$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e74cfd23-58e9-3521-a503-369945af16ef.roa File: e74cfd23-58e9-3521-a503-369945af16ef.roa (raw, json) Hash identifier: FESM++SCEbOXn5ik3dMpD2dajfrca6q+/Ff0UBMtLKw= Subject key identifier: 3A:B4:E5:46:85:CE:B8:3B:5C:EE:3A:96:7F:3F:AF:B3:B8:5D:98:A8 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B477C720F887EBFE0B6BC7340 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e74cfd23-58e9-3521-a503-369945af16ef.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 209181 IP address blocks: 2607:740:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:72:0f:88:7e:bf:e0:b6:bc:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=54dea377-731c-4d06-8c9c-1a23d482d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:29:ec:1d:f2:e5:33:e9:01:5e:03:54:a9: 2b:b2:a6:1a:cd:d7:9e:21:00:af:be:44:c1:8e:33: 16:9e:f3:a9:b0:1a:71:a1:10:96:8d:17:d0:38:2f: 5a:6e:72:17:94:40:21:14:03:93:b3:57:ab:b2:f2: 46:18:69:7f:57:0a:c7:65:b2:04:d6:a4:5b:fa:4c: a2:e0:fa:6c:15:75:19:eb:d4:87:03:39:9f:8b:9d: 78:17:31:6a:4c:bb:8a:d0:30:7e:5e:ff:a0:07:4d: 6e:3d:3d:99:87:60:ef:4d:16:10:13:0d:42:89:78: 85:9e:e8:cc:9d:63:31:d0:30:23:7d:6a:58:ce:ca: 03:05:d2:77:85:6d:20:d9:0c:3f:c3:0e:0f:88:98: 8f:34:cc:87:63:fa:b7:77:8b:1c:4c:c9:4d:78:d5: 2b:b1:06:2f:fe:9d:ae:7b:45:6e:79:a1:66:3d:08: 85:1a:da:09:08:cd:2a:df:59:00:a1:72:86:dd:b8: a2:1d:e7:ef:e0:fa:d8:da:b1:ac:22:34:f2:44:44: c4:19:48:c0:22:c3:fd:cf:c2:5c:95:4e:a3:5a:e1: 5e:d8:c3:a4:62:f0:db:1b:d0:da:8f:c9:f2:69:b5: 96:ac:87:db:ee:f2:ad:63:26:6f:b9:ff:2f:fc:fb: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B4:E5:46:85:CE:B8:3B:5C:EE:3A:96:7F:3F:AF:B3:B8:5D:98:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e74cfd23-58e9-3521-a503-369945af16ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:50:43:38:64:f3:a8:57:30:54:f2:c4:2a:59:36:4c:61:20: ed:9f:90:ce:b3:2d:44:ff:29:49:95:c9:cf:a8:d9:61:39:f9: 9e:4d:09:8a:d0:92:3b:88:71:01:53:16:a8:ef:10:76:bb:59: 63:75:dd:cf:f2:f6:40:d3:13:3a:96:ad:ea:16:ed:97:15:ae: 72:38:d0:3f:75:51:65:ec:5c:71:f1:0c:c5:a6:1b:f4:df:a6: 8f:86:f8:f6:b2:64:54:8f:33:9e:74:ed:5e:23:df:c3:61:7b: 5f:5a:cd:b2:26:07:25:fa:4d:6f:35:5d:38:f5:0f:47:28:71: 76:0a:fc:eb:77:36:19:2f:49:c5:72:c9:54:e8:fa:d5:8f:77: 20:3b:a5:84:35:6c:18:5e:0f:dc:22:52:15:25:ec:69:2e:5e: 56:06:b2:cd:ec:da:e4:13:4b:24:9d:70:49:e2:cd:7b:98:00: 3d:7c:b0:4c:40:be:a1:1c:a2:50:8c:27:58:d5:29:f2:8c:52: 49:53:07:a0:bf:63:ac:4a:e2:8f:78:7d:16:57:86:91:a5:53: 03:31:89:08:53:25:52:17:38:f1:6b:11:33:e8:80:1a:2e:0d: e2:36:6f:8f:35:96:1e:51:67:5f:a4:fa:92:ef:89:b2:8a:87: 76:f7:81:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfHIPiH6/4La8c0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NTRkZWEzNzctNzMxYy00ZDA2LThjOWMtMWEyM2Q0ODJkMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkcp7B3y5TPpAV4DVKkrsqYazdeeIQCvvkTB jjMWnvOpsBpxoRCWjRfQOC9abnIXlEAhFAOTs1ersvJGGGl/VwrHZbIE1qRb+kyi 4PpsFXUZ69SHAzmfi514FzFqTLuK0DB+Xv+gB01uPT2Zh2DvTRYQEw1CiXiFnujM nWMx0DAjfWpYzsoDBdJ3hW0g2Qw/ww4PiJiPNMyHY/q3d4scTMlNeNUrsQYv/p2u e0VueaFmPQiFGtoJCM0q31kAoXKG3biiHefv4PrY2rGsIjTyRETEGUjAIsP9z8Jc lU6jWuFe2MOkYvDbG9Daj8nyabWWrIfb7vKtYyZvuf8v/PthxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDq05UaFzrg7XO46ln8/r7O4XZioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTc0Y2ZkMjMtNThlOS0z NTIxLWE1MDMtMzY5OTQ1YWYxNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFQQzhk86hXMFTyxCpZNkxhIO2fkM6zLUT/KUmVyc+o2WE5+Z5N CYrQkjuIcQFTFqjvEHa7WWN13c/y9kDTEzqWreoW7ZcVrnI40D91UWXsXHHxDMWm G/Tfpo+G+PayZFSPM5507V4j38Nhe19azbImByX6TW81XTj1D0cocXYK/Ot3Nhkv ScVyyVTo+tWPdyA7pYQ1bBheD9wiUhUl7GkuXlYGss3s2uQTSySdcEnizXuYAD18 sExAvqEcolCMJ1jVKfKMUklTB6C/Y6xK4o94fRZXhpGlUwMxiQhTJVIXOPFrETPo gBouDeI2b481lh5RZ1+k+pLvibKKh3b3gQk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:36 2025 by rpki-client