$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa File: 942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json) Hash identifier: 8hwL7X1bERyYzadbaLvmu/GhoEpDKlprXRBuJO8gses= Subject key identifier: 15:80:2C:A2:B9:C0:0C:A7:99:77:39:4E:0B:EA:29:7A:39:D0:62:53 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36CED7A701C9F6D12B3920 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 128.189.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ce:d7:a7:01:c9:f6:d1:2b:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=54e31d96-e32b-4e17-b031-7302ed71f35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:c4:2c:6d:a0:75:54:ff:2f:a8:74:bf:a9: c4:c4:ad:33:61:68:d1:c2:6c:a6:67:52:2d:45:cf: 29:c0:b7:cc:2c:c8:08:b4:a2:cd:0c:9c:f6:d1:ce: c3:29:bc:2b:43:38:e3:e2:53:46:51:d1:c2:7d:89: 69:25:ab:2c:c8:b0:8a:37:92:4a:40:1e:6a:5e:f0: 36:35:a1:47:19:af:45:35:e0:67:3c:3a:af:4d:8e: 01:ed:0a:57:09:33:19:47:28:a1:0c:c7:2d:e7:98: a4:56:52:f2:50:a6:cc:42:4e:a0:44:4b:1b:4a:5f: 86:d9:9b:cb:4c:f4:13:c1:b2:85:c7:81:f8:11:88: f4:30:48:0f:66:79:f4:b8:02:c7:7b:4a:af:8c:f9: 76:0a:d7:41:63:bb:9e:40:2f:23:3d:3c:7e:11:7b: 3f:a0:0a:f8:90:d4:81:f5:c1:fa:e1:f9:3b:69:95: 45:2b:70:eb:62:d4:3e:1a:bc:64:bd:97:45:bd:65: 8c:6a:b9:31:8d:6c:58:6b:cb:de:45:09:7e:26:1d: 96:fa:de:2f:85:81:36:d7:1d:d0:f1:e8:cd:81:b5: 91:42:08:a2:ee:d4:2a:4c:ed:7b:3a:23:cb:7b:63: 8a:83:85:f5:91:0a:b8:b2:9c:fa:79:b1:99:1b:03: e9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:80:2C:A2:B9:C0:0C:A7:99:77:39:4E:0B:EA:29:7A:39:D0:62:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:80:4a:6b:38:c0:60:ee:3c:3d:81:c7:88:37:23:b3:a5:df: 7a:b5:e7:e2:3d:e5:48:06:af:b8:c8:1d:69:a3:1c:28:cf:99: c4:e0:92:13:98:4f:6b:2e:96:b3:10:b9:20:49:b7:69:11:40: 2f:5d:b6:62:c8:e6:be:e4:b9:b9:43:c2:f7:b1:20:3b:74:a7: ee:4f:77:c8:60:eb:62:d9:aa:35:91:f2:92:f4:4e:e6:5d:01: fd:a1:f5:93:aa:94:72:61:c5:eb:df:3d:83:a9:c1:65:7e:1a: 85:c9:1f:4f:8f:73:84:b5:53:d5:73:8a:cb:4d:94:dd:62:9b: af:b6:42:b6:8d:56:09:b0:47:65:1b:e5:be:04:64:30:81:a4: f5:66:96:c0:77:c6:30:6a:0f:67:d0:73:21:fc:1a:d3:c2:f9: 70:15:72:dd:81:fd:8c:09:03:bf:26:c3:0e:84:0e:49:ec:cd: 0f:38:20:77:f0:60:3e:a5:04:d2:7c:34:ec:54:cd:f3:b9:b6: 23:89:62:33:17:c4:84:88:ed:f3:16:c3:50:31:7f:15:33:ab: a9:c2:a0:cc:8e:cf:03:46:aa:42:4a:0b:8d:f8:9f:4a:5e:d4: f2:c7:a5:7d:98:26:29:6f:da:be:49:73:05:3c:b1:8b:45:5c: 88:35:27:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNs7XpwHJ9tErOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTRlMzFkOTYtZTMyYi00ZTE3LWIwMzEtNzMwMmVkNzFmMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOLELG2gdVT/L6h0v6nExK0zYWjRwmymZ1It Rc8pwLfMLMgItKLNDJz20c7DKbwrQzjj4lNGUdHCfYlpJassyLCKN5JKQB5qXvA2 NaFHGa9FNeBnPDqvTY4B7QpXCTMZRyihDMct55ikVlLyUKbMQk6gREsbSl+G2ZvL TPQTwbKFx4H4EYj0MEgPZnn0uALHe0qvjPl2CtdBY7ueQC8jPTx+EXs/oAr4kNSB 9cH64fk7aZVFK3DrYtQ+GrxkvZdFvWWMarkxjWxYa8veRQl+Jh2W+t4vhYE21x3Q 8ejNgbWRQgii7tQqTO17OiPLe2OKg4X1kQq4spz6ebGZGwPpywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWALKK5wAynmXc5TgvqKXo50GJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTQyZWM0MjUtMjI1OS0z Y2Q0LTk3ZjEtZjdlZmJjYjRmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWASms4wGDuPD2Bx4g3I7Ol33q15+I95UgGr7jIHWmjHCjPmcTgkhOY T2sulrMQuSBJt2kRQC9dtmLI5r7kublDwvexIDt0p+5Pd8hg62LZqjWR8pL0TuZd Af2h9ZOqlHJhxevfPYOpwWV+GoXJH0+Pc4S1U9VzistNlN1im6+2QraNVgmwR2Ub 5b4EZDCBpPVmlsB3xjBqD2fQcyH8GtPC+XAVct2B/YwJA78mww6EDknszQ84IHfw YD6lBNJ8NOxUzfO5tiOJYjMXxISI7fMWw1AxfxUzq6nCoMyOzwNGqkJKC434n0pe 1PLHpX2YJilv2r5JcwU8sYtFXIg1Jw8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:42 2025 by rpki-client