$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json) Hash identifier: jhBm6yq0I3NRGKxd2zaE3GNHRS1RKklm139ogkf/+4A= Subject key identifier: 37:F7:D1:DF:6C:31:F2:B7:7F:3B:A9:F3:19:43:9D:6F:17:97:6B:C2 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584CF15779C3CD5FDDB686827A00 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 400745 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:79:c3:cd:5f:dd:b6:86:82:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=56f9dc11-2a5a-4e0b-b833-e27a32c853be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:2b:cc:af:44:98:24:01:73:77:e9:23:d1: be:0c:c7:29:92:06:25:1c:ac:3f:5a:34:d1:0a:a7: df:57:3e:9d:9f:41:b7:89:55:85:c0:b6:e6:f3:77: 86:56:f1:e8:c9:b8:04:bf:53:61:5f:70:e5:b4:0e: 90:c6:de:84:21:df:08:03:fa:fe:70:59:d7:9a:17: 32:d4:4c:7a:6d:70:ba:dc:3e:54:3b:48:fc:4a:05: e5:14:a3:36:d4:d9:53:5b:c9:62:ba:34:e3:71:c9: ec:36:0c:d9:32:2e:34:0c:09:08:bb:92:64:e2:67: d4:31:fe:6b:ee:f6:03:bb:1a:79:a0:14:55:43:68: 0b:8e:07:45:73:66:6f:17:ce:50:18:c3:4d:ae:04: b4:13:b3:48:26:d4:08:88:d9:96:bb:cc:d1:2c:c7: fb:9a:36:1f:c6:4e:90:16:51:1b:81:f9:7b:7b:d8: f0:01:13:28:c8:d0:d4:cf:ae:ec:41:04:80:61:68: 62:1c:cf:bb:cf:45:ad:65:5e:28:0d:02:58:74:d8: d4:52:8a:6f:88:05:c2:0f:86:80:07:db:8a:45:d8: 73:d8:ea:85:10:3a:c1:4e:4a:01:49:38:33:b2:35: 41:38:8e:51:9b:8e:af:a7:c3:6e:e5:3d:14:38:6c: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:D1:DF:6C:31:F2:B7:7F:3B:A9:F3:19:43:9D:6F:17:97:6B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4f:6a:f2:7a:85:39:db:cc:3d:c3:cf:92:b0:cb:59:55:49: 34:d8:c3:66:23:1d:6f:33:88:f2:64:e2:b5:97:d3:05:8f:a4: 58:41:d1:30:75:bd:1d:86:17:a5:c0:54:31:88:a5:36:8c:dc: 98:28:3d:47:80:7f:af:02:d2:61:ec:f3:9b:85:5a:6d:fe:51: e6:07:12:77:2d:f1:73:79:31:52:ec:e8:ca:f4:43:e8:dd:77: ed:bc:9d:f7:d5:90:70:35:9c:a6:a2:07:5c:08:20:e7:d2:6b: 23:97:4d:74:d6:0e:50:1b:b1:c3:77:76:c0:98:d5:4e:23:8e: ac:05:83:89:94:5c:47:a5:fc:0d:f4:7b:88:97:9f:83:79:05: 33:8a:e1:4e:1d:8e:07:30:d6:a0:af:ca:ea:2f:df:3c:10:d7: 9c:b8:a0:66:51:1b:c0:dc:0b:c0:2c:a7:20:ee:dc:66:ee:67: ac:80:be:e1:83:07:75:db:5c:b4:c3:c0:e6:91:dd:e0:57:a2: 3b:77:49:0e:81:e2:5b:91:78:04:de:2e:c8:ba:7f:cf:b7:66: 1f:39:77:a9:a3:79:5c:ec:37:d4:06:be:c7:9f:4c:1d:b0:c3: b8:80:cc:de:c0:ac:c2:5d:8a:5a:49:8b:1c:1b:42:da:e5:0d: 76:cd:25:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzxV3nDzV/dtoaCegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk NTZmOWRjMTEtMmE1YS00ZTBiLWI4MzMtZTI3YTMyYzg1M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7orzK9EmCQBc3fpI9G+DMcpkgYlHKw/WjTR CqffVz6dn0G3iVWFwLbm83eGVvHoybgEv1NhX3DltA6Qxt6EId8IA/r+cFnXmhcy 1Ex6bXC63D5UO0j8SgXlFKM21NlTW8liujTjccnsNgzZMi40DAkIu5Jk4mfUMf5r 7vYDuxp5oBRVQ2gLjgdFc2ZvF85QGMNNrgS0E7NIJtQIiNmWu8zRLMf7mjYfxk6Q FlEbgfl7e9jwARMoyNDUz67sQQSAYWhiHM+7z0WtZV4oDQJYdNjUUopviAXCD4aA B9uKRdhz2OqFEDrBTkoBSTgzsjVBOI5Rm46vp8Nu5T0UOGz4iQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDf30d9sMfK3fzup8xlDnW8Xl2vCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZGZiZTM0YTAtNzZlMi0z NDgwLWFjZTktMGVkYWEzODc4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYT2ryeoU528w9w8+SsMtZVUk02MNmIx1vM4jyZOK1l9MFj6RYQdEw db0dhhelwFQxiKU2jNyYKD1HgH+vAtJh7PObhVpt/lHmBxJ3LfFzeTFS7OjK9EPo 3XftvJ331ZBwNZymogdcCCDn0msjl0101g5QG7HDd3bAmNVOI46sBYOJlFxHpfwN 9HuIl5+DeQUziuFOHY4HMNagr8rqL988ENecuKBmURvA3AvALKcg7txm7mesgL7h gwd121y0w8Dmkd3gV6I7d0kOgeJbkXgE3i7Iun/Pt2YfOXepo3lc7DfUBr7Hn0wd sMO4gMzewKzCXYpaSYscG0La5Q12zSX2 -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:21 2026 by rpki-client