$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: 6LsZz73PCBmV9lkWApFS5HAQUI86jGZk0yIenLW7IVY= Subject key identifier: 3B:34:8F:DE:FE:30:47:34:22:F7:7C:34:60:F5:DA:D2:E8:AD:85:46 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584F2EED0C46EC76BF6EC4D3F176 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0c:46:ec:76:bf:6e:c4:d3:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=59a8a995-2e98-4e07-aab4-b4c5f75ddc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:83:fc:af:1e:27:5b:6b:e9:be:2b:fd:95:35: df:4a:36:8c:93:f4:66:22:c5:ea:15:84:ec:51:fa: de:d5:b8:e6:29:0f:fc:0f:e1:3a:c0:77:bf:db:67: ee:78:2c:15:3f:50:7d:26:83:a4:2a:ec:b0:69:ac: 02:b3:1a:7e:9e:be:28:61:12:50:58:af:5e:2d:3f: 1b:71:52:82:39:e1:61:1e:7b:8d:ef:17:85:54:da: f6:37:25:66:2c:b6:6a:f2:b3:d3:7b:18:4a:61:0a: cf:5e:96:47:18:65:c3:77:7d:de:75:25:f6:44:61: f0:03:9a:25:d8:8c:24:25:4d:50:7e:ad:aa:f1:23: b3:e4:88:90:18:e6:3c:ad:0c:e9:9d:01:f1:fe:c0: d9:a5:66:4c:49:38:6e:7c:62:a7:cd:59:b6:c0:f4: 6b:ed:fb:0c:42:a8:9d:b7:bb:69:88:7c:d3:97:53: ee:a5:5e:8c:50:65:0d:6b:04:1d:2b:b4:4f:33:3b: bb:48:5c:6e:f5:f2:61:96:02:82:4b:d0:f8:e5:7f: df:98:a1:68:9d:9a:ab:79:bb:ee:25:49:7a:62:8f: 16:d6:5a:c6:31:59:4a:c3:41:53:f2:f2:4e:a7:05: 21:ff:ab:45:b4:10:ac:43:23:33:76:6f:b0:50:86: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:34:8F:DE:FE:30:47:34:22:F7:7C:34:60:F5:DA:D2:E8:AD:85:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f6:4d:65:58:fd:10:76:37:8d:56:a0:92:25:3c:81:c5:ff: 1b:af:e0:8b:27:89:ff:3a:4c:28:87:61:92:45:06:76:f4:49: 9e:64:61:8c:48:3b:a8:b4:8a:d4:18:97:b2:16:d8:d2:82:72: 0e:20:37:9b:03:84:fc:30:7d:18:8c:b3:a3:a6:cc:28:7a:1e: 53:43:50:ff:1f:e0:f9:c8:d1:a2:6f:06:5e:68:32:78:0c:57: 5f:87:76:0d:f9:05:35:4f:d0:b2:dd:87:67:ad:d5:9a:7a:6c: 9b:d4:62:ed:45:38:8d:3f:d6:39:24:74:a7:54:3b:7f:ad:27: d7:18:f7:2c:a1:42:1b:70:61:fc:8a:19:b5:df:9b:e3:45:96: 7e:23:a4:73:89:7e:e5:a8:44:6d:0a:26:9b:dd:d3:1e:e9:7c: d9:86:cc:59:dd:d7:db:98:f4:bf:62:70:67:74:d9:cd:7a:a4: ce:ac:44:9b:5a:c2:c3:44:7b:e2:de:cc:a8:c1:a3:80:a6:ac: 9f:b9:37:f1:55:19:46:7c:0d:76:3a:83:92:f2:2d:e1:cf:d4: 0b:65:a6:44:29:f3:d9:4c:18:2b:2f:ac:95:98:08:50:75:06: cd:16:22:62:4a:01:58:92:fd:cc:66:63:c1:8c:5e:86:ba:30: 6f:8f:e4:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7QxG7Ha/bsTT8XYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NTlhOGE5OTUtMmU5OC00ZTA3LWFhYjQtYjRjNWY3NWRkYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4P8rx4nW2vpviv9lTXfSjaMk/RmIsXqFYTs Ufre1bjmKQ/8D+E6wHe/22fueCwVP1B9JoOkKuywaawCsxp+nr4oYRJQWK9eLT8b cVKCOeFhHnuN7xeFVNr2NyVmLLZq8rPTexhKYQrPXpZHGGXDd33edSX2RGHwA5ol 2IwkJU1Qfq2q8SOz5IiQGOY8rQzpnQHx/sDZpWZMSThufGKnzVm2wPRr7fsMQqid t7tpiHzTl1PupV6MUGUNawQdK7RPMzu7SFxu9fJhlgKCS9D45X/fmKFonZqrebvu JUl6Yo8W1lrGMVlKw0FT8vJOpwUh/6tFtBCsQyMzdm+wUIbu0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs0j97+MEc0Ivd8NGD12tLorYVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv2TWVY/RB2N41WoJIlPIHF/xuv4Isnif86TCiHYZJFBnb0SZ5kYYxI O6i0itQYl7IW2NKCcg4gN5sDhPwwfRiMs6OmzCh6HlNDUP8f4PnI0aJvBl5oMngM V1+Hdg35BTVP0LLdh2et1Zp6bJvUYu1FOI0/1jkkdKdUO3+tJ9cY9yyhQhtwYfyK GbXfm+NFln4jpHOJfuWoRG0KJpvd0x7pfNmGzFnd19uY9L9icGd02c16pM6sRJta wsNEe+LezKjBo4CmrJ+5N/FVGUZ8DXY6g5LyLeHP1AtlpkQp89lMGCsvrJWYCFB1 Bs0WImJKAViS/cxmY8GMXoa6MG+P5K0= -----END CERTIFICATE-----Generated at Tue Sep 22 12:10:40 2026 by rpki-client