$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa File: 678a1903-456b-3e46-aecb-edfc725741eb.roa (raw, json) Hash identifier: 8uVfwvEf+ucSwdIoNciwk/t+1/uZJcBHy95hZcCucWM= Subject key identifier: E9:A1:7B:A6:80:6D:4D:A7:36:F6:62:E5:56:04:09:AB:D1:8E:A2:85 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584DAC456DA64E938BCE4AEC8940 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 88 IP address blocks: 128.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6d:a6:4e:93:8b:ce:4a:ec:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=e215e19a-6f78-4a90-ac6c-40769111a600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:b2:1d:ce:b7:d9:94:fa:a6:68:6e:50:77: 14:f4:87:03:67:b0:9a:fc:0d:c9:91:5a:50:47:10: 79:d6:a4:3f:7e:ec:ac:70:62:6f:52:a6:40:88:02: 7c:8f:29:43:68:44:f4:59:21:13:82:ed:02:68:8a: 02:4a:12:bf:dc:ca:4d:36:67:77:d4:b2:23:4b:a5: e2:9c:7f:df:c3:94:19:9b:9f:9c:f3:ff:8e:57:ae: a5:dc:77:57:e1:86:fb:6a:09:84:60:e4:5d:46:81: e1:c7:ab:15:b0:65:4a:a3:ed:dd:e0:a5:48:31:0f: a1:18:ab:fa:a7:c7:bd:ba:92:cb:4d:d2:4e:f9:90: 64:f6:04:f0:a6:08:a3:62:fb:f6:48:9d:ba:0d:c3: ae:c4:2e:05:f6:2f:58:f6:7f:11:b8:13:de:cb:8b: d9:d9:cb:58:00:68:f1:35:2a:14:c8:91:5b:72:63: 02:b2:ef:79:38:bd:ec:72:1d:39:78:ae:2f:bb:d7: 7d:e8:6e:3a:bc:02:d3:8d:a9:0b:a1:4e:67:ac:f3: 09:33:96:4a:79:52:fa:f6:78:50:68:4a:e1:68:be: 61:2f:ae:3c:25:f2:17:0c:80:54:09:23:a0:b2:42: d5:b3:f4:e9:24:2d:bf:cc:76:99:6c:c0:a1:88:b9: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A1:7B:A6:80:6D:4D:A7:36:F6:62:E5:56:04:09:AB:D1:8E:A2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:89:61:9a:ba:27:47:f4:da:af:13:6c:dc:b9:19:c3:34:83: 1a:47:10:13:39:94:3b:2f:cb:65:4e:7a:6a:f8:d4:02:da:87: a1:72:f0:e1:98:d3:5b:56:c4:10:5d:02:80:46:55:bd:95:99: 4d:a7:45:3c:65:55:26:47:81:a8:2a:bd:43:12:bb:6e:3b:1e: e9:2f:20:a3:b7:db:1f:af:9b:a0:4b:46:17:1d:1f:41:e5:21: 9e:ad:e4:3a:0f:97:16:69:11:b5:ed:14:86:35:e4:7d:0a:77: 11:eb:ab:5c:e8:03:8a:1d:ec:da:a8:2f:c3:3a:9c:4d:d3:f3: 8d:34:35:80:57:21:58:43:35:2e:5f:73:8c:ae:4a:34:ba:9e: fa:87:05:8e:4a:11:70:d5:dc:e0:83:9f:a1:11:a8:9a:11:f4: 48:e1:62:5a:27:ba:62:3c:ee:45:8f:1f:6b:8a:53:22:11:f1: 2e:24:ab:3b:92:5d:b0:df:74:7b:70:65:e4:13:04:cf:f4:4e: fb:7b:46:c4:1b:80:cb:0a:5f:64:71:c3:39:82:b7:11:91:cf: 47:c3:0b:6d:86:bf:5a:0e:36:82:8b:83:1f:44:60:86:fc:19: 32:9a:be:99:33:ea:d5:0e:87:b1:82:2d:81:3b:1f:ab:3c:8b: 84:7b:ab:0f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2sRW2mTpOLzkrsiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZTIxNWUxOWEtNmY3OC00YTkwLWFjNmMtNDA3NjkxMTFhNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XmyHc632ZT6pmhuUHcU9IcDZ7Ca/A3JkVpQ RxB51qQ/fuyscGJvUqZAiAJ8jylDaET0WSETgu0CaIoCShK/3MpNNmd31LIjS6Xi nH/fw5QZm5+c8/+OV66l3HdX4Yb7agmEYORdRoHhx6sVsGVKo+3d4KVIMQ+hGKv6 p8e9upLLTdJO+ZBk9gTwpgijYvv2SJ26DcOuxC4F9i9Y9n8RuBPey4vZ2ctYAGjx NSoUyJFbcmMCsu95OL3sch05eK4vu9d96G46vALTjakLoU5nrPMJM5ZKeVL69nhQ aErhaL5hL648JfIXDIBUCSOgskLVs/TpJC2/zHaZbMChiLkWnQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOmhe6aAbU2nNvZi5VYECavRjqKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNjc4YTE5MDMtNDU2Yi0z ZTQ2LWFlY2ItZWRmYzcyNTc0MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgHAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAi4lhmronR/TarxNs3LkZwzSDGkcQEzmUOy/LZU56avjUAtqHoXLw4ZjT W1bEEF0CgEZVvZWZTadFPGVVJkeBqCq9QxK7bjse6S8go7fbH6+boEtGFx0fQeUh nq3kOg+XFmkRte0UhjXkfQp3EeurXOgDih3s2qgvwzqcTdPzjTQ1gFchWEM1Ll9z jK5KNLqe+ocFjkoRcNXc4IOfoRGomhH0SOFiWie6YjzuRY8fa4pTIhHxLiSrO5Jd sN90e3Bl5BMEz/RO+3tGxBuAywpfZHHDOYK3EZHPR8MLbYa/Wg42gouDH0RghvwZ Mpq+mTPq1Q6HsYItgTsfqzyLhHurDw== -----END CERTIFICATE-----Generated at Wed May 13 05:06:11 2026 by rpki-client