$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ceb588f-5296-3bfd-a944-b17939ae58a4.roa File: 1ceb588f-5296-3bfd-a944-b17939ae58a4.roa (raw, json) Hash identifier: PAkQUwQ2gUren60znC20jBbXFxw+i54Ce7bWbXCU4BU= Subject key identifier: DB:9B:DE:77:C8:BF:BD:41:C2:DA:61:89:A4:25:AC:52:09:17:B2:AD Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B821CD4BB3BF0D27FFB6F0D80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ceb588f-5296-3bfd-a944-b17939ae58a4.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 271 IP address blocks: 128.189.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d4:bb:3b:f0:d2:7f:fb:6f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=413f53e1-daab-44ce-89cf-f9f3a9b5ca18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:06:a4:41:a1:77:80:c8:e7:83:68:b6:bc:b1: cc:88:dc:83:ac:44:2a:e0:c8:2c:2b:71:97:b3:8e: 74:7c:02:c1:2f:bd:ec:2f:88:32:9e:50:cb:f3:66: 1d:8d:bb:19:7f:76:7a:29:82:b6:4b:a2:f4:82:74: a5:db:25:11:af:c4:89:d3:81:39:87:90:33:78:40: 96:33:45:57:c3:97:6e:2c:1a:16:ec:55:52:0d:a3: 1a:ae:90:88:28:c6:75:6e:83:16:f8:1c:b0:9c:72: 4c:2e:18:fc:86:7b:e6:bb:1d:59:45:3a:22:f5:96: 30:33:cb:4e:b9:c6:b6:81:a8:11:25:fa:bd:ff:0d: 83:ce:fe:0e:33:ab:20:b5:75:b4:7d:e6:e2:5c:36: 61:3c:9a:32:80:a1:c3:26:2b:a2:69:3c:09:a9:a7: cf:d0:a3:2b:34:56:29:07:a8:50:2b:4e:84:ac:92: 01:7e:ae:8a:23:5d:00:26:6b:6f:67:80:f1:a3:b7: ce:1d:9f:e4:0d:58:a0:01:e1:9f:fe:b5:9c:0e:06: 4e:d8:ff:49:2f:03:e7:fb:d9:e8:fb:5f:8d:bb:13: 7a:40:a2:67:63:cb:8f:35:3c:7d:f8:98:0f:28:ba: a5:ee:f8:eb:d3:df:ac:4c:e1:43:ee:1b:66:55:3c: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9B:DE:77:C8:BF:BD:41:C2:DA:61:89:A4:25:AC:52:09:17:B2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ceb588f-5296-3bfd-a944-b17939ae58a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:15:17:34:b2:8b:5f:e1:2c:6a:2c:41:80:32:47:33:e2:e9: 19:42:e1:ad:0e:97:11:8d:70:bc:17:94:7b:be:ac:ef:24:b7: 0b:a9:53:37:0c:21:64:d4:73:d7:2f:7c:37:88:64:65:47:b0: 0e:2e:dd:34:26:30:d5:19:0f:9d:52:90:cf:86:16:04:c0:13: 73:7f:02:cd:8e:15:a7:eb:ed:3f:52:6d:ec:00:a0:39:20:f3: ea:b2:96:34:b4:5c:c2:70:87:da:68:45:43:91:c5:6d:09:c0: 2e:0d:be:a1:8c:5f:75:d0:a8:6a:e4:d7:df:8d:60:42:bb:7e: d2:5a:00:e3:8a:28:22:7e:1e:68:f2:e6:03:92:ad:c4:70:9c: 9c:68:72:53:69:05:d6:6f:00:5a:c1:8e:03:16:e5:2c:c3:b2: b2:65:05:2e:13:f5:3a:f4:b5:72:a1:10:c9:8a:ca:e7:4c:1f: 9e:e4:c1:3a:dc:6a:61:01:e3:0a:db:08:4d:01:5a:d7:dd:b4: 55:1b:33:8d:13:16:12:21:a8:df:b6:0e:3d:6c:fa:ab:87:4d: 01:b4:22:58:19:76:bf:cd:16:ad:37:18:19:f0:c9:70:0c:fb: 9e:2d:f0:cc:16:67:5c:49:1c:7d:b6:01:5d:6a:f5:88:29:78: bb:6e:23:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNS7O/DSf/tvDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDEzZjUzZTEtZGFhYi00NGNlLTg5Y2YtZjlmM2E5YjVjYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gakQaF3gMjng2i2vLHMiNyDrEQq4MgsK3GX s450fALBL73sL4gynlDL82YdjbsZf3Z6KYK2S6L0gnSl2yURr8SJ04E5h5AzeECW M0VXw5duLBoW7FVSDaMarpCIKMZ1boMW+BywnHJMLhj8hnvmux1ZRToi9ZYwM8tO uca2gagRJfq9/w2Dzv4OM6sgtXW0febiXDZhPJoygKHDJiuiaTwJqafP0KMrNFYp B6hQK06ErJIBfq6KI10AJmtvZ4Dxo7fOHZ/kDVigAeGf/rWcDgZO2P9JLwPn+9no +1+NuxN6QKJnY8uPNTx9+JgPKLql7vjr09+sTOFD7htmVTzvAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNub3nfIv71BwtphiaQlrFIJF7KtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMWNlYjU4OGYtNTI5Ni0z YmZkLWE5NDQtYjE3OTM5YWU1OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgL0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQVFzSyi1/hLGosQYAyRzPi6RlC4a0OlxGNcLwXlHu+rO8ktwupUzcM IWTUc9cvfDeIZGVHsA4u3TQmMNUZD51SkM+GFgTAE3N/As2OFafr7T9SbewAoDkg 8+qyljS0XMJwh9poRUORxW0JwC4NvqGMX3XQqGrk19+NYEK7ftJaAOOKKCJ+Hmjy 5gOSrcRwnJxoclNpBdZvAFrBjgMW5SzDsrJlBS4T9Tr0tXKhEMmKyudMH57kwTrc amEB4wrbCE0BWtfdtFUbM40TFhIhqN+2Dj1s+quHTQG0IlgZdr/NFq03GBnwyXAM +54t8MwWZ1xJHH22AV1q9YgpeLtuIxU= -----END CERTIFICATE-----Generated at Thu Nov 6 00:24:11 2025 by rpki-client