$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/85350aac-98b7-3c98-a1e0-01f301b8aef2.roa File: 85350aac-98b7-3c98-a1e0-01f301b8aef2.roa (raw, json) Hash identifier: LXL34R7Z+HQxY0AcXVzoRPDBccyP5vXc2MpsAaioOSY= Subject key identifier: D5:37:5B:E0:38:95:56:96:5A:54:69:4A:12:EB:78:7F:29:73:54:1F Certificate issuer: /CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Certificate serial: 010D0C9F4328584E6F3A2DACDB7700121406A680 Authority key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/85350aac-98b7-3c98-a1e0-01f301b8aef2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 213734 IP address blocks: 2604:1560::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2d:ac:db:77:00:12:14:06:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=0db5e610-21ab-4af1-a1b0-5a10ca2a76f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:7a:a7:82:f5:03:be:df:e4:2e:25:6c:b6: 4f:a6:f4:34:c1:3e:12:6b:49:a2:70:02:56:a3:a3: b8:1f:31:f1:d8:93:4f:0f:d5:45:fe:d5:70:b2:de: f7:9f:7b:b2:cc:27:87:64:ab:1e:58:79:bc:b5:d0: a5:35:7f:4f:88:80:0d:da:36:69:7b:04:8e:ed:52: d7:cb:05:84:1e:2e:b6:99:a7:2b:c4:5a:d3:c9:9e: ce:9c:53:e6:c7:82:58:9e:9d:58:e3:32:d6:e5:95: 43:66:89:c3:6a:cc:18:d5:52:54:28:5b:55:c9:6a: fb:a3:60:17:32:b6:6e:c4:e0:7e:65:bd:24:95:1c: e3:79:20:3a:22:a4:40:40:f8:65:46:83:2a:c4:85: e4:d1:e8:ed:cd:16:4b:e6:02:64:aa:07:4f:d9:df: c4:39:8a:8a:45:bc:b1:6c:4d:bd:0a:f5:63:21:66: 77:69:48:eb:22:ec:87:25:05:e2:dd:cf:1b:a0:ef: 4d:8b:bc:15:38:77:35:06:5f:9e:d5:3f:91:b1:cc: 33:c9:66:4c:22:cd:5b:0b:89:b4:96:6e:ea:fc:e2: e5:36:af:70:eb:b0:3f:62:1c:f5:28:9a:0d:bf:fa: b6:56:79:3c:d4:b0:7b:69:9c:98:4d:3e:fb:e7:c3: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:37:5B:E0:38:95:56:96:5A:54:69:4A:12:EB:78:7F:29:73:54:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/85350aac-98b7-3c98-a1e0-01f301b8aef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl X509v3 Authority Key Identifier: keyid:95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer sbgp-ipAddrBlock: critical IPv6: 2604:1560::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bc:fc:b3:07:3b:d7:eb:36:e3:da:a3:2e:c3:67:a4:66:6a: 61:3a:5e:34:d6:08:32:90:e7:bf:0d:5f:4d:12:34:d6:0e:99: 60:38:f1:86:6e:1d:6c:e4:d4:00:aa:df:92:1d:85:c6:ee:f6: bf:d4:c5:41:97:5c:16:43:2c:0c:bb:1f:81:9d:e7:99:f2:d8: d0:2c:14:e9:94:70:80:47:9b:e0:71:58:98:db:a7:4d:27:40: 75:c7:df:a0:e2:ea:6f:45:7f:7c:dd:35:f9:ce:d0:40:51:05: 5b:3b:0d:ac:03:c7:29:9b:bf:3e:6a:f5:01:6e:86:b9:d9:6b: 30:16:46:3f:78:41:4c:0a:e7:3c:39:49:9f:9c:0a:66:5c:21: 0f:16:a5:d8:07:aa:25:49:6a:96:35:c2:95:cc:db:61:cc:02: 69:4d:5d:ae:3a:cb:e8:a4:55:04:e5:84:30:15:99:f9:0f:ee: 45:2a:18:13:ed:d6:e2:4d:ab:e3:54:59:a4:93:41:f7:1b:ab: 7f:5c:77:0a:c4:52:f6:df:db:5b:8b:35:65:c2:69:94:13:89: 91:da:1d:00:e2:a0:fe:04:4b:9f:22:48:ef:f5:bb:37:9c:49: 60:29:0c:c6:43:c4:b0:27:18:e8:26:3d:5c:06:6b:e9:25:60: 44:67:f8:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5vOi2s23cAEhQGpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE2MjViOGUtOGQxMy00OTZmLWI1NDItZDE3MGZmZDVm M2ZhMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MGRiNWU2MTAtMjFhYi00YWYxLWExYjAtNWExMGNhMmE3NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGN6p4L1A77f5C4lbLZPpvQ0wT4Sa0micAJW o6O4HzHx2JNPD9VF/tVwst73n3uyzCeHZKseWHm8tdClNX9PiIAN2jZpewSO7VLX ywWEHi62macrxFrTyZ7OnFPmx4JYnp1Y4zLW5ZVDZonDaswY1VJUKFtVyWr7o2AX MrZuxOB+Zb0klRzjeSA6IqRAQPhlRoMqxIXk0ejtzRZL5gJkqgdP2d/EOYqKRbyx bE29CvVjIWZ3aUjrIuyHJQXi3c8boO9Ni7wVOHc1Bl+e1T+RscwzyWZMIs1bC4m0 lm7q/OLlNq9w67A/Yhz1KJoNv/q2Vnk81LB7aZyYTT7758NquwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNU3W+A4lVaWWlRpShLreH8pc1QfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85MTYy NWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZkNWYzZmEvODUzNTBhYWMtOThiNy0z Yzk4LWExZTAtMDFmMzAxYjhhZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTE2MjViOGUtOGQxMy00OTZmLWI1 NDItZDE3MGZmZDVmM2ZhLzkxNjI1YjhlLThkMTMtNDk2Zi1iNTQyLWQxNzBmZmQ1 ZjNmYS5jcmwwHwYDVR0jBBgwFoAUlftd5++0wrgRxp0DizBFvN4JEKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcw ZmZkNWYzZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQVYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5vPyzBzvX6zbj2qMuw2ekZmphOl401ggykOe/DV9NEjTWDplgOPGG bh1s5NQAqt+SHYXG7va/1MVBl1wWQywMux+BneeZ8tjQLBTplHCAR5vgcViY26dN J0B1x9+g4upvRX983TX5ztBAUQVbOw2sA8cpm78+avUBboa52WswFkY/eEFMCuc8 OUmfnApmXCEPFqXYB6olSWqWNcKVzNthzAJpTV2uOsvopFUE5YQwFZn5D+5FKhgT 7dbiTavjVFmkk0H3G6t/XHcKxFL239tbizVlwmmUE4mR2h0A4qD+BEufIkjv9bs3 nElgKQzGQ8SwJxjoJj1cBmvpJWBEZ/gJ -----END CERTIFICATE-----Generated at Fri Jul 24 14:00:04 2026 by rpki-client