$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa File: 7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json) Hash identifier: 3YFDPx1hLOPdNpj2GU0dr4CuoRNgr9oF9tbLxxc8/Ho= Subject key identifier: 9E:95:27:29:B1:09:F9:96:7A:4B:34:53:80:E0:CB:E2:62:47:EF:72 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584ECBD1E0FC2E29111A1AD60358 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 55 IP address blocks: 128.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e0:fc:2e:29:11:1a:1a:d6:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=2bb127a5-d2ab-422c-af3c-ce725995afbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:ce:2d:3a:0a:24:e4:91:e2:66:91:5d:05: a8:9f:3d:25:90:26:0b:26:bc:dc:fa:44:75:ad:6d: 10:f2:84:cc:cf:5c:ff:dc:1f:35:a5:c6:29:f1:6a: f6:ed:d1:27:0f:f4:e4:64:e9:16:8e:77:ae:da:17: ec:10:1b:6a:37:8c:b8:34:32:f1:f3:32:e3:df:ba: f3:de:48:12:82:f3:20:08:c1:c6:14:51:e1:d4:4f: e5:22:f8:7d:f1:bf:6e:23:92:81:1e:7a:fb:03:f3: 58:23:9e:ed:ea:20:73:17:6c:86:70:d3:41:d9:3f: e2:06:7b:61:15:fd:89:e0:70:7c:83:fb:57:0a:44: f3:5c:74:ee:a3:29:26:99:b5:a4:8e:fb:bb:f0:b2: 0d:ed:00:2e:e0:4f:b5:ec:6a:ca:a9:df:ff:3a:80: 43:ee:aa:ef:3d:22:b6:d5:90:98:c0:a3:97:e8:c0: 08:58:5d:80:7b:47:49:50:af:ee:80:c0:ff:b3:20: 18:df:79:10:66:74:bc:35:45:37:ae:b2:88:21:d2: ee:54:3b:1d:a8:e2:fc:08:51:89:13:73:f7:08:5a: 56:41:7a:8c:3c:a8:a9:3f:28:ac:f4:26:5d:f7:d9: 41:c9:c6:1b:35:0d:d4:9b:d1:3f:bd:eb:83:6b:cb: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:95:27:29:B1:09:F9:96:7A:4B:34:53:80:E0:CB:E2:62:47:EF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d1:3e:53:2c:f2:49:86:9e:b0:a5:18:7d:e5:c6:c6:98:29: 4b:61:98:7d:ba:10:46:61:da:af:22:26:8c:4c:3c:7f:a0:91: 51:d3:29:25:18:2b:d8:20:c2:bd:37:e5:9e:6e:1e:2f:d7:7a: 25:94:3d:65:19:ed:f2:10:6b:99:35:9c:cd:4b:ed:e8:c8:42: 78:bb:de:82:c3:84:cf:f7:68:8d:37:fb:13:8a:10:0c:3c:db: 34:27:44:a0:9c:dc:1a:23:33:08:b1:7d:92:b3:5c:54:04:aa: 05:11:8d:aa:e1:74:21:73:6c:65:e4:c0:8c:87:cb:79:38:e4: 45:82:a7:9d:01:6a:19:88:aa:90:7a:40:a8:95:57:b1:ec:44: cf:33:ae:bf:96:bc:89:a3:d1:a6:de:f6:4f:1c:cf:3a:66:ec: f0:60:7a:13:94:bc:71:20:38:28:c5:b7:f0:08:4f:58:de:09: 8b:ad:a5:2d:32:e7:22:93:60:22:60:cd:2e:eb:88:39:4c:7a: 11:6c:35:89:91:8d:35:07:18:b0:82:05:af:2a:b0:df:22:a2: cd:32:58:84:d8:12:a7:ac:17:ea:55:93:c1:bf:4f:d7:3a:e0: 35:3a:f3:1e:1f:af:b6:fd:51:ab:ce:2d:15:70:3b:04:80:e8: c5:33:19:0f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7L0eD8LikRGhrWA1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MmJiMTI3YTUtZDJhYi00MjJjLWFmM2MtY2U3MjU5OTVhZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIHOLToKJOSR4maRXQWonz0lkCYLJrzc+kR1 rW0Q8oTMz1z/3B81pcYp8Wr27dEnD/TkZOkWjneu2hfsEBtqN4y4NDLx8zLj37rz 3kgSgvMgCMHGFFHh1E/lIvh98b9uI5KBHnr7A/NYI57t6iBzF2yGcNNB2T/iBnth Ff2J4HB8g/tXCkTzXHTuoykmmbWkjvu78LIN7QAu4E+17GrKqd//OoBD7qrvPSK2 1ZCYwKOX6MAIWF2Ae0dJUK/ugMD/syAY33kQZnS8NUU3rrKIIdLuVDsdqOL8CFGJ E3P3CFpWQXqMPKipPyis9CZd99lBycYbNQ3Um9E/veuDa8tfHQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ6VJymxCfmWeks0U4Dgy+JiR+9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvN2Y1YWJhNmEtYmMzNi0z ZjYyLWE2MmYtMmIxNDBhZGM1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANdE+UyzySYaesKUYfeXGxpgpS2GYfboQRmHaryImjEw8f6CRUdMpJRgr 2CDCvTflnm4eL9d6JZQ9ZRnt8hBrmTWczUvt6MhCeLvegsOEz/dojTf7E4oQDDzb NCdEoJzcGiMzCLF9krNcVASqBRGNquF0IXNsZeTAjIfLeTjkRYKnnQFqGYiqkHpA qJVXsexEzzOuv5a8iaPRpt72TxzPOmbs8GB6E5S8cSA4KMW38AhPWN4Ji62lLTLn IpNgImDNLuuIOUx6EWw1iZGNNQcYsIIFryqw3yKizTJYhNgSp6wX6lWTwb9P1zrg NTrzHh+vtv1Rq84tFXA7BIDoxTMZDw== -----END CERTIFICATE-----Generated at Sat Sep 26 15:55:24 2026 by rpki-client