$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json) Hash identifier: v/dNxiNP7p1mWmslGDbTbFeZriM62Mw3j3nqIpFKHcc= Subject key identifier: 2A:0F:7E:87:AA:57:B9:C2:CF:73:F9:53:D2:15:3F:99:85:EA:C4:48 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584B3126F2A9AD7BCD5B18BC1B00 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 400745 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f2:a9:ad:7b:cd:5b:18:bc:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=914b1779-e405-4c9c-8849-b12c4d2e71bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:d5:92:31:f9:22:27:6f:04:3d:b0:af:1c: a3:d7:7e:11:ae:ee:58:94:2c:38:85:5b:02:de:b0: a5:1f:9c:5e:54:5e:29:8c:97:ac:ec:50:56:4e:2d: d9:08:88:c4:42:f8:c9:02:bd:e8:ab:15:cc:f0:8b: 65:26:6a:2d:2c:ef:f4:f4:3a:57:a2:08:13:88:b0: e7:d7:da:04:0e:a5:bd:41:eb:3d:ee:4d:e9:76:2d: f7:cc:56:37:8d:a7:cb:42:b7:96:a0:41:3a:f2:85: 50:55:a8:39:a5:c0:2c:c0:3b:d7:24:e1:88:7d:5e: 13:f6:ce:36:15:13:60:1f:a1:f3:8b:58:d0:27:e9: 1a:61:e6:10:56:f1:16:28:53:c5:b8:cc:33:34:f9: d3:82:5c:67:be:17:82:a1:00:e2:b0:cf:c6:92:8e: 89:43:16:f5:17:af:b5:f0:d1:e8:ce:09:b1:99:94: 6a:a4:ac:00:0d:20:61:e6:bc:80:28:c3:86:8f:77: b3:f5:35:9f:3f:e8:19:92:5c:92:4d:e2:15:0a:2f: bc:9c:8d:c4:67:64:8f:c6:db:97:aa:f3:31:1a:26: 62:af:79:81:29:9b:75:d2:0c:17:dc:e6:e8:5c:d5: 46:15:0d:87:65:4e:26:87:1a:8b:0c:aa:79:12:77: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:7E:87:AA:57:B9:C2:CF:73:F9:53:D2:15:3F:99:85:EA:C4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3d:86:7a:ab:30:71:ac:1c:39:26:d3:e0:56:0a:71:9b:cd: 0b:0e:7c:ea:16:6f:bd:25:09:0b:2b:90:54:eb:b6:f5:dc:08: 73:32:cc:72:08:23:9d:bc:a9:aa:cf:8b:f6:6f:50:1e:2f:4f: 53:16:7d:f7:7b:53:aa:69:13:f4:43:5c:ed:08:24:3a:4d:f2: 93:b2:14:bf:c5:bb:8d:30:67:be:a9:4e:07:97:59:ed:0a:56: f1:6c:d0:6f:76:89:c8:f7:b8:59:b3:97:e2:51:3c:6f:f1:79: 4a:1b:53:51:fc:0c:c7:3d:16:0a:16:b7:69:ba:56:9f:c4:8d: 48:e8:41:88:a7:50:14:67:7d:8d:f2:7b:20:57:d5:72:e3:65: 5b:85:78:2f:6d:af:9d:32:39:6a:bc:f4:90:31:84:f5:b9:79: 06:eb:0d:fd:5f:be:d5:a2:8e:7a:25:0b:fe:2c:5e:70:b0:9c: 95:42:89:cf:2f:08:5a:5f:3a:24:75:d5:37:4a:7a:d7:4b:7e: 53:b8:f1:05:48:9e:52:4e:a7:46:54:8c:75:4a:d1:7c:7a:99: f0:e4:e2:10:67:78:7b:76:f0:b3:df:a3:60:83:35:fc:13:95: 91:05:73:1a:34:1d:0b:d6:d3:c7:23:91:3e:23:78:d4:92:3c: d4:79:2f:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsxJvKprXvNWxi8GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk OTE0YjE3NzktZTQwNS00YzljLTg4NDktYjEyYzRkMmU3MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKvVkjH5IidvBD2wrxyj134Rru5YlCw4hVsC 3rClH5xeVF4pjJes7FBWTi3ZCIjEQvjJAr3oqxXM8ItlJmotLO/09DpXoggTiLDn 19oEDqW9Qes97k3pdi33zFY3jafLQreWoEE68oVQVag5pcAswDvXJOGIfV4T9s42 FRNgH6Hzi1jQJ+kaYeYQVvEWKFPFuMwzNPnTglxnvheCoQDisM/Gko6JQxb1F6+1 8NHozgmxmZRqpKwADSBh5ryAKMOGj3ez9TWfP+gZklySTeIVCi+8nI3EZ2SPxtuX qvMxGiZir3mBKZt10gwX3OboXNVGFQ2HZU4mhxqLDKp5EndGCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCoPfoeqV7nCz3P5U9IVP5mF6sRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZGZiZTM0YTAtNzZlMi0z NDgwLWFjZTktMGVkYWEzODc4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgPYZ6qzBxrBw5JtPgVgpxm80LDnzqFm+9JQkLK5BU67b13AhzMsxy CCOdvKmqz4v2b1AeL09TFn33e1OqaRP0Q1ztCCQ6TfKTshS/xbuNMGe+qU4Hl1nt ClbxbNBvdonI97hZs5fiUTxv8XlKG1NR/AzHPRYKFrdpulafxI1I6EGIp1AUZ32N 8nsgV9Vy42VbhXgvba+dMjlqvPSQMYT1uXkG6w39X77Voo56JQv+LF5wsJyVQonP LwhaXzokddU3SnrXS35TuPEFSJ5STqdGVIx1StF8epnw5OIQZ3h7dvCz36NggzX8 E5WRBXMaNB0L1tPHI5E+I3jUkjzUeS8n -----END CERTIFICATE-----Generated at Fri Sep 19 07:44:45 2025 by rpki-client