$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: GuohKo9qKxtt60msw0wdAIY5fAk1596IiN3KFWwN96A= Subject key identifier: 28:9A:E6:CB:B5:F7:76:8D:54:62:B5:0B:E3:F2:52:D2:E9:24:0E:9B Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584E8C8A3F48EA441F4F552BFC60 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:3f:48:ea:44:1f:4f:55:2b:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=afb25077-e055-4a29-9f72-eec1eb634218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:ae:e9:0f:35:b2:4a:5f:0c:9b:20:5f:3a: 2a:ff:68:07:d2:f6:4e:6a:ba:3f:63:33:9b:90:9f: 74:e1:da:f1:ce:b0:ac:29:72:13:ba:16:47:b5:7d: 9b:91:4f:d0:36:21:fc:8c:50:4a:91:d0:df:45:e9: 69:6e:fa:b7:a6:43:a0:5b:75:5e:b3:45:1b:28:42: 43:96:01:65:eb:75:6c:ac:e7:e2:54:84:e4:b7:75: 55:21:f3:c9:e9:76:11:75:6a:c2:23:43:74:78:c4: 5a:0b:4f:14:eb:86:79:64:cd:ea:b2:3e:76:a0:1e: e0:6c:dc:7f:d0:75:ea:2d:fa:ee:5c:ac:ba:7d:f3: 95:01:08:e4:31:42:49:c0:78:b4:4b:e5:fb:52:a5: 91:52:dd:49:a9:da:82:a3:ee:cf:a3:eb:4a:5b:a4: fc:74:01:35:16:00:7f:92:ea:00:99:25:f6:49:b9: 03:4d:4f:62:ae:37:f1:76:ba:8e:3b:ab:23:ee:11: 56:52:b6:bc:57:1d:0b:57:05:53:2b:3f:3a:af:43: 5c:ec:d0:25:3d:2e:9e:75:30:16:42:8c:6e:3b:c8: bc:1c:73:e8:53:30:15:b9:ca:74:1d:99:4b:34:88: 8b:17:bd:e7:d6:2d:c0:61:63:2a:f9:b7:55:ee:e9: 0d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:E6:CB:B5:F7:76:8D:54:62:B5:0B:E3:F2:52:D2:E9:24:0E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c8:19:ca:6d:5b:b8:f5:5a:4b:f4:bb:02:25:f1:ca:c0:c7: f7:98:be:2f:81:e9:96:28:dc:6e:1e:5e:04:28:76:59:9b:4f: 5f:16:63:24:fb:97:3a:3d:e6:22:dc:a6:a8:b9:d2:24:27:3e: ec:23:8e:40:9f:eb:36:e2:d6:c9:05:b1:38:8c:4f:51:29:3b: 4b:80:26:6d:4a:e0:e6:4b:1e:63:24:4e:56:29:56:79:c8:fb: 4b:98:bd:3d:69:6e:d2:ee:2b:4d:bc:11:5c:94:ec:e3:4e:54: 73:4f:38:7f:4e:ad:80:4e:4c:fa:e1:a0:f0:e6:db:7c:63:33: 08:06:3a:41:8f:97:00:3c:3d:44:d8:d3:b2:f5:d9:75:11:73: e9:a9:87:98:ec:d5:3b:ec:e2:95:0c:1c:90:58:fe:81:37:08: 87:1f:3e:61:7f:e3:a3:85:e7:0f:d1:8a:ce:e1:a8:47:ed:9d: 0f:cd:7d:d1:e9:2c:1b:cf:3e:49:1c:dc:67:83:a0:e7:f7:f2: 9a:95:b5:f8:85:ab:ba:8d:25:04:ee:de:63:79:4c:06:a3:9b: 2f:2b:81:6b:66:63:4c:fb:9f:83:b7:83:e3:c2:9a:05:fa:a1: 73:6f:d1:6f:73:33:58:06:48:9c:b4:ed:10:39:c7:d5:50:42: 33:c4:8e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mij9I6kQfT1Ur/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk YWZiMjUwNzctZTA1NS00YTI5LTlmNzItZWVjMWViNjM0MjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAau6Q81skpfDJsgXzoq/2gH0vZOaro/YzOb kJ904drxzrCsKXITuhZHtX2bkU/QNiH8jFBKkdDfRelpbvq3pkOgW3Ves0UbKEJD lgFl63VsrOfiVITkt3VVIfPJ6XYRdWrCI0N0eMRaC08U64Z5ZM3qsj52oB7gbNx/ 0HXqLfruXKy6ffOVAQjkMUJJwHi0S+X7UqWRUt1JqdqCo+7Po+tKW6T8dAE1FgB/ kuoAmSX2SbkDTU9irjfxdrqOO6sj7hFWUra8Vx0LVwVTKz86r0Nc7NAlPS6edTAW QoxuO8i8HHPoUzAVucp0HZlLNIiLF73n1i3AYWMq+bdV7ukNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCia5su193aNVGK1C+PyUtLpJA6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7IGcptW7j1Wkv0uwIl8crAx/eYvi+B6ZYo3G4eXgQodlmbT18WYyT7 lzo95iLcpqi50iQnPuwjjkCf6zbi1skFsTiMT1EpO0uAJm1K4OZLHmMkTlYpVnnI +0uYvT1pbtLuK028EVyU7ONOVHNPOH9OrYBOTPrhoPDm23xjMwgGOkGPlwA8PUTY 07L12XURc+mph5js1Tvs4pUMHJBY/oE3CIcfPmF/46OF5w/Ris7hqEftnQ/NfdHp LBvPPkkc3GeDoOf38pqVtfiFq7qNJQTu3mN5TAajmy8rgWtmY0z7n4O3g+PCmgX6 oXNv0W9zM1gGSJy07RA5x9VQQjPEjss= -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:01 2026 by rpki-client