$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa File: dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa (raw, json) Hash identifier: +FbCQ4CDr9Zl6L4kMM243gNdLgUIwdXhZkiCY2NOwKA= Subject key identifier: D3:A4:B9:45:CC:E2:04:80:AE:80:81:E9:94:74:6B:8C:1A:D7:8E:2B Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a Certificate serial: 010D0C9F4328584A506AF214D408033E020FCF80 Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 400745 IP address blocks: 2607:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f2:14:d4:08:03:3e:02:0f:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=28e719bc-518d-4dd2-b007-bd87a6a1f7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:2c:6b:dc:6b:2d:e4:26:48:ef:16:c3:45: 36:f8:af:d9:30:33:dd:b8:48:e1:8e:ae:48:be:c1: dc:b6:67:d0:94:87:25:9e:9f:05:fc:dd:0d:83:78: a7:40:4d:58:23:09:67:f9:52:65:e8:44:d4:9a:3b: 02:b1:87:1d:5b:7d:87:09:1b:c9:8e:27:03:18:6d: eb:0d:48:d1:94:f4:50:c0:27:9e:bf:ca:59:4a:35: 9f:b7:8b:55:b9:d7:6c:e4:39:56:fb:21:08:fd:70: 5a:e6:c7:22:56:9e:b8:f2:b7:2c:8a:d1:3f:03:e9: b2:d4:11:ea:8b:54:55:c7:10:50:2b:c8:e3:99:c6: 56:6a:dd:12:70:3e:a4:65:f5:08:07:57:ab:6c:09: e8:0c:a8:4b:8e:8a:22:4f:9a:92:b5:23:18:4f:d6: 7e:a9:41:aa:87:fa:62:e2:2c:ab:a8:f4:cb:a3:72: f0:37:6e:21:88:f6:19:a2:1f:0b:a3:6d:bd:7b:47: 71:ce:09:14:9c:e1:d5:d1:0d:fc:c0:a2:c9:c7:ed: 19:d1:2e:6d:7e:70:45:23:ca:86:65:3a:0a:1e:df: 4f:03:76:5c:ce:ab:88:d9:4f:a3:09:8d:26:ed:20: 01:16:b3:e6:ee:63:8c:3f:26:55:c6:35:96:eb:3f: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:B9:45:CC:E2:04:80:AE:80:81:E9:94:74:6B:8C:1A:D7:8E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/dfbe34a0-76e2-3480-ace9-0edaa3878fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl X509v3 Authority Key Identifier: keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer sbgp-ipAddrBlock: critical IPv6: 2607:bac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:f5:b1:d0:87:26:cc:29:dc:45:1e:9e:ab:a8:b1:ed:d5: 6a:99:3e:ad:c7:69:eb:1b:ab:55:36:6e:83:aa:ee:1a:66:01: 3c:94:33:08:58:f7:a3:ab:98:96:9c:d4:4c:51:63:20:b1:52: 1a:f0:1c:0f:97:ac:c5:ff:81:41:ba:4d:49:2d:3a:35:c2:c4: 43:aa:6c:fa:c5:4e:77:cc:c6:9e:13:90:b5:c2:d4:52:4e:e3: 8c:a5:53:2f:17:37:ad:40:c7:9f:d9:a7:35:a8:ac:a2:ae:7f: 22:64:d6:d9:f7:67:e4:b9:43:09:de:55:47:3c:f4:70:f0:0b: 99:f5:28:8f:b1:ae:a5:53:ec:aa:8e:d0:d0:f5:9a:f1:22:1b: af:34:78:95:64:a7:a4:70:46:de:3a:a4:f8:e0:50:14:08:e5: 9f:44:21:64:b1:a7:ae:02:7b:94:ef:f2:b5:55:36:41:f8:e0: f6:51:ae:33:d7:dc:4a:a3:8f:26:7e:5c:d8:96:69:09:a2:0e: 0d:28:0d:eb:f2:19:3b:90:86:ea:1b:a0:7a:53:97:cf:7c:9d: b5:be:3d:eb:db:11:56:ea:7f:2b:1a:41:29:bd:e2:1a:fd:a8: a4:15:59:f9:d2:f3:d1:dd:5d:82:8a:82:31:80:ac:ff:7b:74: 30:8a:15:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpQavIU1AgDPgIPz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2 MDlhMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk MjhlNzE5YmMtNTE4ZC00ZGQyLWIwMDctYmQ4N2E2YTFmN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g0sa9xrLeQmSO8Ww0U2+K/ZMDPduEjhjq5I vsHctmfQlIclnp8F/N0Ng3inQE1YIwln+VJl6ETUmjsCsYcdW32HCRvJjicDGG3r DUjRlPRQwCeev8pZSjWft4tVudds5DlW+yEI/XBa5sciVp648rcsitE/A+my1BHq i1RVxxBQK8jjmcZWat0ScD6kZfUIB1erbAnoDKhLjooiT5qStSMYT9Z+qUGqh/pi 4iyrqPTLo3LwN24hiPYZoh8Lo229e0dxzgkUnOHV0Q38wKLJx+0Z0S5tfnBFI8qG ZToKHt9PA3ZczquI2U+jCY0m7SABFrPm7mOMPyZVxjWW6z8yMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNOkuUXM4gSAroCB6ZR0a4wa144rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4 NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZGZiZTM0YTAtNzZlMi0z NDgwLWFjZTktMGVkYWEzODc4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2 OWMxZTYwOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAebfWx0IcmzCncRR6eq6ix7dVqmT6tx2nrG6tVNm6Dqu4aZgE8lDMI WPejq5iWnNRMUWMgsVIa8BwPl6zF/4FBuk1JLTo1wsRDqmz6xU53zMaeE5C1wtRS TuOMpVMvFzetQMef2ac1qKyirn8iZNbZ92fkuUMJ3lVHPPRw8AuZ9SiPsa6lU+yq jtDQ9ZrxIhuvNHiVZKekcEbeOqT44FAUCOWfRCFksaeuAnuU7/K1VTZB+OD2Ua4z 19xKo48mflzYlmkJog4NKA3r8hk7kIbqG6B6U5fPfJ21vj3r2xFW6n8rGkEpveIa /aikFVn50vPR3V2CioIxgKz/e3QwihWT -----END CERTIFICATE-----Generated at Mon Jun 30 13:41:55 2025 by rpki-client