$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa File: 91f24323-5721-372a-9ac8-d0891fca6151.roa (raw, json) Hash identifier: UI5lC6rIxeBSWZ6UEGrXacnrgwHt3MJFxXZp5YFxFF0= Subject key identifier: C6:88:10:41:7B:92:64:37:06:4C:93:F1:AA:3C:73:50:D4:8C:80:3C Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584B0B76A40B831B8BF99D401880 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 88 IP address blocks: 128.112.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a4:0b:83:1b:8b:f9:9d:40:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e174dee2-1b40-4e9f-882a-35e5722d8f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ee:7a:2b:38:b4:a6:56:e5:3a:55:10:aa:e2: cd:a1:f8:d4:31:96:4b:41:93:02:36:e8:4b:0f:37: 23:eb:b7:3a:0d:f5:9e:ad:ad:c2:e0:bd:fe:3f:7a: ce:f0:c9:98:90:08:d8:51:32:99:08:e5:36:64:43: e1:b3:b8:a0:aa:01:c2:6b:8f:ff:16:05:9c:83:68: 15:c3:32:fd:7d:ad:40:48:04:4d:8c:3c:c1:df:8f: e5:c7:fa:fe:15:4f:72:b3:fd:97:dc:d0:d1:4f:5c: ba:27:92:85:0a:35:7a:fc:28:34:50:47:08:d0:f6: fc:44:07:e9:01:4d:0d:42:35:5f:23:c0:9a:07:15: 59:eb:9e:e6:b8:bd:98:3b:0c:85:88:73:46:10:48: 27:ee:1d:58:e8:17:be:1c:14:e5:90:b0:84:bd:e2: 14:ab:60:26:7f:74:02:7a:80:e9:06:ca:b7:40:c3: 44:f8:b9:7b:5f:e3:6a:bc:ae:f9:91:ab:22:4e:bf: b3:ba:88:86:0c:6c:62:f7:44:00:98:46:08:89:a9: 15:bf:82:3d:ef:dd:50:41:f0:fd:40:83:57:29:33: 58:b3:ad:99:aa:33:c7:4d:bb:c5:c2:1a:28:d7:c3: 29:1a:38:e2:c2:05:62:51:06:a2:e4:85:40:c0:0f: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:88:10:41:7B:92:64:37:06:4C:93:F1:AA:3C:73:50:D4:8C:80:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:99:34:b4:5c:7c:72:b8:79:b7:57:80:92:43:cd:b7:33:3f: bb:c9:53:9b:7d:ba:3e:97:d9:33:49:30:64:a4:41:3c:b2:9b: 3f:e6:90:4f:54:87:3f:46:94:3f:70:a1:3d:8e:22:de:4e:08: b0:8b:3e:11:a2:0e:4c:82:6d:fb:24:52:98:a1:49:3c:73:83: 92:31:83:e9:de:da:8c:16:72:09:1f:7f:25:f5:05:12:93:bf: a8:b9:4d:93:8d:4b:66:e8:75:0c:69:47:61:ad:28:72:7a:20: 4f:a8:14:19:60:0e:0e:5f:7d:0e:a1:2e:1c:81:c4:88:d3:bd: e7:6c:95:28:71:53:28:8e:fe:75:76:fe:d9:e6:b4:70:f5:3e: 22:e2:c6:b4:46:55:62:74:fa:78:0e:eb:20:a1:10:16:de:50: 51:5c:e4:3f:af:6f:4c:ef:77:c0:79:f3:1c:0e:f7:0b:95:57: b8:b2:1b:02:89:dc:60:5f:50:8e:dc:80:68:2b:6c:10:77:5f: 96:cf:05:e2:73:0b:cb:43:e2:5f:55:9a:57:13:6d:b0:e3:9c: dc:9c:0e:2b:48:fe:95:40:37:4f:9f:4a:e9:65:c4:14:22:02: 93:8a:e9:d6:11:5a:ee:00:89:4d:b8:7b:ee:c7:8e:51:19:cd: 68:f1:5d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqQLgxuL+Z1AGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTE3NGRlZTItMWI0MC00ZTlmLTg4MmEtMzVlNTcyMmQ4ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju56Kzi0plblOlUQquLNofjUMZZLQZMCNuhL Dzcj67c6DfWera3C4L3+P3rO8MmYkAjYUTKZCOU2ZEPhs7igqgHCa4//FgWcg2gV wzL9fa1ASARNjDzB34/lx/r+FU9ys/2X3NDRT1y6J5KFCjV6/Cg0UEcI0Pb8RAfp AU0NQjVfI8CaBxVZ657muL2YOwyFiHNGEEgn7h1Y6Be+HBTlkLCEveIUq2Amf3QC eoDpBsq3QMNE+Ll7X+NqvK75kasiTr+zuoiGDGxi90QAmEYIiakVv4I9791QQfD9 QINXKTNYs62ZqjPHTbvFwhoo18MpGjjiwgViUQai5IVAwA9SpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaIEEF7kmQ3BkyT8ao8c1DUjIA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTFmMjQzMjMtNTcyMS0z NzJhLTlhYzgtZDA4OTFmY2E2MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmZNLRcfHK4ebdXgJJDzbczP7vJU5t9uj6X2TNJMGSkQTyymz/mkE9U hz9GlD9woT2OIt5OCLCLPhGiDkyCbfskUpihSTxzg5Ixg+ne2owWcgkffyX1BRKT v6i5TZONS2bodQxpR2GtKHJ6IE+oFBlgDg5ffQ6hLhyBxIjTvedslShxUyiO/nV2 /tnmtHD1PiLixrRGVWJ0+ngO6yChEBbeUFFc5D+vb0zvd8B58xwO9wuVV7iyGwKJ 3GBfUI7cgGgrbBB3X5bPBeJzC8tD4l9VmlcTbbDjnNycDitI/pVAN0+fSullxBQi ApOK6dYRWu4AiU24e+7HjlEZzWjxXSk= -----END CERTIFICATE-----Generated at Thu Sep 11 16:46:23 2025 by rpki-client