$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b128983c-c95a-3a6c-a73c-ef27e90b6450.roa File: b128983c-c95a-3a6c-a73c-ef27e90b6450.roa (raw, json) Hash identifier: Jd5X3lLq3R/c9z1CWsv6tK51O+yFWSD+oId7W/OfYmw= Subject key identifier: 28:F8:C8:8C:20:08:B1:45:A1:E9:2E:2F:63:DA:FC:9F:22:60:1B:1C Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584B6165D1E18C2F2A159A779B80 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b128983c-c95a-3a6c-a73c-ef27e90b6450.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 19901 IP address blocks: 208.161.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:65:d1:e1:8c:2f:2a:15:9a:77:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=452a10e4-8cb6-4f02-898f-6fd246c69751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:92:1f:0e:be:06:4b:16:ad:44:aa:f5:47: f6:ba:e9:97:9e:cc:0d:2c:6c:f0:e8:f5:e7:40:d0: c6:5b:a4:38:21:21:59:54:94:ec:83:d8:49:a4:c9: e3:0a:76:8d:7b:19:18:80:7a:31:11:1c:8f:4d:2a: d5:9f:0e:9b:e2:b4:59:41:64:32:d2:22:72:5f:5e: 72:84:8d:47:c3:c5:b9:81:d2:c0:80:47:44:05:3b: e0:58:32:e7:44:d5:72:49:4c:79:3c:01:36:6f:37: 95:f0:1c:2e:50:1a:37:c0:fb:55:40:11:b8:07:49: eb:64:f7:c1:ee:ab:de:6d:a9:7a:70:82:f6:12:2d: 56:09:9d:fc:a8:a1:d3:47:b1:47:57:5f:e9:1b:fc: a0:81:74:2a:b4:37:3d:79:80:f5:ca:63:82:a7:01: d1:7f:44:f0:1d:ec:91:a4:a8:c8:d8:c9:48:c1:70: 38:71:99:4d:a2:83:a0:84:23:fa:30:05:51:60:b7: e5:b3:b4:f1:fb:47:62:73:3a:56:d3:02:32:d1:6b: ea:b7:a3:ca:78:3d:c4:e1:2d:39:1f:85:5b:05:49: 7a:b8:4e:ad:22:9c:18:93:96:7d:73:66:ea:d8:9d: 4f:eb:cd:35:3c:d8:37:bd:82:4c:17:e9:54:1b:93: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F8:C8:8C:20:08:B1:45:A1:E9:2E:2F:63:DA:FC:9F:22:60:1B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b128983c-c95a-3a6c-a73c-ef27e90b6450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 208.161.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7b:ed:db:02:42:68:46:60:22:8f:d6:32:93:c4:54:88:22: 15:ea:05:5f:92:56:71:14:1a:e7:c1:59:cd:74:86:eb:e6:9d: 5f:c7:70:7d:16:6f:4a:de:01:7c:91:3b:d1:6d:1d:34:44:a3: e8:f4:5d:64:52:bd:49:a0:92:d0:cf:66:0c:64:07:f0:19:3a: 1a:44:b6:16:4a:33:cc:10:56:13:8b:f2:b4:97:43:d6:7a:ce: 7b:d0:34:74:86:ac:43:b2:73:16:19:c4:4c:cb:09:a7:4a:f0: c2:f5:28:54:ba:6c:69:7c:86:28:b3:07:e1:49:f7:c0:1d:2d: 28:df:44:e4:73:9e:78:95:e7:ff:a6:a0:79:81:dc:f3:68:4e: 41:56:ff:1a:3d:fe:5c:b4:d3:bb:7a:d6:08:41:28:21:e1:aa: 3a:6f:21:cc:fd:98:87:0e:a0:80:4e:15:06:6f:b4:1a:99:e4: bd:b9:00:cd:b3:cd:25:7f:e9:68:48:f6:85:66:5b:90:ad:bc: 65:52:92:9f:1b:68:bc:50:80:a6:ee:73:39:33:f7:42:48:e8: 8f:53:82:88:52:c9:00:56:f5:e8:d0:2f:93:27:58:0e:43:ea: f1:79:ab:66:da:d7:66:e4:2a:fb:6e:0a:3e:bc:a3:01:c4:d1: da:83:69:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthZdHhjC8qFZp3m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDUyYTEwZTQtOGNiNi00ZjAyLTg5OGYtNmZkMjQ2YzY5NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzuSHw6+BksWrUSq9Uf2uumXnswNLGzw6PXn QNDGW6Q4ISFZVJTsg9hJpMnjCnaNexkYgHoxERyPTSrVnw6b4rRZQWQy0iJyX15y hI1Hw8W5gdLAgEdEBTvgWDLnRNVySUx5PAE2bzeV8BwuUBo3wPtVQBG4B0nrZPfB 7qvebal6cIL2Ei1WCZ38qKHTR7FHV1/pG/yggXQqtDc9eYD1ymOCpwHRf0TwHeyR pKjI2MlIwXA4cZlNooOghCP6MAVRYLfls7Tx+0diczpW0wIy0Wvqt6PKeD3E4S05 H4VbBUl6uE6tIpwYk5Z9c2bq2J1P6801PNg3vYJMF+lUG5OaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj4yIwgCLFFoekuL2Pa/J8iYBscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvYjEyODk4M2MtYzk1YS0z YTZjLWE3M2MtZWYyN2U5MGI2NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0KGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ77dsCQmhGYCKP1jKTxFSIIhXqBV+SVnEUGufBWc10huvmnV/HcH0W b0reAXyRO9FtHTREo+j0XWRSvUmgktDPZgxkB/AZOhpEthZKM8wQVhOL8rSXQ9Z6 znvQNHSGrEOycxYZxEzLCadK8ML1KFS6bGl8hiizB+FJ98AdLSjfRORznniV5/+m oHmB3PNoTkFW/xo9/ly007t61ghBKCHhqjpvIcz9mIcOoIBOFQZvtBqZ5L25AM2z zSV/6WhI9oVmW5CtvGVSkp8baLxQgKbuczkz90JI6I9TgohSyQBW9ejQL5MnWA5D 6vF5q2ba12bkKvtuCj68owHE0dqDaak= -----END CERTIFICATE-----Generated at Fri Oct 10 21:06:59 2025 by rpki-client