$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c5d33079-0f15-3bb1-80da-1175870ff41b.roa File: c5d33079-0f15-3bb1-80da-1175870ff41b.roa (raw, json) Hash identifier: AtVgiyiMVMSzASbF3hNKVwgvI2CgBdYrfVrPb2oIuY0= Subject key identifier: AD:F8:70:6B:5D:B8:F9:10:65:56:9E:B8:6E:CA:AF:A6:8A:68:30:9A Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC72148D0E1C38A1E0D5C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c5d33079-0f15-3bb1-80da-1175870ff41b.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 2607:da00:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:72:14:8d:0e:1c:38:a1:e0:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=bf1653d6-2232-477b-9bb1-3c8b6e02d98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:0a:cb:f8:fc:30:cc:7d:bf:a6:da:6a:5d: f5:1f:b9:c5:6f:f2:43:4a:da:4f:fc:e7:5d:2d:45: 57:14:7e:af:1d:37:a1:26:4a:20:e4:d7:da:b8:92: da:8d:e1:82:c1:9b:93:d0:36:fb:94:a5:9f:fc:2d: ee:ba:b8:61:a4:c8:b0:6b:91:28:28:52:0f:87:1e: 64:bb:ad:4e:a4:fc:49:71:04:6f:af:ef:96:02:fb: d4:81:b7:ec:c1:4a:8e:2c:35:e0:50:fd:80:ef:5d: 2f:4f:fd:59:85:f4:3f:ee:1e:2d:3f:99:0b:24:7e: b3:0d:c8:ff:a2:99:f3:7e:21:b2:f6:c8:80:d4:5a: d9:c2:76:d5:24:8c:28:87:63:5c:b0:9c:e9:b6:57: dd:f4:49:e6:88:3a:57:17:85:8e:8a:96:4d:a5:c8: 31:aa:d3:ca:1d:28:cb:bb:a1:70:c0:67:81:1b:7c: f4:08:b9:55:6e:c7:94:51:57:99:c9:6e:fd:10:52: 38:12:66:86:2c:00:2d:24:6a:8a:10:aa:9e:0c:1e: c1:36:69:51:72:64:35:57:e6:92:67:a8:9f:c0:43: a2:58:b5:be:0f:bb:08:e6:0c:e2:28:71:22:0d:9a: e6:3b:e2:f9:d4:91:4d:ae:58:cc:0d:79:94:e2:91: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F8:70:6B:5D:B8:F9:10:65:56:9E:B8:6E:CA:AF:A6:8A:68:30:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c5d33079-0f15-3bb1-80da-1175870ff41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv6: 2607:da00:700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5b:83:9c:52:cc:11:96:cb:7a:a3:6e:9d:14:cc:12:74:1e: e8:5c:9f:93:3f:76:83:b6:5f:d9:8f:c5:45:5d:a8:b9:a8:1d: 46:73:bc:7c:7d:25:71:3d:7f:22:95:84:9f:5a:5e:85:d1:bb: 12:e5:a0:36:84:5b:18:0b:a8:59:50:ca:77:57:6a:44:9e:24: 20:fa:02:4c:27:0a:07:72:c1:be:46:4c:c0:8d:0e:86:5d:64: ce:c8:a6:47:e4:ae:ee:ec:2b:40:12:c8:ea:92:73:14:0c:b4: 1d:3c:d5:9d:4a:68:72:f0:1b:df:3b:dc:23:c2:19:f8:a2:98: aa:c4:1b:e1:9b:00:b2:82:d6:07:e7:46:b7:cc:54:8d:ec:99: cb:ad:d4:41:6d:5c:c4:10:ec:58:8d:f7:03:2a:7b:6e:59:4a: ce:3f:a1:0b:b5:ac:1b:38:54:7d:f1:42:3b:76:38:e9:97:84: 4b:dc:0c:90:eb:62:05:af:4e:55:c3:fe:40:d9:c2:de:69:ad: bf:a8:98:58:85:9d:f5:fd:f9:05:3f:50:fa:0a:3d:b7:ea:cc: 2e:f6:a9:82:fc:c5:34:c9:d2:80:2d:59:25:98:ec:08:bc:e2: 49:93:8a:cc:24:b8:e5:e6:b4:d8:c6:ee:52:f9:a5:47:d6:58: 3e:96:85:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtP3HIUjQ4cOKHg1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmYxNjUzZDYtMjIzMi00NzdiLTliYjEtM2M4YjZlMDJkOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUKy/j8MMx9v6baal31H7nFb/JDStpP/Odd LUVXFH6vHTehJkog5NfauJLajeGCwZuT0Db7lKWf/C3uurhhpMiwa5EoKFIPhx5k u61OpPxJcQRvr++WAvvUgbfswUqOLDXgUP2A710vT/1ZhfQ/7h4tP5kLJH6zDcj/ opnzfiGy9siA1FrZwnbVJIwoh2NcsJzptlfd9EnmiDpXF4WOipZNpcgxqtPKHSjL u6FwwGeBG3z0CLlVbseUUVeZyW79EFI4EmaGLAAtJGqKEKqeDB7BNmlRcmQ1V+aS Z6ifwEOiWLW+D7sI5gziKHEiDZrmO+L51JFNrljMDXmU4pGLsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK34cGtduPkQZVaeuG7Kr6aKaDCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYzVkMzMwNzktMGYxNS0z YmIxLTgwZGEtMTE3NTg3MGZmNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfaAAcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAo1uDnFLMEZbLeqNunRTMEnQe6Fyfkz92g7Zf2Y/FRV2ouagdRnO8 fH0lcT1/IpWEn1pehdG7EuWgNoRbGAuoWVDKd1dqRJ4kIPoCTCcKB3LBvkZMwI0O hl1kzsimR+Su7uwrQBLI6pJzFAy0HTzVnUpocvAb3zvcI8IZ+KKYqsQb4ZsAsoLW B+dGt8xUjeyZy63UQW1cxBDsWI33Ayp7bllKzj+hC7WsGzhUffFCO3Y46ZeES9wM kOtiBa9OVcP+QNnC3mmtv6iYWIWd9f35BT9Q+go9t+rMLvapgvzFNMnSgC1ZJZjs CLziSZOKzCS45ea02MbuUvmlR9ZYPpaFAQ== -----END CERTIFICATE-----Generated at Thu Oct 9 11:11:33 2025 by rpki-client