$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: 8mlFem1iUrWDuh8ds6NyHYQux9jNo1ZqBgjZDRzew7g= Subject key identifier: C4:50:1C:80:FD:F5:43:FA:8A:C6:F4:8C:DE:C1:F1:AD:E8:64:75:04 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584DAC456DB4F44EE6574EF6E400 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6d:b4:f4:4e:e6:57:4e:f6:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=d0871e25-0574-4c06-94d4-287ff23ecac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:3e:bf:7f:44:a4:64:d4:ca:ee:6c:7a:b5: bd:b7:4c:a0:5e:77:af:b2:03:95:4d:b9:56:e8:a9: 26:63:05:d2:28:e6:4a:d7:03:6b:5c:b8:06:5f:bb: ed:f5:7f:72:9c:09:06:de:e3:13:54:4b:2d:78:18: 6b:49:98:83:24:37:bf:78:e2:26:93:a8:c4:33:ee: f3:eb:0e:b3:a0:5f:be:4f:5e:70:05:55:11:cc:c1: a6:26:43:ef:8e:11:5f:9c:a4:cd:d3:2a:08:3f:b0: 19:d2:70:cb:c9:b4:b8:8d:9d:38:ca:74:e6:9c:6b: e1:33:85:31:4c:85:c4:62:33:88:e1:7c:33:07:bb: 70:26:6e:63:3e:e8:e9:f7:16:38:df:ba:43:a5:f6: 5f:7a:61:5d:db:79:c6:e0:d0:02:c3:cf:c2:bb:b6: d6:fa:4b:82:25:98:aa:80:54:1b:03:7d:21:99:09: b8:3c:b7:44:2b:79:20:57:28:66:eb:df:22:2d:f0: 06:a7:08:dc:e7:0c:d5:73:f9:b0:89:f7:ad:47:ca: 30:25:1c:9a:6f:6c:cc:ee:fa:a7:72:9d:79:1e:69: ba:db:7e:b9:6c:d1:c6:4e:64:36:d5:01:eb:5f:b9: e1:49:90:46:db:bb:6f:d9:06:c7:5d:7b:02:0f:6c: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:50:1C:80:FD:F5:43:FA:8A:C6:F4:8C:DE:C1:F1:AD:E8:64:75:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:95:ca:e9:76:ce:e7:2c:68:4a:13:5d:90:c3:e9:ee:aa:23: 4c:b3:bc:2c:59:97:bb:8d:ae:3f:ce:11:18:70:ae:fc:f2:b1: 94:0b:98:ba:86:76:6b:8e:44:30:13:5f:cd:a8:01:5f:4f:eb: 5d:97:2d:69:1e:b9:89:5a:e3:2e:e8:20:da:c7:15:8a:9f:6a: 10:63:5c:e6:a7:e4:d2:0f:ca:26:66:3c:1d:89:4e:49:b8:7c: d8:84:38:4d:3f:e5:d3:00:df:57:92:bb:21:1d:44:7d:18:e8: cf:b3:2a:c4:1d:3c:9f:38:f6:ef:ed:7b:79:ec:1d:0a:b6:20: e4:16:aa:c6:92:ef:ad:7f:5c:60:f1:0e:1b:31:05:5f:15:19: d3:ae:e9:b6:f1:0a:ba:ca:c6:44:72:a5:b7:0f:d0:fb:88:4c: 23:ba:c7:17:c2:c9:1a:74:8c:fe:61:33:db:95:9e:2f:52:33: 53:0d:72:4d:a2:8b:4f:77:b2:ba:61:ac:02:34:f3:b0:28:98: ff:12:2f:4b:cd:f6:2a:ce:ab:da:15:68:24:d6:1b:20:70:fc: 5f:1e:87:ba:b7:f6:36:ca:70:2d:a2:9a:c9:13:68:1b:ba:88: 24:b5:a3:71:0a:12:64:06:a5:21:77:5b:e1:bd:09:4b:37:f3: f7:20:20:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRW209E7mV0725AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDA4NzFlMjUtMDU3NC00YzA2LTk0ZDQtMjg3ZmYyM2VjYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTA+v39EpGTUyu5serW9t0ygXnevsgOVTblW 6KkmYwXSKOZK1wNrXLgGX7vt9X9ynAkG3uMTVEsteBhrSZiDJDe/eOImk6jEM+7z 6w6zoF++T15wBVURzMGmJkPvjhFfnKTN0yoIP7AZ0nDLybS4jZ04ynTmnGvhM4Ux TIXEYjOI4XwzB7twJm5jPujp9xY437pDpfZfemFd23nG4NACw8/Cu7bW+kuCJZiq gFQbA30hmQm4PLdEK3kgVyhm698iLfAGpwjc5wzVc/mwifetR8owJRyab2zM7vqn cp15Hmm62365bNHGTmQ21QHrX7nhSZBG27tv2QbHXXsCD2xSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRQHID99UP6isb0jN7B8a3oZHUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuVyul2zucsaEoTXZDD6e6qI0yzvCxZl7uNrj/OERhwrvzysZQLmLqG dmuORDATX82oAV9P612XLWkeuYla4y7oINrHFYqfahBjXOan5NIPyiZmPB2JTkm4 fNiEOE0/5dMA31eSuyEdRH0Y6M+zKsQdPJ849u/te3nsHQq2IOQWqsaS761/XGDx DhsxBV8VGdOu6bbxCrrKxkRypbcP0PuITCO6xxfCyRp0jP5hM9uVni9SM1MNck2i i093srphrAI087AomP8SL0vN9irOq9oVaCTWGyBw/F8eh7q39jbKcC2imskTaBu6 iCS1o3EKEmQGpSF3W+G9CUs38/cgIGQ= -----END CERTIFICATE-----Generated at Wed May 13 05:26:37 2026 by rpki-client