$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json) Hash identifier: SDk6DoOyCYDshYRkc/78zIjEC38mHN1rX6wCT17aHrA= Subject key identifier: EA:BF:DA:D2:80:9C:1F:95:79:79:85:1F:05:D3:91:A2:16:52:FC:35 Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584DD1F5BDCE08364DE68C5D1420 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 400745 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:bd:ce:08:36:4d:e6:8c:5d:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=3b8e8773-3a0f-4970-8438-24265478e654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:b8:e8:9f:10:3d:53:5f:ba:db:20:f0:89: 1f:50:95:d3:b9:e7:5b:57:fa:fc:16:5c:72:5e:89: 15:75:29:17:c5:28:32:89:7d:0f:6f:7b:ae:e0:c6: e1:86:bc:ae:a4:77:1e:a5:0d:1d:f0:7d:29:3e:86: 91:50:09:79:45:79:a0:bf:3e:49:6a:e2:6c:b3:2b: 0e:e9:0a:df:91:11:b7:c7:8d:44:48:85:16:fe:3a: 88:92:8d:2e:81:a9:68:87:35:98:79:c3:a6:0d:50: fe:95:00:1e:57:9f:59:88:eb:cf:bf:b1:63:76:b0: 0a:f6:2a:e3:3a:e9:c1:89:44:08:57:47:75:45:cb: fb:0d:34:ea:e6:e4:3f:48:00:aa:01:ee:71:7e:93: 8b:83:d1:23:22:3c:0b:c2:db:65:21:41:b3:f4:35: 96:0c:f8:ec:58:59:4d:85:fe:ff:18:4e:db:29:73: 31:69:dd:1b:2d:4a:e7:88:af:24:96:3d:1c:a1:a2: 6e:de:73:e9:34:5d:8d:a0:dd:a7:d8:ef:dd:be:0f: 20:6c:6c:0a:17:7c:99:94:fa:18:8c:7e:e2:25:fd: 19:94:c5:b5:39:e2:02:0a:56:aa:58:7f:f1:dc:36: f2:27:09:f3:68:4e:fa:7f:2f:c0:84:a4:c5:c1:f9: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BF:DA:D2:80:9C:1F:95:79:79:85:1F:05:D3:91:A2:16:52:FC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bb:ca:10:72:f6:3e:51:da:54:7a:07:33:03:7e:b0:2d:df: a0:8f:87:7f:ef:6e:9a:fb:99:9f:15:b8:97:a2:06:19:b7:96: 22:53:c3:49:fd:fe:9a:3e:08:9c:73:23:e1:c9:92:da:a7:5c: 16:26:36:5a:e5:d4:77:45:94:47:d9:57:84:1f:2e:61:ed:db: 7a:db:20:f6:f0:9c:c0:a1:e9:71:c9:d0:9f:09:87:0b:dc:e5: 4d:a2:61:29:40:d2:38:2d:cd:25:2f:67:33:96:55:c9:06:f1: 20:88:9d:7d:2d:77:0e:26:8a:2a:a2:82:a8:2b:e3:41:57:ef: 5e:93:c3:af:5e:3d:ce:ec:69:b4:24:ad:50:6a:d5:3c:11:37: 7f:20:98:86:86:fd:cb:46:8b:ac:6a:f7:11:42:59:91:44:09: 26:48:37:fb:17:c9:6c:e6:45:14:7b:93:b4:d7:ca:c2:8b:8a: a0:b3:50:7f:33:70:71:9c:c2:61:fd:1e:f4:35:75:a8:a2:8c: 6b:31:ff:ce:dd:3f:c8:18:c9:35:09:a8:ff:3b:85:dc:27:68: 85:f3:07:21:00:c3:8b:bb:c9:e9:7c:21:e2:9b:1b:50:29:72: f5:cd:d3:d6:03:a4:13:29:7d:31:7b:db:87:b5:fe:0b:bf:2c: d8:54:34:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3R9b3OCDZN5oxdFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk M2I4ZTg3NzMtM2EwZi00OTcwLTg0MzgtMjQyNjU0NzhlNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0q46J8QPVNfutsg8IkfUJXTuedbV/r8Flxy XokVdSkXxSgyiX0Pb3uu4MbhhryupHcepQ0d8H0pPoaRUAl5RXmgvz5JauJssysO 6QrfkRG3x41ESIUW/jqIko0ugalohzWYecOmDVD+lQAeV59ZiOvPv7FjdrAK9irj OunBiUQIV0d1Rcv7DTTq5uQ/SACqAe5xfpOLg9EjIjwLwttlIUGz9DWWDPjsWFlN hf7/GE7bKXMxad0bLUrniK8klj0coaJu3nPpNF2NoN2n2O/dvg8gbGwKF3yZlPoY jH7iJf0ZlMW1OeICClaqWH/x3DbyJwnzaE76fy/AhKTFwfmscQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOq/2tKAnB+VeXmFHwXTkaIWUvw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZGZiZTM0YTAtNzZlMi0z NDgwLWFjZTktMGVkYWEzODc4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvu8oQcvY+UdpUegczA36wLd+gj4d/726a+5mfFbiXogYZt5YiU8NJ /f6aPgiccyPhyZLap1wWJjZa5dR3RZRH2VeEHy5h7dt62yD28JzAoelxydCfCYcL 3OVNomEpQNI4Lc0lL2czllXJBvEgiJ19LXcOJooqooKoK+NBV+9ek8OvXj3O7Gm0 JK1QatU8ETd/IJiGhv3LRousavcRQlmRRAkmSDf7F8ls5kUUe5O018rCi4qgs1B/ M3BxnMJh/R70NXWoooxrMf/O3T/IGMk1Caj/O4XcJ2iF8wchAMOLu8npfCHimxtQ KXL1zdPWA6QTKX0xe9uHtf4LvyzYVDQH -----END CERTIFICATE-----Generated at Tue May 19 07:53:37 2026 by rpki-client