$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: 50HxdHiT0VhqsfpGQjtoumrbuUUP7biMXiVEOJeAYLA= Subject key identifier: DF:BE:1A:9E:5A:54:BF:61:8E:C1:34:AE:D5:7A:93:83:AA:70:8F:D8 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584A2ABAD1737AE99DCDDD5E4A80 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d1:73:7a:e9:9d:cd:dd:5e:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=5843cb15-7b09-44f4-9063-0eef4437c538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:d7:5f:d8:25:1b:72:a2:51:f8:47:0c:18: 8c:03:55:b5:ab:4a:b2:57:a5:44:31:ad:55:4b:21: d8:0f:b3:24:cc:59:5b:8f:87:eb:14:65:dc:8e:80: e2:1e:9c:f6:12:45:af:eb:b4:06:49:10:07:b2:4b: 5f:8d:9c:a8:eb:dc:f9:b6:08:eb:41:99:f0:c6:9c: c3:ec:b2:43:b7:44:cc:9f:0d:6d:02:25:34:55:13: a0:11:be:3a:28:1a:71:27:e7:6e:d8:9b:9a:26:6f: 15:10:4e:b7:cf:6b:f5:7c:1e:fe:74:1c:59:03:ce: fb:bc:7e:32:6a:ab:63:aa:70:01:90:ef:4e:4c:37: d0:0f:9d:9e:de:17:ee:64:7a:76:ed:15:8a:b2:95: 47:2b:db:97:c0:db:31:64:a9:1a:50:81:b4:ee:06: 0f:9e:0d:51:25:cf:b5:cf:8e:7c:6a:b6:38:dc:08: 44:5b:ac:c2:39:d2:62:fd:0c:0c:f3:c3:38:53:f0: ba:a7:1e:06:15:e6:d5:e2:44:92:99:29:94:cf:b7: d8:e0:6a:09:02:c9:68:82:24:e3:6a:b9:46:52:8f: 0c:f8:fd:6f:93:66:44:bc:f4:1c:7b:b5:8e:91:bb: e5:f4:47:33:da:a3:c9:dd:c3:ed:ef:93:ba:8f:ec: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:1A:9E:5A:54:BF:61:8E:C1:34:AE:D5:7A:93:83:AA:70:8F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:42:08:38:ca:a4:c7:af:63:73:16:ae:41:1a:9e:14:ab:ba: d4:96:ca:bc:cd:8c:f7:5a:58:a2:ee:a8:cd:c7:f4:b2:94:27: 86:21:e0:c0:41:76:d4:55:b9:cc:26:78:93:dd:4f:cf:1a:39: ca:a3:9a:fc:fe:4a:85:5f:20:6a:ef:51:4a:87:d0:46:78:dc: 10:ac:aa:dd:a3:78:fc:39:b6:5c:e6:1b:13:f9:1e:35:09:f2: 4c:9a:c6:6c:5f:e9:bd:a9:b8:b9:83:a2:5e:9f:6e:55:09:5d: db:ad:a9:ca:e2:9d:a9:cc:63:cb:91:94:ca:5d:cd:e6:1e:c0: 4e:c0:dd:62:76:06:bd:3b:1a:33:17:54:e2:ea:86:e4:73:c0: 50:e7:53:37:40:77:84:96:b1:6f:92:6f:40:b0:f6:b4:99:d5: 87:7b:eb:a2:ee:b2:9d:0a:68:49:10:b4:60:72:0c:47:ce:7d: 4f:46:9e:b6:73:ff:f9:ce:56:a3:0c:62:75:8b:fd:e1:a6:14: 9b:5e:c3:cb:01:7d:e4:12:f5:f9:d1:31:a9:bb:11:06:a5:e0: 0c:35:6c:08:1f:5b:e6:19:f5:93:90:18:a7:8b:6b:da:21:7a: 05:9e:a9:b2:b2:4e:51:91:f3:8a:40:db:1f:d8:96:65:49:32: c9:19:e4:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutFzeumdzd1eSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NTg0M2NiMTUtN2IwOS00NGY0LTkwNjMtMGVlZjQ0MzdjNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRTXX9glG3KiUfhHDBiMA1W1q0qyV6VEMa1V SyHYD7MkzFlbj4frFGXcjoDiHpz2EkWv67QGSRAHsktfjZyo69z5tgjrQZnwxpzD 7LJDt0TMnw1tAiU0VROgEb46KBpxJ+du2JuaJm8VEE63z2v1fB7+dBxZA877vH4y aqtjqnABkO9OTDfQD52e3hfuZHp27RWKspVHK9uXwNsxZKkaUIG07gYPng1RJc+1 z458arY43AhEW6zCOdJi/QwM88M4U/C6px4GFebV4kSSmSmUz7fY4GoJAslogiTj arlGUo8M+P1vk2ZEvPQce7WOkbvl9Ecz2qPJ3cPt75O6j+yAiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN++Gp5aVL9hjsE0rtV6k4OqcI/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINCCDjKpMevY3MWrkEanhSrutSWyrzNjPdaWKLuqM3H9LKUJ4Yh4MBB dtRVucwmeJPdT88aOcqjmvz+SoVfIGrvUUqH0EZ43BCsqt2jePw5tlzmGxP5HjUJ 8kyaxmxf6b2puLmDol6fblUJXdutqcrinanMY8uRlMpdzeYewE7A3WJ2Br07GjMX VOLqhuRzwFDnUzdAd4SWsW+Sb0Cw9rSZ1Yd766Lusp0KaEkQtGByDEfOfU9GnrZz //nOVqMMYnWL/eGmFJtew8sBfeQS9fnRMam7EQal4Aw1bAgfW+YZ9ZOQGKeLa9oh egWeqbKyTlGR84pA2x/YlmVJMskZ5IU= -----END CERTIFICATE-----Generated at Mon Jun 30 16:11:00 2025 by rpki-client