$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa File: 678a1903-456b-3e46-aecb-edfc725741eb.roa (raw, json) Hash identifier: JGiw7UA1KvN12+Re1QacvUHJX348GIG9Z87OxvJIKgg= Subject key identifier: F7:77:02:96:31:1F:8D:7E:C0:AA:42:A8:47:5E:B0:CB:FD:6E:6A:3B Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584B0B769EFBE421FB5D014672C0 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 88 IP address blocks: 128.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9e:fb:e4:21:fb:5d:01:46:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=48f87d2b-8ab9-4a8b-a329-8ad5e7c94b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d3:59:a1:c2:ac:79:7c:19:8c:2b:7c:cd:b4: c9:d2:10:98:00:f4:af:7f:c7:d9:6d:6d:3b:9f:76: 1d:28:be:39:9d:09:7b:cb:f2:13:4a:2a:a6:26:66: 87:1b:a2:c4:b6:a4:1a:a3:e7:5f:d2:dc:05:35:81: b6:51:7e:d7:f6:51:1f:00:64:61:f5:80:8c:81:5f: d2:17:93:89:5e:ab:83:67:8c:cb:4c:7b:ef:b3:57: 0d:38:18:03:14:1f:14:d0:d1:90:20:a9:b7:99:61: 72:64:9e:80:37:b4:79:22:0d:59:1b:5f:ab:00:dc: 6a:1b:d0:9e:58:62:ba:bc:c5:89:d5:02:2e:76:43: d2:1a:7f:35:76:15:d9:0f:fd:fc:e6:b3:df:18:7d: af:fa:39:38:18:fb:a9:73:d8:b7:d7:4b:8b:b9:a0: 65:61:3c:b2:c3:16:84:6e:fa:98:5d:24:39:f0:58: 16:3b:af:18:d9:a9:44:3d:b0:81:d0:d4:04:4f:71: 5a:78:d8:2f:23:c7:28:f8:87:c3:58:43:73:6d:74: 02:d0:91:82:66:81:e6:f8:de:29:1d:7d:74:59:2d: 31:df:e4:6c:9c:2c:27:16:16:4b:d0:57:9a:95:e0: ba:f1:66:1b:ee:0c:1a:9f:e0:6b:5f:a0:74:84:a4: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:77:02:96:31:1F:8D:7E:C0:AA:42:A8:47:5E:B0:CB:FD:6E:6A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:52:aa:1d:30:f8:73:09:70:48:1b:62:13:ba:a2:5a:bd:5a: 62:d2:1e:3a:4f:4c:c1:3f:02:0a:1d:55:75:b2:e3:ba:52:c5: cc:97:c5:7e:95:77:af:a5:e0:91:78:b8:29:1d:9f:9d:57:d3: ba:c9:e8:35:10:f7:63:77:8b:f1:e6:5b:db:76:98:dc:e1:c8: 10:fa:68:a5:5a:f0:6a:88:c5:64:8c:3d:b8:5f:08:d7:87:44: 54:d6:26:9a:e1:a9:85:51:b1:d7:2c:32:64:74:21:80:32:34: 0a:11:97:f5:c7:8e:39:1b:5b:37:d4:e1:fb:98:84:ea:12:b9: 4a:3d:32:af:95:d0:85:b7:e9:56:fc:0b:24:80:b9:86:2e:46: 59:59:b8:92:b9:1a:9f:58:12:44:76:71:43:82:8e:52:d5:0a: 27:c1:b0:b3:86:e5:18:a6:ce:6f:2c:dd:d3:a9:0e:7b:c2:c1: 75:b5:06:e5:fc:7d:75:07:49:ed:e8:ba:86:b8:53:71:e4:de: 61:35:98:ac:5d:8f:6d:be:d1:d3:2f:11:21:af:f2:f6:c4:9b: f3:27:1b:04:21:c4:5c:a6:d4:6e:b2:18:b7:2c:bd:01:57:54: 43:f4:1f:ef:ea:01:d1:45:60:ce:89:31:fa:95:8b:d6:d6:cf: 5e:e3:a3:ef -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsLdp775CH7XQFGcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NDhmODdkMmItOGFiOS00YThiLWEzMjktOGFkNWU3Yzk0YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tNZocKseXwZjCt8zbTJ0hCYAPSvf8fZbW07 n3YdKL45nQl7y/ITSiqmJmaHG6LEtqQao+df0twFNYG2UX7X9lEfAGRh9YCMgV/S F5OJXquDZ4zLTHvvs1cNOBgDFB8U0NGQIKm3mWFyZJ6AN7R5Ig1ZG1+rANxqG9Ce WGK6vMWJ1QIudkPSGn81dhXZD/385rPfGH2v+jk4GPupc9i310uLuaBlYTyywxaE bvqYXSQ58FgWO68Y2alEPbCB0NQET3FaeNgvI8co+IfDWENzbXQC0JGCZoHm+N4p HX10WS0x3+RsnCwnFhZL0FealeC68WYb7gwan+BrX6B0hKQe0wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPd3ApYxH41+wKpCqEdesMv9bmo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNjc4YTE5MDMtNDU2Yi0z ZTQ2LWFlY2ItZWRmYzcyNTc0MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgHAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAU1KqHTD4cwlwSBtiE7qiWr1aYtIeOk9MwT8CCh1VdbLjulLFzJfFfpV3 r6XgkXi4KR2fnVfTusnoNRD3Y3eL8eZb23aY3OHIEPpopVrwaojFZIw9uF8I14dE VNYmmuGphVGx1ywyZHQhgDI0ChGX9ceOORtbN9Th+5iE6hK5Sj0yr5XQhbfpVvwL JIC5hi5GWVm4krkan1gSRHZxQ4KOUtUKJ8Gws4blGKbObyzd06kOe8LBdbUG5fx9 dQdJ7ei6hrhTceTeYTWYrF2Pbb7R0y8RIa/y9sSb8ycbBCHEXKbUbrIYtyy9AVdU Q/Qf7+oB0UVgzokx+pWL1tbPXuOj7w== -----END CERTIFICATE-----Generated at Thu Sep 11 16:39:15 2025 by rpki-client