:D1:ED:4D:05:9B:0E:04:D5:B6:0E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B48E1ABE94F0B3B563F5FDEA0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 2607:740:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ab:e9:4f:0b:3b:56:3f:5f:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0b07b5f6-e78b-4042-a004-f41e5e38ba0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:3c:50:5f:91:a7:5d:68:81:9b:1e:84:6d: e6:4d:1c:b6:66:f5:d2:2c:48:db:a5:01:49:d9:17: 48:b0:28:b3:cb:37:a3:82:78:f8:90:33:0f:42:89: 8d:12:a0:c3:b0:20:20:9f:35:d4:9c:50:a0:d9:4d: 22:09:d1:7c:20:c1:19:71:d2:d4:91:be:a4:a2:fb: 8c:2e:27:31:c4:ad:69:68:6c:6f:e4:2c:e1:dc:ed: 24:b9:30:2c:bd:9b:76:24:f5:a3:42:3c:6b:a9:66: 2b:37:9f:dd:5e:59:88:e9:8b:17:14:09:70:45:40: 87:4e:76:cd:78:20:cb:c0:f0:d5:32:fd:14:9f:2e: 3f:fc:b5:94:2c:05:25:51:f9:eb:16:9d:52:df:f3: 33:91:86:95:a9:3d:70:a2:e4:f9:36:92:37:1b:7e: a4:9e:6c:ed:13:33:20:c1:b3:cc:e3:95:15:eb:7d: f8:bc:c4:c5:ae:cf:f9:f9:92:89:4c:b1:be:04:d8: e9:14:a3:62:5b:5a:2a:d8:c4:b0:31:c4:0a:b3:28: 5e:75:6c:95:63:6b:dd:cb:bb:0e:d4:05:66:e8:ea: 76:93:ab:ac:67:03:64:8a:f4:a0:2e:c5:f9:b9:31: d0:40:61:ba:60:7f:bb:50:8d:ae:8d:6e:b6:c4:34: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:38:DE:10:31:FF:92:78:02:D1:ED:4D:05:9B:0E:04:D5:B6:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:41:20:d3:bc:e8:5a:e4:b8:00:c0:d0:ff:df:8a:3f:2f:a4: cc:47:f2:6f:33:19:12:06:de:22:99:91:68:15:6c:08:be:5d: c8:e1:da:09:9d:40:28:0f:87:90:c6:4d:e2:ac:36:c3:97:1f: bf:a2:2c:e0:c1:59:d4:de:44:59:23:8c:4d:17:c0:09:9c:42: ab:97:c2:1b:36:b1:47:78:bf:80:68:04:69:56:ec:13:70:ef: ca:93:64:23:81:00:5a:5d:89:5e:bd:cc:f9:2e:ae:e3:57:1d: a8:45:31:08:1a:f6:7a:03:16:07:5b:eb:20:f7:8e:ad:86:28: a2:21:30:90:ff:96:04:50:b4:d9:b8:b8:2d:88:25:70:36:72: c8:b2:ec:61:26:1c:ac:87:7f:66:a0:5c:98:28:6a:04:34:8e: 43:1d:c0:81:54:47:4c:37:23:56:b3:75:ee:d3:d9:27:e5:42: 91:9c:73:b6:26:34:89:14:7f:88:92:9f:c9:5a:ba:09:74:99: 3d:b2:b5:33:fe:6c:d4:ee:fe:15:2b:9c:7d:88:cc:26:ef:12: 89:47:f3:3b:96:a1:3b:75:0f:6b:a5:d1:21:8b:2b:a2:be:d7: 53:9d:0f:3d:f0:25:17:41:96:93:f4:92:e9:e6:db:2b:2d:86: dd:fd:c3:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4avpTws7Vj9f3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGIwN2I1ZjYtZTc4Yi00MDQyLWEwMDQtZjQxZTVlMzhiYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVs8UF+Rp11ogZsehG3mTRy2ZvXSLEjbpQFJ 2RdIsCizyzejgnj4kDMPQomNEqDDsCAgnzXUnFCg2U0iCdF8IMEZcdLUkb6kovuM LicxxK1paGxv5Czh3O0kuTAsvZt2JPWjQjxrqWYrN5/dXlmI6YsXFAlwRUCHTnbN eCDLwPDVMv0Uny4//LWULAUlUfnrFp1S3/MzkYaVqT1wouT5NpI3G36knmztEzMg wbPM45UV6334vMTFrs/5+ZKJTLG+BNjpFKNiW1oq2MSwMcQKsyhedWyVY2vdy7sO 1AVm6Op2k6usZwNkivSgLsX5uTHQQGG6YH+7UI2ujW62xDQhQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEnkON4QMf+SeALR7U0Fmw4E1bYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTJmNjU1NmQtN2NkNC0z OTVlLTlhNWQtOGM3YzlhZWU4YTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVBINO86FrkuADA0P/fij8vpMxH8m8zGRIG3iKZkWgVbAi+Xcjh 2gmdQCgPh5DGTeKsNsOXH7+iLODBWdTeRFkjjE0XwAmcQquXwhs2sUd4v4BoBGlW 7BNw78qTZCOBAFpdiV69zPkuruNXHahFMQga9noDFgdb6yD3jq2GKKIhMJD/lgRQ tNm4uC2IJXA2csiy7GEmHKyHf2agXJgoagQ0jkMdwIFUR0w3I1azde7T2SflQpGc c7YmNIkUf4iSn8laugl0mT2ytTP+bNTu/hUrnH2IzCbvEolH8zuWoTt1D2ul0SGL K6K+11OdDz3wJRdBlpP0kunm2ystht39w+M= -----END CERTIFICATE-----Generated at Wed Nov 5 07:48:56 2025 by rpki-client