$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa File: 7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa (raw, json) Hash identifier: lq6F+Uh/RxFzQKDlsNHomQmWdM/ylYHZ3Jp7yKelbJY= Subject key identifier: F8:0D:49:0B:0A:4B:6A:EF:02:9C:D4:8B:D0:9B:43:06:37:15:ED:AD Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36CEC39F60C79A8882C640 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 128.189.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ce:c3:9f:60:c7:9a:88:82:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=1b66c96b-6ff7-4e33-ad0f-af282e5d5f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:9c:b0:a0:5c:0f:7f:ca:0b:4b:eb:36:f7: 57:96:3e:49:40:89:d2:14:f1:0c:ce:0e:df:33:eb: a5:db:5e:7b:8f:85:d2:c3:09:c2:2d:b4:74:b5:75: 43:ae:e3:aa:7f:ae:66:ef:45:23:08:2c:e6:b2:5d: 24:53:82:a3:6a:8b:2f:b8:09:83:0d:8f:f4:2f:6d: bf:86:6d:6b:6e:be:68:a6:ae:70:55:ea:92:f2:e7: 4f:a4:27:db:b6:5b:0e:11:54:09:b0:4e:c5:12:62: f0:8e:f5:5e:85:5f:70:d7:a0:86:b3:d2:3e:6c:c2: 38:54:08:66:d1:7e:97:a6:9e:7b:34:8f:5e:67:8d: fb:29:58:20:8d:b9:ec:cc:b3:0e:7a:98:7d:d8:64: 65:1c:1e:66:9b:4e:ee:a9:a5:9d:a4:b1:5b:1c:79: 75:2b:4e:dc:22:d5:f7:14:a1:1b:f5:e3:6d:b7:6e: b9:1e:68:de:ca:77:51:e3:70:d7:79:38:4d:83:c1: a5:de:d4:00:8f:7c:36:9f:7d:fc:31:64:41:99:86: 5f:41:95:e8:58:67:75:50:90:1e:1b:75:fb:f4:3f: 98:4c:13:33:82:83:39:e6:91:d7:86:bd:3e:14:eb: ee:f6:33:8f:14:90:39:2b:62:03:9f:40:27:1d:2f: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0D:49:0B:0A:4B:6A:EF:02:9C:D4:8B:D0:9B:43:06:37:15:ED:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:54:6b:50:b2:90:7b:9b:8a:5c:86:b7:5b:cf:92:a7:17:af: 36:12:e3:3b:bd:21:2a:a3:7f:b3:7e:f0:1e:9e:eb:1a:8c:a5: eb:59:40:2a:9f:be:2d:90:40:e1:79:de:db:87:68:74:b5:d0: 36:47:1e:dd:8d:1e:0e:e5:b7:e5:f6:1e:0e:61:67:a5:60:d0: e6:6f:71:75:56:2c:65:3f:7e:f3:10:ae:9a:04:7d:d3:78:d6: ae:cb:51:5f:e3:64:db:9e:59:c0:84:57:41:a4:4e:ba:f1:92: 15:70:39:43:d0:4c:55:fb:33:47:9e:b7:50:33:5c:34:68:0a: e9:02:71:fd:98:42:d1:54:d8:00:f2:2f:fe:f1:e6:dc:78:6f: ec:06:eb:c0:24:e2:76:01:d8:14:49:f2:a4:28:2a:a5:cf:0b: 1c:fa:29:4c:06:85:50:2d:24:35:c9:97:7e:93:46:af:af:f3: b7:7d:5f:a8:8a:4d:d3:5b:8e:3c:43:0c:a4:a2:7f:40:ee:35: b1:3a:5b:18:0c:39:12:94:b1:45:52:66:37:68:95:06:55:c8: 91:a1:c6:50:36:ea:92:30:eb:65:e8:61:c5:7b:22:99:9d:dc: b1:3c:69:db:97:94:cd:41:70:c1:d6:b7:ad:b5:53:63:d6:57: 41:fd:35:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNs7Dn2DHmoiCxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWI2NmM5NmItNmZmNy00ZTMzLWFkMGYtYWYyODJlNWQ1ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp+csKBcD3/KC0vrNvdXlj5JQInSFPEMzg7f M+ul2157j4XSwwnCLbR0tXVDruOqf65m70UjCCzmsl0kU4KjaosvuAmDDY/0L22/ hm1rbr5opq5wVeqS8udPpCfbtlsOEVQJsE7FEmLwjvVehV9w16CGs9I+bMI4VAhm 0X6Xpp57NI9eZ437KVggjbnszLMOeph92GRlHB5mm07uqaWdpLFbHHl1K07cItX3 FKEb9eNtt265HmjeyndR43DXeThNg8Gl3tQAj3w2n338MWRBmYZfQZXoWGd1UJAe G3X79D+YTBMzgoM55pHXhr0+FOvu9jOPFJA5K2IDn0AnHS9yqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgNSQsKS2rvApzUi9CbQwY3Fe2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2E2NTY1OWYtMjkxYS0z NDY4LWJmMGItNjMwZDdiN2U2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZUa1CykHubilyGt1vPkqcXrzYS4zu9ISqjf7N+8B6e6xqMpetZQCqf vi2QQOF53tuHaHS10DZHHt2NHg7lt+X2Hg5hZ6Vg0OZvcXVWLGU/fvMQrpoEfdN4 1q7LUV/jZNueWcCEV0GkTrrxkhVwOUPQTFX7M0eet1AzXDRoCukCcf2YQtFU2ADy L/7x5tx4b+wG68Ak4nYB2BRJ8qQoKqXPCxz6KUwGhVAtJDXJl36TRq+v87d9X6iK TdNbjjxDDKSif0DuNbE6WxgMORKUsUVSZjdolQZVyJGhxlA26pIw62XoYcV7Ipmd 3LE8aduXlM1BcMHWt621U2PWV0H9NUA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:41 2025 by rpki-client