$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json) Hash identifier: xn7XNfAb9MlAg1qr7nEfOR6RMltelgw6Ma/JUuw9cJY= Subject key identifier: 7C:C9:F6:FF:21:33:32:25:D8:FF:E9:3D:CA:08:47:DA:D8:BA:9A:77 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584EA787F54990865A4F21C15380 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400745 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f5:49:90:86:5a:4f:21:c1:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c21fed73-8539-4823-816f-a534dd90c6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:74:d5:13:4f:17:80:f7:0d:64:41:dd:62: 99:54:7c:61:03:62:2d:a6:3e:97:5a:4f:ee:16:23: 8f:33:2f:3c:bd:a1:e0:86:0a:be:5d:e8:37:38:56: a9:32:69:a4:d6:fe:f3:8c:ad:ae:7a:b9:b3:f8:b2: be:3d:72:e2:01:3e:1f:10:7b:c9:20:3d:f6:ae:d2: 56:6b:30:b5:0f:28:c1:81:c8:75:d2:e8:ca:28:24: 36:bf:89:fe:f4:ff:77:7d:03:72:aa:28:a3:b1:5c: c6:56:f0:63:75:cb:fd:ea:3d:8e:d4:68:e7:97:9b: a8:cb:5b:47:4b:d4:dd:42:48:cf:a8:c8:19:65:5d: f6:78:19:0a:30:07:f8:69:ff:08:dc:1f:51:a9:c4: a1:73:e8:ad:dd:70:54:6d:c8:f5:df:4f:53:0b:b5: f8:18:ce:be:1d:b1:da:79:14:e6:00:58:3f:86:bf: ce:7a:b5:33:f1:d6:c8:bc:2e:73:07:e3:77:df:67: 11:2f:45:a7:92:87:8e:27:bb:62:78:3d:f0:0f:c5: e5:50:21:6f:53:89:d5:32:6c:70:b6:35:7c:68:e4: fd:35:37:a0:09:3d:e2:78:2d:2c:31:5c:60:d5:56: 0c:64:1f:ed:e9:7f:f5:fa:c5:d7:6c:43:a0:15:06: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C9:F6:FF:21:33:32:25:D8:FF:E9:3D:CA:08:47:DA:D8:BA:9A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4c:e4:be:84:c9:a2:0c:24:2b:f2:6a:78:e7:1b:3a:c9:98: de:e0:58:c7:5c:72:95:ad:93:67:c6:58:82:c9:41:79:71:c5: d4:7e:fc:3a:b6:aa:e0:07:2e:ba:25:06:a7:e9:e7:33:48:fb: 27:4f:62:d7:6f:b5:75:d6:21:bd:30:d2:58:34:1e:6c:0f:d6: ee:d9:09:5d:75:4c:a1:f5:26:ff:92:92:19:90:c7:71:e1:7e: 28:d2:57:eb:15:5c:3d:31:1d:af:07:fc:eb:bb:c8:87:fc:32: f6:33:75:d7:8f:52:00:37:ac:8d:35:2c:6d:65:bf:ab:0d:83: 36:98:cb:64:58:93:92:0d:bd:35:33:66:cd:3a:ce:e9:18:e7: b4:38:5a:4b:4a:29:79:34:55:12:1e:c3:1c:44:29:81:66:5e: 68:ad:63:06:f8:c9:89:c3:80:d6:2c:d7:4b:ff:ee:50:00:a9: f4:2c:32:e7:59:83:0d:18:20:81:8f:b6:76:50:c8:ff:b9:4d: ae:f8:25:49:35:b9:08:18:90:a6:66:b1:3a:90:16:7e:1c:da: e8:3f:94:4b:49:eb:26:5a:d6:06:7d:e5:44:ee:9f:59:64:d9: 33:4c:b6:70:4c:a9:f1:58:af:a6:32:d7:3a:44:51:f5:af:b1: 76:65:97:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nh/VJkIZaTyHBU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzIxZmVkNzMtODUzOS00ODIzLTgxNmYtYTUzNGRkOTBjNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop101RNPF4D3DWRB3WKZVHxhA2Itpj6XWk/u FiOPMy88vaHghgq+Xeg3OFapMmmk1v7zjK2uermz+LK+PXLiAT4fEHvJID32rtJW azC1DyjBgch10ujKKCQ2v4n+9P93fQNyqiijsVzGVvBjdcv96j2O1Gjnl5uoy1tH S9TdQkjPqMgZZV32eBkKMAf4af8I3B9RqcShc+it3XBUbcj1309TC7X4GM6+HbHa eRTmAFg/hr/OerUz8dbIvC5zB+N332cRL0WnkoeOJ7tieD3wD8XlUCFvU4nVMmxw tjV8aOT9NTegCT3ieC0sMVxg1VYMZB/t6X/1+sXXbEOgFQbbPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHzJ9v8hMzIl2P/pPcoIR9rYupp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZGZiZTM0YTAtNzZlMi0z NDgwLWFjZTktMGVkYWEzODc4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYTOS+hMmiDCQr8mp45xs6yZje4FjHXHKVrZNnxliCyUF5ccXUfvw6 tqrgBy66JQan6eczSPsnT2LXb7V11iG9MNJYNB5sD9bu2QlddUyh9Sb/kpIZkMdx 4X4o0lfrFVw9MR2vB/zru8iH/DL2M3XXj1IAN6yNNSxtZb+rDYM2mMtkWJOSDb01 M2bNOs7pGOe0OFpLSil5NFUSHsMcRCmBZl5orWMG+MmJw4DWLNdL/+5QAKn0LDLn WYMNGCCBj7Z2UMj/uU2u+CVJNbkIGJCmZrE6kBZ+HNroP5RLSesmWtYGfeVE7p9Z ZNkzTLZwTKnxWK+mMtc6RFH1r7F2ZZdT -----END CERTIFICATE-----Generated at Wed Jul 29 04:42:58 2026 by rpki-client