$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa File: 91f24323-5721-372a-9ac8-d0891fca6151.roa (raw, json) Hash identifier: v1gvCPecn4VLVE1pUDL/heQaDqtPyS2w8k5sKC+2UhI= Subject key identifier: 4F:5C:83:E7:25:FD:DA:B3:B0:17:82:5B:F5:A3:50:E3:AA:50:81:34 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584F2EED0F04F559CF717E48B580 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 88 IP address blocks: 128.112.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0f:04:f5:59:cf:71:7e:48:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=21bdf046-cd8f-4e19-8827-a5a092a4a1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:a8:1e:54:75:bc:1e:29:0d:19:72:c1:88: 43:da:2a:28:a3:a2:35:96:f6:c4:d0:07:9c:12:48: df:77:3a:da:29:9c:46:f2:7f:96:e3:c4:e0:bc:e0: 2b:ef:9d:cd:f5:da:5a:24:04:c5:04:59:a1:9c:19: fe:b2:6e:62:c3:a4:e7:88:f3:04:f9:e6:52:48:41: f5:f8:82:2d:4f:fb:fc:08:d1:b4:72:19:01:23:a2: d0:cd:77:0e:b0:3d:ee:8c:30:22:47:88:10:fc:e6: 8d:62:df:ee:77:eb:8e:41:67:07:cc:4e:67:56:9a: 26:ce:65:89:5d:da:7c:81:84:e2:af:4e:ca:f7:e7: c3:01:4c:b7:c1:f3:dc:bb:59:08:1d:5f:52:d4:6a: 40:ef:f6:e2:b5:cb:ff:40:30:3c:1d:11:d2:cf:dd: e0:28:92:f8:ea:27:ba:a7:31:1a:97:1b:f9:8f:96: 94:9a:b7:f0:0d:eb:74:9b:7b:7a:b6:e9:2a:39:cc: 77:65:27:7a:c0:0d:42:3f:f7:1a:23:6d:a2:bc:2f: df:96:cc:ae:03:4e:31:41:1c:0a:56:54:83:b5:0a: 16:23:75:e6:a2:23:ed:f3:85:7c:d4:5f:cf:8e:98: 40:0b:44:ca:01:2a:d0:3c:e7:44:96:fe:e7:61:ca: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5C:83:E7:25:FD:DA:B3:B0:17:82:5B:F5:A3:50:E3:AA:50:81:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:99:69:93:0e:b8:c6:b2:8b:39:50:50:3f:fd:c5:cc:be:5f: ae:f8:6c:46:f9:e5:61:db:a2:2f:8c:e1:6a:d8:ee:f5:a3:2e: 98:88:9f:76:98:e2:51:86:bd:54:64:04:b4:19:78:0d:65:b8: 5f:af:d6:6e:8f:d1:eb:8b:07:e1:ba:dd:1e:40:bd:63:03:76: bb:80:01:1d:83:2f:7d:53:53:7f:ee:e1:b2:4f:a3:cd:52:a0: 0b:c9:bb:39:d3:de:ba:fd:87:f8:8d:46:d2:1e:c1:cf:47:81: 07:36:ef:d8:1b:09:19:00:eb:87:fb:60:70:6f:97:e4:8b:6b: ac:9a:b8:e8:48:11:32:11:f0:2a:21:e9:25:6b:8f:9a:78:56: 1d:aa:82:5a:46:b3:33:bc:78:48:d1:01:de:e1:d0:b6:55:b4: 7b:85:d5:0e:d5:ae:29:ab:a4:a9:ca:af:a4:5a:4a:bc:9b:b0: 95:91:87:f1:ae:49:bd:18:49:7e:4c:30:ad:06:82:53:65:fb: 1f:dd:97:01:ba:40:a8:9f:e3:ac:90:25:72:31:c5:41:c6:ac: 92:df:a3:d2:ad:55:00:8a:d2:3c:06:4e:9c:ce:75:31:9c:42: 93:b2:8c:2d:e6:58:fc:11:25:01:94:bc:b1:ef:c8:61:d2:e0: d1:a0:b9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Q8E9VnPcX5ItYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MjFiZGYwNDYtY2Q4Zi00ZTE5LTg4MjctYTVhMDkyYTRhMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsCoHlR1vB4pDRlywYhD2iooo6I1lvbE0Aec EkjfdzraKZxG8n+W48TgvOAr753N9dpaJATFBFmhnBn+sm5iw6TniPME+eZSSEH1 +IItT/v8CNG0chkBI6LQzXcOsD3ujDAiR4gQ/OaNYt/ud+uOQWcHzE5nVpomzmWJ Xdp8gYTir07K9+fDAUy3wfPcu1kIHV9S1GpA7/bitcv/QDA8HRHSz93gKJL46ie6 pzEalxv5j5aUmrfwDet0m3t6tukqOcx3ZSd6wA1CP/caI22ivC/flsyuA04xQRwK VlSDtQoWI3XmoiPt84V81F/PjphAC0TKASrQPOdElv7nYcrhvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9cg+cl/dqzsBeCW/WjUOOqUIE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTFmMjQzMjMtNTcyMS0z NzJhLTlhYzgtZDA4OTFmY2E2MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOZaZMOuMayizlQUD/9xcy+X674bEb55WHboi+M4WrY7vWjLpiIn3aY 4lGGvVRkBLQZeA1luF+v1m6P0euLB+G63R5AvWMDdruAAR2DL31TU3/u4bJPo81S oAvJuznT3rr9h/iNRtIewc9HgQc279gbCRkA64f7YHBvl+SLa6yauOhIETIR8Coh 6SVrj5p4Vh2qglpGszO8eEjRAd7h0LZVtHuF1Q7VrimrpKnKr6RaSrybsJWRh/Gu Sb0YSX5MMK0GglNl+x/dlwG6QKif46yQJXIxxUHGrJLfo9KtVQCK0jwGTpzOdTGc QpOyjC3mWPwRJQGUvLHvyGHS4NGguYk= -----END CERTIFICATE-----Generated at Thu Sep 24 01:18:25 2026 by rpki-client