$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: 1US4mJqy7zTy/nHi7wFaUn1Jlh1F8fpf4YyOMooIKT8= Subject key identifier: 04:22:3B:AC:27:32:EE:CD:4B:A3:6D:2F:B5:34:12:FD:48:5A:C3:52 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584B0B769F13BB2F87B5F94C1A60 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9f:13:bb:2f:87:b5:f9:4c:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=175a98d7-90cf-4492-be20-0fae5de3303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:6b:31:6f:48:7a:e8:c7:90:98:dc:95:4c: 7e:f0:ac:5a:43:0d:d8:9f:5a:0b:1d:dd:cb:14:69: 1b:77:79:19:d4:b6:4d:28:b8:d7:db:6d:3d:50:e7: 96:35:42:06:18:fb:21:e0:81:1a:17:ff:40:56:26: 57:de:67:da:98:b9:7e:20:74:87:9d:e6:f6:e7:eb: 4b:3f:29:27:aa:3a:5a:63:2b:f9:3c:56:8e:ec:79: 7c:54:3c:d6:5b:77:6e:91:56:21:89:b9:f7:dd:e5: 33:b2:ad:fc:f1:12:c0:34:c0:d1:7d:10:c4:0c:41: 34:45:fb:60:5d:b7:98:e3:2a:72:10:9c:4a:27:8d: a9:ab:b1:f5:89:3a:ca:b6:23:35:fd:17:6e:99:36: 8e:92:bb:ce:44:31:a2:dd:22:41:f4:34:8b:e0:d5: cb:7c:77:49:5c:94:16:2f:c4:79:ed:c8:64:52:34: 87:28:a1:58:30:52:31:4e:03:83:3b:a3:8d:e3:11: d4:3e:56:5b:c6:1a:4d:21:05:2c:d1:74:a8:59:a7: cd:e8:1d:21:33:eb:5f:0d:f2:92:7f:11:25:8e:2f: 1b:53:72:54:82:74:7f:64:79:5e:1f:16:a3:74:1d: cf:7d:a5:96:9d:48:a7:4a:f3:ba:fb:08:93:f9:c7: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:22:3B:AC:27:32:EE:CD:4B:A3:6D:2F:B5:34:12:FD:48:5A:C3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3f:51:9c:d5:04:05:20:82:38:0a:d2:8d:88:53:8d:7b:18: 64:4b:ab:df:99:30:23:02:71:91:81:1f:35:c9:e3:fa:4f:6c: 29:7f:0e:65:cd:8d:e1:54:9b:c8:be:54:7a:10:0a:eb:ce:d2: 70:17:55:a0:74:47:53:d3:a9:f4:1e:dc:8e:37:26:95:1d:dd: b6:c0:43:84:98:87:e1:bf:83:e5:e5:10:a3:44:9a:52:82:0a: 1b:ef:82:90:96:c3:4e:40:d9:2c:87:ba:ad:a2:14:15:71:10: fe:88:18:a0:9c:e1:c4:7a:99:4a:81:06:6a:cc:d1:60:f1:d8: 46:84:d3:f4:80:8e:ab:11:16:ef:20:d0:9b:91:b9:13:38:5d: fd:1a:bc:9d:3e:f6:c2:d8:59:af:49:71:8d:2d:d7:54:b6:2b: 5a:62:82:ab:ed:fa:58:b4:27:ec:d8:1f:d2:ce:55:b0:da:9a: 97:ec:7c:3c:d7:e8:03:b0:69:63:6d:a1:2a:d0:dd:02:a7:f3: 39:5e:9e:38:87:89:01:34:a6:a5:81:a2:63:df:8f:59:50:c4: 01:58:70:dc:12:ce:83:bf:54:82:ec:db:a9:85:c4:1d:25:0a: d9:cc:b9:99:86:51:bb:75:f2:06:f0:b2:22:de:b4:8b:d0:ac: 59:61:9e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp8Tuy+HtflMGmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTc1YTk4ZDctOTBjZi00NDkyLWJlMjAtMGZhZTVkZTMzMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5BrMW9IeujHkJjclUx+8KxaQw3Yn1oLHd3L FGkbd3kZ1LZNKLjX2209UOeWNUIGGPsh4IEaF/9AViZX3mfamLl+IHSHneb25+tL PyknqjpaYyv5PFaO7Hl8VDzWW3dukVYhibn33eUzsq388RLANMDRfRDEDEE0Rftg XbeY4ypyEJxKJ42pq7H1iTrKtiM1/RdumTaOkrvORDGi3SJB9DSL4NXLfHdJXJQW L8R57chkUjSHKKFYMFIxTgODO6ON4xHUPlZbxhpNIQUs0XSoWafN6B0hM+tfDfKS fxElji8bU3JUgnR/ZHleHxajdB3PfaWWnUinSvO6+wiT+cevpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQiO6wnMu7NS6NtL7U0Ev1IWsNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg/UZzVBAUggjgK0o2IU417GGRLq9+ZMCMCcZGBHzXJ4/pPbCl/DmXN jeFUm8i+VHoQCuvO0nAXVaB0R1PTqfQe3I43JpUd3bbAQ4SYh+G/g+XlEKNEmlKC ChvvgpCWw05A2SyHuq2iFBVxEP6IGKCc4cR6mUqBBmrM0WDx2EaE0/SAjqsRFu8g 0JuRuRM4Xf0avJ0+9sLYWa9JcY0t11S2K1pigqvt+li0J+zYH9LOVbDampfsfDzX 6AOwaWNtoSrQ3QKn8zlenjiHiQE0pqWBomPfj1lQxAFYcNwSzoO/VILs26mFxB0l CtnMuZmGUbt18gbwsiLetIvQrFlhnh8= -----END CERTIFICATE-----Generated at Thu Sep 11 16:44:23 2025 by rpki-client