$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/98d97395-1c6d-3876-95f0-257571b7646d.roa File: 98d97395-1c6d-3876-95f0-257571b7646d.roa (raw, json) Hash identifier: lKWiqkd2SkttJ2mxNwGMvHhvnfOZ0PETd7jOCwxl6GU= Subject key identifier: B3:1D:05:3B:2D:A6:9C:CD:DF:BC:71:0E:65:21:67:01:FE:7D:A5:ED Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584A506AF1DF25F0A37CE915C720 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/98d97395-1c6d-3876-95f0-257571b7646d.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 22241 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f1:df:25:f0:a3:7c:e9:15:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=fc5d9ce8-8895-45bb-b640-2e9814c36fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:da:66:f8:f3:c2:0d:21:6c:c4:35:3c:f9: 85:9f:d7:14:ef:ae:c8:be:64:bc:d0:77:3a:28:df: b8:b3:75:35:b0:6d:3d:ab:11:08:d4:ec:0d:c0:98: 06:4d:43:63:43:8b:2a:24:51:c3:54:ce:1a:1e:26: 05:3b:7c:0d:c2:0d:b3:87:03:bb:76:09:23:f2:5e: 39:8b:ec:06:d2:11:15:7d:ac:91:3d:21:22:c2:06: 4d:93:6a:9d:7f:5f:2f:58:78:1e:1f:2a:0d:ea:a3: 9c:be:8f:dc:73:aa:da:85:54:3b:61:bd:50:10:80: c2:a7:c4:2b:d2:e1:1a:a4:db:81:de:02:ef:81:e0: 1c:ae:98:1e:ad:2d:e9:3c:c8:0f:5b:34:c3:8a:c4: 41:34:58:e0:13:6c:10:87:c5:3b:05:96:d1:06:5e: e0:5b:4b:10:42:c6:36:2a:40:c2:1e:87:8d:2b:92: 1f:22:88:f0:ae:cb:64:ef:c0:f2:e2:59:60:08:04: 9e:6a:31:86:92:fc:a5:eb:14:be:43:b1:e9:92:94: 12:85:b0:8a:47:09:af:4e:72:ad:62:93:39:6d:08: f8:0a:93:13:28:8c:4a:c0:70:7a:72:0c:03:a7:1d: ad:fd:5b:86:dc:f4:7b:59:39:d8:d5:b7:4a:03:68: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:05:3B:2D:A6:9C:CD:DF:BC:71:0E:65:21:67:01:FE:7D:A5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/98d97395-1c6d-3876-95f0-257571b7646d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:57:25:13:ed:8c:9f:1c:ac:6e:ca:5b:23:15:47:a4:48:a4: b5:d4:83:3a:c3:ee:c0:79:1d:72:5d:b6:b6:8a:b6:c2:1a:ab: 84:e7:05:6f:75:2b:9c:19:ac:1e:02:e3:87:aa:d7:df:a9:6a: c2:55:50:14:24:aa:4e:3d:82:d6:87:4e:c6:e7:f2:49:a5:ba: ba:f4:9f:33:89:04:30:b9:a2:20:5a:78:a2:33:10:23:17:8d: 04:a3:00:04:14:75:e5:f9:61:dd:7e:a8:a4:af:29:8c:92:47: 31:74:b2:15:76:a4:64:8a:91:21:26:5c:b4:9f:73:94:f4:05: 1d:c1:f9:82:2b:52:a7:50:9d:6f:4b:c5:d7:99:0d:fe:81:3f: 70:cc:ca:78:02:89:b2:0b:86:e3:20:a8:c7:a6:4c:b2:fb:af: 24:6b:cd:57:ec:a7:a4:6c:ab:20:30:76:c2:7b:14:c2:cc:7c: 79:79:57:43:ea:01:ca:f9:4c:a9:34:c1:b1:89:52:40:d0:dc: 1f:f5:ec:5e:84:e9:7c:44:ff:6d:70:5c:91:61:fb:4a:a5:e1: 58:eb:ff:e9:f2:af:6e:bd:23:d6:28:4b:f4:2a:f5:e9:c6:89: bb:5c:26:bd:30:67:62:56:cf:43:00:89:c3:5c:db:07:ec:c0: 61:fa:b7:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpQavHfJfCjfOkVxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZmM1ZDljZTgtODg5NS00NWJiLWI2NDAtMmU5ODE0YzM2ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmefaZvjzwg0hbMQ1PPmFn9cU767IvmS80Hc6 KN+4s3U1sG09qxEI1OwNwJgGTUNjQ4sqJFHDVM4aHiYFO3wNwg2zhwO7dgkj8l45 i+wG0hEVfayRPSEiwgZNk2qdf18vWHgeHyoN6qOcvo/cc6rahVQ7Yb1QEIDCp8Qr 0uEapNuB3gLvgeAcrpgerS3pPMgPWzTDisRBNFjgE2wQh8U7BZbRBl7gW0sQQsY2 KkDCHoeNK5IfIojwrstk78Dy4llgCASeajGGkvyl6xS+Q7HpkpQShbCKRwmvTnKt YpM5bQj4CpMTKIxKwHB6cgwDpx2t/VuG3PR7WTnY1bdKA2jYxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLMdBTstppzN37xxDmUhZwH+faXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvOThkOTczOTUtMWM2ZC0z ODc2LTk1ZjAtMjU3NTcxYjc2NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwVyUT7YyfHKxuylsjFUekSKS11IM6w+7AeR1yXba2irbCGquE5wVv dSucGaweAuOHqtffqWrCVVAUJKpOPYLWh07G5/JJpbq69J8ziQQwuaIgWniiMxAj F40EowAEFHXl+WHdfqikrymMkkcxdLIVdqRkipEhJly0n3OU9AUdwfmCK1KnUJ1v S8XXmQ3+gT9wzMp4AomyC4bjIKjHpkyy+68ka81X7KekbKsgMHbCexTCzHx5eVdD 6gHK+UypNMGxiVJA0Nwf9exehOl8RP9tcFyRYftKpeFY6//p8q9uvSPWKEv0KvXp xom7XCa9MGdiVs9DAInDXNsH7MBh+rcM -----END CERTIFICATE-----Generated at Mon Jun 30 18:43:30 2025 by rpki-client