$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa File: 91c113ca-efd5-351d-aee5-8cfa7262f18e.roa (raw, json) Hash identifier: LoKbUlXoyqTnB15kge7nzZtXG/HOv+3XRNqw3hLT2Og= Subject key identifier: 57:85:39:5B:2B:30:E7:41:03:8A:F6:D6:E0:05:36:85:BD:26:65:5F Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584B715CA13622A697EE0CF0EB68 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 62588 IP address blocks: 2607:f790:fff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a1:36:22:a6:97:ee:0c:f0:eb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7eb5488c-0bc0-459a-b631-a9c576da0cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:57:d4:b1:18:fa:33:46:fb:97:33:8a:42: 7b:37:cf:9f:23:05:59:59:b1:a7:fa:8c:35:39:0a: ec:a9:49:2c:25:ed:62:89:ad:36:1f:5f:47:c5:bf: 1d:fd:d0:d4:35:73:68:44:0d:56:27:42:69:b4:81: 1a:90:ac:6a:83:b8:51:c4:01:ba:de:f5:46:c2:7c: e6:d9:ea:64:c6:d8:5f:e8:56:b3:68:2f:c2:51:3b: 46:6e:3e:9b:02:e1:b3:cb:04:a9:8a:50:ad:f6:c0: a5:67:ca:9d:c6:1b:01:08:e8:a0:ce:4e:d2:f6:31: b6:db:54:52:44:1d:b4:73:28:dc:08:da:1f:c7:3e: 03:55:5c:ff:9f:f8:b5:f2:9b:49:ba:82:11:1c:df: e2:27:67:48:51:89:67:53:ba:96:aa:46:8f:bd:25: e1:6f:71:81:92:c7:e1:39:01:14:4a:3e:24:9a:e9: 7c:1b:5d:86:b1:80:cb:c4:b5:43:8d:2f:04:82:f4: 40:de:92:fc:a3:ea:22:2d:d0:8e:4f:31:3e:ef:6f: 0c:7c:d8:77:64:f0:4d:1a:79:97:c4:23:66:6e:80: c3:ee:e4:ad:8a:df:33:a1:f0:05:b7:71:81:1c:4d: 24:84:70:81:a7:4a:d8:a9:e2:86:75:d1:b0:94:87: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:85:39:5B:2B:30:E7:41:03:8A:F6:D6:E0:05:36:85:BD:26:65:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91c113ca-efd5-351d-aee5-8cfa7262f18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv6: 2607:f790:fff0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:17:7f:d2:63:40:8a:c2:47:fc:2d:da:04:e2:74:2f:01:b3: 6a:59:f2:b9:3c:75:8e:ad:5a:86:73:ce:1c:7e:a5:87:17:8b: be:4d:be:98:d5:ff:24:d6:35:cd:73:3e:98:1e:04:c2:1c:62: 93:83:f1:39:db:0f:1e:ad:a5:fc:e2:95:60:83:44:55:38:03: 95:d0:c8:ed:c5:e1:be:49:84:d3:f2:80:16:cd:4a:01:f8:6c: ef:e6:50:21:d9:35:b5:88:83:8a:c7:eb:96:71:e9:ef:75:2f: cb:f7:df:35:bd:1b:2c:4f:e8:46:bf:a9:40:97:17:02:77:9b: 4a:62:c3:15:39:cd:65:d6:1c:62:59:fc:e9:5b:60:eb:35:5f: 89:e0:f3:f6:79:7b:0b:b6:02:99:af:f1:c6:f2:5a:54:35:da: 48:9f:af:bf:8a:6a:af:b0:f2:80:35:0b:e2:bc:3a:a1:6b:38: 98:e4:3f:de:72:af:d7:85:79:ad:ba:fe:23:e6:41:1e:a7:28: b6:a0:b1:e5:cc:c4:bc:2b:07:87:c9:5e:51:5c:ec:0b:ff:16: 5e:07:bf:dc:90:11:7f:17:26:25:3f:8c:9c:0a:e2:a9:16:29: 1b:51:d7:3a:4a:01:00:9c:d6:07:68:5e:0d:a3:5a:d2:3b:eb: b0:ae:9f:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXKE2IqaX7gzw62gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2ViNTQ4OGMtMGJjMC00NTlhLWI2MzEtYTljNTc2ZGEwY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox9X1LEY+jNG+5czikJ7N8+fIwVZWbGn+ow1 OQrsqUksJe1iia02H19Hxb8d/dDUNXNoRA1WJ0JptIEakKxqg7hRxAG63vVGwnzm 2epkxthf6FazaC/CUTtGbj6bAuGzywSpilCt9sClZ8qdxhsBCOigzk7S9jG221RS RB20cyjcCNofxz4DVVz/n/i18ptJuoIRHN/iJ2dIUYlnU7qWqkaPvSXhb3GBksfh OQEUSj4kmul8G12GsYDLxLVDjS8EgvRA3pL8o+oiLdCOTzE+728MfNh3ZPBNGnmX xCNmboDD7uStit8zofAFt3GBHE0khHCBp0rYqeKGddGwlIdTawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFeFOVsrMOdBA4r21uAFNoW9JmVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOTFjMTEzY2EtZWZkNS0z NTFkLWFlZTUtOGNmYTcyNjJmMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3kP/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYXf9JjQIrCR/wt2gTidC8Bs2pZ8rk8dY6tWoZzzhx+pYcXi75N vpjV/yTWNc1zPpgeBMIcYpOD8TnbDx6tpfzilWCDRFU4A5XQyO3F4b5JhNPygBbN SgH4bO/mUCHZNbWIg4rH65Zx6e91L8v33zW9GyxP6Ea/qUCXFwJ3m0piwxU5zWXW HGJZ/OlbYOs1X4ng8/Z5ewu2Apmv8cbyWlQ12kifr7+Kaq+w8oA1C+K8OqFrOJjk P95yr9eFea26/iPmQR6nKLagseXMxLwrB4fJXlFc7Av/Fl4Hv9yQEX8XJiU/jJwK 4qkWKRtR1zpKAQCc1gdoXg2jWtI767Cun1I= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:09 2025 by rpki-client