$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa File: 7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json) Hash identifier: uhebIzeC1Q4vo5u8evHg82PYKlp12OihhTkeQcEHWz4= Subject key identifier: 3E:E9:F0:67:F1:19:DA:C1:27:21:8D:90:B6:1C:39:D6:39:34:60:31 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584F6F22EA382E839DE4C3D7BD00 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 55 IP address blocks: 128.91.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:ea:38:2e:83:9d:e4:c3:d7:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=40948d06-2d05-41fc-ad8e-419e73ef45fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:91:1c:ca:34:58:9b:11:83:1b:3d:1b:ee: c1:ca:14:51:fb:5b:c0:72:53:0f:de:e2:85:4c:fa: cd:cf:9e:e0:50:4c:1a:6f:04:2a:a6:79:4c:48:03: 26:e7:bd:ee:8d:41:94:0b:22:ee:f9:f8:96:3f:ca: 67:5b:6f:92:34:e1:41:17:b9:40:e9:50:d6:b5:8a: eb:cc:68:fa:8b:bd:51:00:67:02:fd:90:bc:a8:fb: 08:00:8f:b6:b6:e7:e4:4c:13:7b:1c:ea:d8:4c:a3: 70:fd:ff:d7:92:86:8d:38:46:c9:50:c1:77:92:2f: 76:00:31:f3:05:84:a0:6b:4a:06:c9:bf:c9:5e:93: 33:23:b1:e1:d5:12:5a:8d:96:ca:b0:e7:59:06:15: 81:94:f5:90:89:93:72:17:68:34:9c:e1:93:38:f5: a3:5f:62:03:ff:f7:ae:0e:2e:8d:54:a3:c3:18:ce: 69:b6:a4:55:0b:fe:5e:c4:1a:bd:bb:6d:2c:09:60: f0:9e:8f:17:97:98:5f:56:57:92:88:c2:8a:bc:43: 71:18:b1:ff:e1:7b:d9:14:77:50:33:6a:4a:f7:52: 56:b0:f3:ce:15:da:9a:8e:9f:51:26:26:17:e7:29: 2f:af:81:9d:8b:98:b2:49:54:ee:9d:7c:01:71:cd: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:F0:67:F1:19:DA:C1:27:21:8D:90:B6:1C:39:D6:39:34:60:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:47:43:62:4d:d1:bc:20:c0:84:41:0c:fa:1f:56:9a:cd:d5: 40:9f:50:25:46:27:ef:a6:b9:90:b4:00:58:1b:23:d2:32:dd: 8c:53:87:7f:1d:97:4d:73:4d:9a:49:51:95:81:ee:24:42:e2: 6a:a9:b7:56:bf:a3:45:92:cd:83:76:6d:c3:31:ab:b6:ee:4c: 4f:8a:50:7b:29:ba:3b:bc:ae:18:ea:17:be:49:3d:66:81:6b: a1:c9:8b:c6:42:f3:89:15:9c:e5:ed:46:08:8b:d5:83:e3:05: dd:09:45:71:e7:1f:7a:7a:7d:68:b8:65:13:e3:a0:51:cd:96: c5:c5:85:69:12:c6:4c:80:25:11:f4:d8:49:58:b2:57:18:05: d3:31:09:71:8c:ec:84:45:57:46:cf:3a:4f:8b:40:e3:fc:83: 18:17:0c:a8:bc:d0:0c:03:4b:e3:ac:ec:ca:da:d5:77:e7:12: 12:2d:14:58:e8:4f:47:4e:c1:46:b7:22:02:9f:63:57:fa:97: bd:6e:6f:9c:82:0f:1c:20:1d:8d:b1:24:a8:8a:8b:60:1d:2a: 99:9c:51:36:57:79:fe:1e:31:dc:6e:9e:0a:6d:51:06:6d:ea: 6a:ea:da:e6:6c:f8:93:33:4a:60:58:36:2a:87:84:63:89:ad: 2e:98:6d:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9vIuo4LoOd5MPXvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDA5NDhkMDYtMmQwNS00MWZjLWFkOGUtNDE5ZTczZWY0NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLCRHMo0WJsRgxs9G+7ByhRR+1vAclMP3uKF TPrNz57gUEwabwQqpnlMSAMm573ujUGUCyLu+fiWP8pnW2+SNOFBF7lA6VDWtYrr zGj6i71RAGcC/ZC8qPsIAI+2tufkTBN7HOrYTKNw/f/XkoaNOEbJUMF3ki92ADHz BYSga0oGyb/JXpMzI7Hh1RJajZbKsOdZBhWBlPWQiZNyF2g0nOGTOPWjX2ID//eu Di6NVKPDGM5ptqRVC/5exBq9u20sCWDwno8Xl5hfVleSiMKKvENxGLH/4XvZFHdQ M2pK91JWsPPOFdqajp9RJiYX5ykvr4Gdi5iySVTunXwBcc3SJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD7p8GfxGdrBJyGNkLYcOdY5NGAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvN2Y1YWJhNmEtYmMzNi0z ZjYyLWE2MmYtMmIxNDBhZGM1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAckdDYk3RvCDAhEEM+h9Wms3VQJ9QJUYn76a5kLQAWBsj0jLdjFOHfx2X TXNNmklRlYHuJELiaqm3Vr+jRZLNg3ZtwzGrtu5MT4pQeym6O7yuGOoXvkk9ZoFr ocmLxkLziRWc5e1GCIvVg+MF3QlFcecfenp9aLhlE+OgUc2WxcWFaRLGTIAlEfTY SViyVxgF0zEJcYzshEVXRs86T4tA4/yDGBcMqLzQDANL46zsytrVd+cSEi0UWOhP R07BRrciAp9jV/qXvW5vnIIPHCAdjbEkqIqLYB0qmZxRNld5/h4x3G6eCm1RBm3q aura5mz4kzNKYFg2KoeEY4mtLphtBQ== -----END CERTIFICATE-----Generated at Sun Oct 11 16:29:25 2026 by rpki-client