$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/85350aac-98b7-3c98-a1e0-01f301b8aef2.roa File: 85350aac-98b7-3c98-a1e0-01f301b8aef2.roa (raw, json) Hash identifier: 9iasjKUJRYwJmS2P1nEpePFzPt+ZBEAvUp3D6lIf9DM= Subject key identifier: C9:EC:41:76:BF:C0:2F:56:D6:1A:4C:3C:D9:C7:CF:F4:5E:CE:E1:FD Certificate issuer: /CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Certificate serial: 010D0C9F4328584F119CFC9B6DED9F4A84702480 Authority key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/85350aac-98b7-3c98-a1e0-01f301b8aef2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 213734 IP address blocks: 2604:1560::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fc:9b:6d:ed:9f:4a:84:70:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=90fa82b8-2d89-404c-bfed-e66c30f8de3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:d5:eb:07:a8:49:ec:6e:de:af:a5:60:94: c9:ea:3d:16:34:f1:08:34:9e:85:7e:cf:79:08:97: 7f:3b:f6:2a:5d:ea:5b:9b:59:3f:a9:ab:69:cc:82: f5:63:75:38:32:89:2a:43:d0:e3:4a:81:7f:5e:38: a1:ae:9a:69:b5:53:c9:23:aa:24:04:4a:ac:cb:d6: 34:bb:35:2a:68:fe:c7:13:2c:e6:00:93:49:82:1b: 12:69:7c:d0:2c:80:5e:96:fd:8b:86:e6:aa:b8:cb: 6c:98:be:db:c2:01:4e:0f:3d:6d:41:a3:31:4d:fb: fe:12:28:37:7e:65:5b:e5:a9:8c:41:7e:97:a0:bb: 94:33:25:85:2b:30:72:be:e9:f3:5b:43:1e:f5:5f: 58:e3:cb:94:30:ee:c9:04:dc:99:dc:18:95:46:ab: 51:b1:74:ec:37:2d:20:f7:b7:1f:f3:ac:95:1d:8a: 5b:e4:9e:9a:67:b5:33:73:89:e5:14:8d:4b:4c:bc: df:81:08:31:d6:e8:ea:ed:c9:22:34:ff:48:ad:c6: 23:79:a7:4f:5b:6d:75:3b:56:c8:27:d7:33:17:5a: 4b:e4:d9:f6:95:33:8c:de:56:7c:d3:37:0c:6b:f7: 82:8a:5f:2d:6e:ce:99:34:50:ef:88:49:65:e2:05: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EC:41:76:BF:C0:2F:56:D6:1A:4C:3C:D9:C7:CF:F4:5E:CE:E1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/85350aac-98b7-3c98-a1e0-01f301b8aef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl X509v3 Authority Key Identifier: keyid:95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer sbgp-ipAddrBlock: critical IPv6: 2604:1560::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:81:87:ea:24:22:b4:19:43:16:4e:ca:68:c3:fe:df:7b:7a: 15:7f:f5:d8:fe:8c:bc:1b:02:59:43:84:ec:d8:26:3c:68:39: 97:70:87:de:ff:19:54:6d:51:57:ae:01:bf:cc:b1:e4:04:37: 6c:08:ee:70:5e:67:d7:71:22:de:72:0e:83:f0:56:cb:db:d6: 21:ce:c6:fb:d5:34:bd:19:e3:bf:05:42:17:2c:67:2f:62:f1: b9:5c:4a:01:65:a7:5d:e4:20:e2:02:05:bb:05:bc:dc:f7:19: c1:f2:7f:dc:24:d7:31:cb:34:a6:eb:2f:16:df:15:b4:f1:95: 02:8d:8e:49:c3:43:b6:39:51:6e:56:70:0f:b1:5d:0f:eb:f9: 0e:85:95:03:10:e5:08:98:64:74:e2:85:f0:fb:7b:a0:26:5c: e7:18:f7:32:37:03:af:ee:ec:2c:ad:13:ae:cc:a6:ab:4d:a3: 12:e0:4e:bd:00:37:ca:8a:dd:39:53:67:56:74:03:1f:8e:1c: 89:32:44:93:b3:fe:5c:e1:aa:34:40:5f:7b:93:49:b9:f4:2a: 7c:a8:bf:d7:df:8a:68:08:7b:b6:6f:89:ba:69:ba:c0:94:b6: 51:da:7e:57:54:12:55:fe:2d:d4:75:80:a6:c1:1d:d6:1a:fd: 4e:63:5e:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RnPybbe2fSoRwJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE2MjViOGUtOGQxMy00OTZmLWI1NDItZDE3MGZmZDVm M2ZhMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBmYTgyYjgtMmQ4OS00MDRjLWJmZWQtZTY2YzMwZjhkZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgDV6weoSexu3q+lYJTJ6j0WNPEINJ6Ffs95 CJd/O/YqXepbm1k/qatpzIL1Y3U4MokqQ9DjSoF/XjihrppptVPJI6okBEqsy9Y0 uzUqaP7HEyzmAJNJghsSaXzQLIBelv2LhuaquMtsmL7bwgFODz1tQaMxTfv+Eig3 fmVb5amMQX6XoLuUMyWFKzByvunzW0Me9V9Y48uUMO7JBNyZ3BiVRqtRsXTsNy0g 97cf86yVHYpb5J6aZ7Uzc4nlFI1LTLzfgQgx1ujq7ckiNP9IrcYjeadPW211O1bI J9czF1pL5Nn2lTOM3lZ80zcMa/eCil8tbs6ZNFDviEll4gXkvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMnsQXa/wC9W1hpMPNnHz/RezuH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85MTYy NWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZkNWYzZmEvODUzNTBhYWMtOThiNy0z Yzk4LWExZTAtMDFmMzAxYjhhZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTE2MjViOGUtOGQxMy00OTZmLWI1 NDItZDE3MGZmZDVmM2ZhLzkxNjI1YjhlLThkMTMtNDk2Zi1iNTQyLWQxNzBmZmQ1 ZjNmYS5jcmwwHwYDVR0jBBgwFoAUlftd5++0wrgRxp0DizBFvN4JEKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcw ZmZkNWYzZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQVYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYgYfqJCK0GUMWTspow/7fe3oVf/XY/oy8GwJZQ4Ts2CY8aDmXcIfe /xlUbVFXrgG/zLHkBDdsCO5wXmfXcSLecg6D8FbL29Yhzsb71TS9GeO/BUIXLGcv YvG5XEoBZadd5CDiAgW7Bbzc9xnB8n/cJNcxyzSm6y8W3xW08ZUCjY5Jw0O2OVFu VnAPsV0P6/kOhZUDEOUImGR04oXw+3ugJlznGPcyNwOv7uwsrROuzKarTaMS4E69 ADfKit05U2dWdAMfjhyJMkSTs/5c4ao0QF97k0m59Cp8qL/X34poCHu2b4m6abrA lLZR2n5XVBJV/i3UdYCmwR3WGv1OY17f -----END CERTIFICATE-----Generated at Tue Sep 15 06:49:40 2026 by rpki-client