$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa File: 52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa (raw, json) Hash identifier: ruT5u4Rur87Og6lWYiwSR+hXBRmracNGQOY3MG4yhvw= Subject key identifier: 60:13:12:7A:E7:CC:BF:88:64:15:41:C0:24:87:04:7A:04:87:7A:4C Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36CEFEBC0BEF9239122480 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 128.189.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ce:fe:bc:0b:ef:92:39:12:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=85dcab24-8309-4ea2-9f89-c89b0b6b8ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:b6:19:8f:00:29:75:8f:80:21:46:ff:a3: 91:07:97:c2:f8:90:8a:c1:d7:40:e3:2f:e1:8f:44: 4d:37:cd:e0:14:ee:f0:81:bb:3b:fa:b9:ef:fd:80: aa:6d:f3:be:94:e0:0a:8e:16:e8:4b:96:f6:ec:ce: 05:f7:6d:ea:87:eb:51:53:05:be:4a:ee:63:fe:f0: 8b:c0:be:7d:58:ea:94:14:5c:84:65:02:73:10:76: ee:b6:0f:9e:52:0e:47:0e:29:ab:1d:1e:d6:7b:9b: 10:1e:7e:61:bf:15:91:c3:e0:d8:88:ee:b7:5e:01: 71:38:be:ea:aa:9a:a3:9e:19:d4:16:a3:0a:58:c0: ae:05:d6:9b:a1:2f:35:fb:f1:fb:81:b7:b3:e2:5d: c3:7a:ab:12:19:e8:e5:c6:1c:d7:96:8c:13:d8:7b: b0:da:15:01:b1:d4:ee:e1:41:8e:26:67:f4:bd:70: cf:cd:20:ff:60:16:74:75:54:bd:d0:dc:c1:a9:f1: 4b:3c:6a:2b:33:79:13:a2:3b:b5:27:82:fa:93:e9: ac:29:22:73:dd:79:d7:65:b7:a5:2f:5b:aa:30:3d: 0a:ce:eb:cb:52:85:2a:1d:30:2f:85:ec:aa:a5:72: a8:80:51:91:5d:79:ed:5c:5f:b4:28:e2:f1:05:cc: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:12:7A:E7:CC:BF:88:64:15:41:C0:24:87:04:7A:04:87:7A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b4:c1:85:46:86:fd:92:f6:76:5e:02:85:10:69:b3:cb:50: c7:2d:10:ce:84:dc:8d:8e:b3:b9:11:cd:49:b8:1d:08:99:3f: ab:06:aa:18:07:26:b2:56:00:e3:b9:4d:4b:cd:c1:0a:5a:a6: 5e:10:b9:c9:94:bd:67:0e:24:eb:e3:fe:8c:ff:b0:d1:67:4b: 0c:97:4f:5a:e7:ff:19:e9:c7:95:5f:fc:30:32:dd:a3:b6:09: 00:7f:87:26:49:f8:13:fc:c8:6f:e6:8a:d8:a8:1d:14:0d:80: b7:16:b8:bb:8c:59:e0:ca:dc:33:7c:de:f6:87:9f:f9:f8:db: 61:45:44:7c:5e:d7:78:c3:9e:bd:c7:ff:b1:6c:22:37:b1:dc: 4e:51:86:82:dd:02:14:eb:79:be:2f:5d:7e:1a:d7:c6:49:16: 0a:0b:07:2b:e8:e7:b9:58:00:b7:88:16:4c:40:4a:8b:0a:cf: 26:d8:f3:1a:74:89:1e:1d:ba:d3:79:a2:aa:b0:72:c7:d5:27: fd:78:f3:89:03:ab:d5:db:0e:5a:68:56:18:50:32:41:58:87: c9:17:31:8a:30:fc:ea:86:68:92:3f:de:3c:e2:8d:1a:cd:aa: 65:da:fe:93:56:1f:1f:f0:77:51:63:2e:b8:b2:86:97:b7:2c: 9f:1d:db:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNs7+vAvvkjkSJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODVkY2FiMjQtODMwOS00ZWEyLTlmODktYzg5YjBiNmI4ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs62GY8AKXWPgCFG/6ORB5fC+JCKwddA4y/h j0RNN83gFO7wgbs7+rnv/YCqbfO+lOAKjhboS5b27M4F923qh+tRUwW+Su5j/vCL wL59WOqUFFyEZQJzEHbutg+eUg5HDimrHR7We5sQHn5hvxWRw+DYiO63XgFxOL7q qpqjnhnUFqMKWMCuBdaboS81+/H7gbez4l3DeqsSGejlxhzXlowT2Huw2hUBsdTu 4UGOJmf0vXDPzSD/YBZ0dVS90NzBqfFLPGorM3kToju1J4L6k+msKSJz3XnXZbel L1uqMD0KzuvLUoUqHTAvheyqpXKogFGRXXntXF+0KOLxBcw4bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGATEnrnzL+IZBVBwCSHBHoEh3pMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTJmNGI0ZTAtMzEyMi0z ZmUwLThmMTctNGVmYjJkMmFjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgL0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB60wYVGhv2S9nZeAoUQabPLUMctEM6E3I2Os7kRzUm4HQiZP6sGqhgH JrJWAOO5TUvNwQpapl4QucmUvWcOJOvj/oz/sNFnSwyXT1rn/xnpx5Vf/DAy3aO2 CQB/hyZJ+BP8yG/mitioHRQNgLcWuLuMWeDK3DN83vaHn/n422FFRHxe13jDnr3H /7FsIjex3E5RhoLdAhTreb4vXX4a18ZJFgoLByvo57lYALeIFkxASosKzybY8xp0 iR4dutN5oqqwcsfVJ/1484kDq9XbDlpoVhhQMkFYh8kXMYow/OqGaJI/3jzijRrN qmXa/pNWHx/wd1FjLriyhpe3LJ8d27I= -----END CERTIFICATE-----Generated at Sat Oct 11 11:01:30 2025 by rpki-client