$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa File: 7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json) Hash identifier: at52uvLe3PmfLgGiG6r4CdVpT2CPy9J5nOJanu2s0Y0= Subject key identifier: 02:91:26:05:8A:F6:7F:09:72:50:DC:66:29:7A:4A:81:E4:25:5B:73 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584AA85BBB22912B58472BB57580 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 55 IP address blocks: 128.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bb:22:91:2b:58:47:2b:b5:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=3357c6b6-f4a2-467f-b1c7-f02ea00ac96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:94:47:2a:ff:30:9b:54:c4:17:a2:80:d5: 4f:57:fe:ca:20:de:95:41:aa:c3:1b:36:f5:61:b2: 98:c6:b7:10:2f:89:6f:0a:10:61:91:08:79:77:0c: a1:1b:c5:25:94:1f:fe:d7:5e:08:24:bf:dd:6e:13: 67:2d:8d:73:e3:44:b6:d7:d8:60:bc:fb:2b:76:1d: 76:3b:f8:c7:82:66:43:82:80:4a:ce:f2:9a:03:84: 22:1f:fc:99:b3:84:04:f9:1b:21:eb:21:7b:ea:4f: 08:e2:a1:b7:80:22:4d:ee:f3:6c:53:00:fb:0e:1c: 21:cf:61:9c:d9:cc:a9:9c:be:61:37:64:b8:e3:01: 0e:6d:ad:fd:04:90:b5:2e:7f:5d:02:d8:f0:9f:2e: 9f:94:c5:b5:3e:e4:6f:ea:da:d5:92:64:cd:fd:a1: c7:84:8f:aa:53:cd:bb:b0:96:3c:61:8b:97:a0:74: 7b:29:5b:f8:ad:4e:b8:12:db:3f:6f:2f:ed:8c:1d: 0f:d1:e6:ea:b1:82:b3:9c:0c:cb:e9:b5:46:a1:52: 0e:14:41:0d:50:9b:6d:7b:d3:78:fe:86:0b:e6:04: 04:86:2d:79:52:94:43:6c:fb:35:5c:3e:e4:86:27: 7a:39:79:8a:63:45:65:32:26:2e:6c:f9:b1:08:5d: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:26:05:8A:F6:7F:09:72:50:DC:66:29:7A:4A:81:E4:25:5B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:09:11:1c:9b:4b:0a:e1:50:d5:1b:d1:9e:64:c7:4f:9f: 3b:17:21:91:22:3f:d6:88:c8:01:2d:6c:b9:df:f9:1d:0a:fc: d5:38:ac:c9:a6:a0:58:86:0a:55:54:9c:ae:bc:06:f7:49:eb: f9:c2:95:a0:a4:00:50:27:3c:d8:7f:88:34:22:99:c6:0d:22: 72:22:2b:bb:78:8e:b0:e4:45:ad:0d:08:e1:83:98:71:b3:50: 9e:1f:d2:38:64:ac:d3:9d:88:35:f6:49:b3:49:20:b2:a6:e6: 4d:01:10:30:5b:4d:f2:b0:40:c1:de:4a:cb:4d:19:db:cc:2b: b6:9a:7c:5e:92:4e:56:5c:1e:92:1a:3a:85:ba:1f:9d:69:75: d9:3d:d9:ff:86:2c:d5:81:06:15:5c:00:60:eb:43:dc:d2:a7: e5:ec:79:69:8c:19:19:d1:40:04:10:b0:64:3d:c5:e5:e2:ad: 14:15:a2:b9:f6:9f:f4:fd:bb:56:6e:c7:b5:5d:51:51:54:a4: b4:99:9d:7f:32:1e:93:3e:68:ec:06:bb:1d:8a:d0:e4:f9:3c: 16:43:26:27:b4:f1:51:68:e6:e2:ee:82:b2:3c:58:e3:32:86: 16:cf:11:a4:a2:af:1a:4a:80:4e:8b:5a:20:18:4d:e9:89:d3: 1e:39:d2:6b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqoW7sikStYRyu1dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MzM1N2M2YjYtZjRhMi00NjdmLWIxYzctZjAyZWEwMGFjOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdaURyr/MJtUxBeigNVPV/7KIN6VQarDGzb1 YbKYxrcQL4lvChBhkQh5dwyhG8UllB/+114IJL/dbhNnLY1z40S219hgvPsrdh12 O/jHgmZDgoBKzvKaA4QiH/yZs4QE+Rsh6yF76k8I4qG3gCJN7vNsUwD7Dhwhz2Gc 2cypnL5hN2S44wEOba39BJC1Ln9dAtjwny6flMW1PuRv6trVkmTN/aHHhI+qU827 sJY8YYuXoHR7KVv4rU64Ets/by/tjB0P0ebqsYKznAzL6bVGoVIOFEENUJtte9N4 /oYL5gQEhi15UpRDbPs1XD7khid6OXmKY0VlMiYubPmxCF21bQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAKRJgWK9n8JclDcZil6SoHkJVtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvN2Y1YWJhNmEtYmMzNi0z ZjYyLWE2MmYtMmIxNDBhZGM1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWswJERybSwrhUNUb0Z5kx0+fOxchkSI/1ojIAS1sud/5HQr81Tisyaag WIYKVVScrrwG90nr+cKVoKQAUCc82H+INCKZxg0iciIru3iOsORFrQ0I4YOYcbNQ nh/SOGSs052INfZJs0kgsqbmTQEQMFtN8rBAwd5Ky00Z28wrtpp8XpJOVlwekho6 hbofnWl12T3Z/4Ys1YEGFVwAYOtD3NKn5ex5aYwZGdFABBCwZD3F5eKtFBWiufaf 9P27Vm7HtV1RUVSktJmdfzIekz5o7Aa7HYrQ5Pk8FkMmJ7TxUWjm4u6CsjxY4zKG Fs8RpKKvGkqATotaIBhN6YnTHjnSaw== -----END CERTIFICATE-----Generated at Wed Aug 6 19:36:57 2025 by rpki-client