$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa File: f2e5d719-b11f-3e63-ad51-8123166538ef.roa (raw, json) Hash identifier: eRSLVZaJWRRWEZx+71bEVsCY4ZJkgqs/QtI9hFeJjPk= Subject key identifier: 9E:40:2F:70:63:85:AF:0F:87:2E:E3:5C:4E:B6:8E:3A:D5:DC:A0:0C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B477C72368E23C886A898CE80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 209181 IP address blocks: 2607:740:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:72:36:8e:23:c8:86:a8:98:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=bead8c45-4253-467e-b0c7-40c1dc9e998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:cc:07:74:d7:76:13:65:ff:76:66:6f:7f: 31:6a:ef:60:8e:a7:ab:60:0f:7b:ab:ef:56:f0:d9: 6e:78:72:16:6a:c5:33:66:a0:d3:76:17:e1:c2:c8: 2a:79:94:e5:61:f4:dc:84:46:cf:8b:3f:f6:0e:ee: d3:45:55:08:7c:92:bd:64:6d:0c:85:b5:c0:e2:33: b8:d8:99:c8:79:8d:22:07:b8:ce:47:5a:72:94:2d: ff:d4:d1:44:05:62:2c:24:19:f3:98:5b:6c:12:2d: 1f:6d:5b:63:ef:cc:dc:7a:7e:2d:00:94:9d:18:96: b8:bd:85:78:cf:26:ef:a0:f0:13:88:5b:d9:98:90: 17:6b:25:aa:49:60:d4:85:98:74:e5:6c:f8:04:50: 38:e7:04:31:71:ad:d6:ba:62:c6:bb:d3:09:5c:1d: 50:85:83:cd:9a:cb:55:33:6f:66:97:8d:6e:c0:c8: ab:ca:15:32:f3:ca:46:77:43:22:13:12:a7:87:69: e6:66:47:f9:ae:75:f2:30:1d:2d:fb:74:d4:68:26: cc:7e:17:e4:e9:9a:61:df:29:e5:e2:38:fb:f9:62: 2a:e2:89:e9:a0:b1:da:57:dc:8d:59:50:46:d4:f6: 05:14:71:0b:3c:c2:f7:66:0d:fe:e0:71:37:93:ce: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:2F:70:63:85:AF:0F:87:2E:E3:5C:4E:B6:8E:3A:D5:DC:A0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2e5d719-b11f-3e63-ad51-8123166538ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7f:2e:99:d9:ab:37:65:97:00:33:11:ff:a2:52:3d:11:7c: 6d:9a:01:ab:e2:31:b8:ee:f4:82:ea:cc:4f:a6:ec:47:68:4b: cd:9a:51:b5:5d:62:d5:e7:0b:eb:b0:d6:b7:31:21:a0:95:a4: 68:c3:90:0f:cf:a6:0a:e2:4d:5c:5d:e7:c5:c0:02:12:47:3a: 6b:7e:a4:1b:c3:3d:82:16:8b:c9:a7:de:9a:1c:f5:a8:0d:43: 76:fa:d9:62:34:ca:cb:15:6a:65:a4:79:03:e8:a7:c7:0e:be: e8:18:16:19:1f:8e:de:25:6b:6c:96:74:0f:e7:f2:06:e5:06: 7a:f2:75:84:04:ba:01:d4:73:d6:1b:1d:eb:f3:8e:7e:77:02: 38:c5:fd:4c:06:96:2d:a5:65:a1:0e:91:9e:b4:9d:33:9d:80: 6a:7a:b6:6c:bc:11:f9:e9:75:aa:34:2c:79:10:64:2a:e9:aa: a5:cd:45:4f:a2:6d:1e:08:96:14:26:e5:7d:7e:d3:ec:e5:e6: 74:ab:c3:7c:ab:37:29:65:8b:4b:9c:76:80:7c:79:7c:f8:45: d8:40:63:3e:99:92:9c:0b:bb:9b:34:6d:bd:ad:ec:93:2c:90: a7:8a:34:b1:21:c0:9a:14:29:b9:bc:8a:26:90:e6:da:fd:61: fa:9b:c2:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfHI2jiPIhqiYzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YmVhZDhjNDUtNDI1My00NjdlLWIwYzctNDBjMWRjOWU5OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1DMB3TXdhNl/3Zmb38xau9gjqerYA97q+9W 8NlueHIWasUzZqDTdhfhwsgqeZTlYfTchEbPiz/2Du7TRVUIfJK9ZG0MhbXA4jO4 2JnIeY0iB7jOR1pylC3/1NFEBWIsJBnzmFtsEi0fbVtj78zcen4tAJSdGJa4vYV4 zybvoPATiFvZmJAXayWqSWDUhZh05Wz4BFA45wQxca3WumLGu9MJXB1QhYPNmstV M29ml41uwMiryhUy88pGd0MiExKnh2nmZkf5rnXyMB0t+3TUaCbMfhfk6Zph3ynl 4jj7+WIq4onpoLHaV9yNWVBG1PYFFHELPML3Zg3+4HE3k84sTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ5AL3Bjha8Phy7jXE62jjrV3KAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjJlNWQ3MTktYjExZi0z ZTYzLWFkNTEtODEyMzE2NjUzOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAl/LpnZqzdllwAzEf+iUj0RfG2aAaviMbju9ILqzE+m7EdoS82a UbVdYtXnC+uw1rcxIaCVpGjDkA/PpgriTVxd58XAAhJHOmt+pBvDPYIWi8mn3poc 9agNQ3b62WI0yssVamWkeQPop8cOvugYFhkfjt4la2yWdA/n8gblBnrydYQEugHU c9YbHevzjn53AjjF/UwGli2lZaEOkZ60nTOdgGp6tmy8Efnpdao0LHkQZCrpqqXN RU+ibR4IlhQm5X1+0+zl5nSrw3yrNylli0ucdoB8eXz4RdhAYz6ZkpwLu5s0bb2t 7JMskKeKNLEhwJoUKbm8iiaQ5tr9Yfqbwtw= -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:52 2025 by rpki-client