$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa File: 7eb09365-a881-33b0-a012-5bc7ee1099db.roa (raw, json) Hash identifier: GyzXB5itz0OcP3jfLqEZ5aL6eXfUAzK6EvpDu3W694I= Subject key identifier: 76:8D:2F:DC:B3:DD:31:05:F1:32:FE:F8:0F:13:43:69:F5:21:B8:C5 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B48E1BA4B415381E75E00FC20 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 271 IP address blocks: 128.189.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ba:4b:41:53:81:e7:5e:00:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a9c10649-f558-4869-8cb2-881b83aa1b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:b0:68:16:ef:14:86:56:0a:8d:11:93:b3: 45:e4:ed:59:12:b3:42:c3:f4:bc:bf:a0:9b:58:10: f0:05:4e:4f:ee:35:0d:12:bb:a8:5d:54:2c:14:84: 79:4b:b7:40:24:e0:ff:aa:ae:1e:15:f0:bd:48:5f: 01:c7:56:80:9f:c5:43:7a:75:b7:50:fc:08:17:e0: 22:38:5a:c5:58:c6:34:d6:34:dd:8d:2c:06:50:2c: b9:43:45:99:f0:39:7d:2d:b1:3c:7c:5c:28:d0:74: 79:06:e2:78:d3:2a:fb:fd:95:fd:0f:1e:92:ee:42: bc:f2:bf:d4:b2:8b:f0:a9:92:9f:57:bf:22:a4:d4: b1:04:a6:7a:c0:21:06:30:2b:8b:4c:2e:bb:90:c3: 65:19:eb:ed:e2:5b:c3:11:9f:7f:f7:1f:86:73:a0: 66:10:bb:4d:a7:f0:d4:ee:79:13:13:6b:b9:e3:4f: 73:cf:44:37:6c:bb:07:a2:4a:ed:7b:c4:03:05:86: d3:55:df:e3:a7:70:bb:de:53:3f:20:07:bc:c7:42: 5c:b2:13:17:60:a6:8c:7d:bc:c1:68:58:8a:e2:d7: f7:23:7c:6a:81:7c:01:2f:ff:f8:00:48:98:d6:62: 0a:bc:8a:fc:2c:37:4f:14:fd:8f:00:14:ec:2e:f1: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8D:2F:DC:B3:DD:31:05:F1:32:FE:F8:0F:13:43:69:F5:21:B8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b5:50:24:4b:ad:b7:5c:69:5c:c1:2b:db:42:06:55:f8:ee: 4d:0f:24:0d:17:36:5f:23:3c:e5:d8:e2:2f:a0:09:4b:35:ae: 01:33:d4:76:e8:9a:cc:59:fa:4b:68:f9:20:16:bf:7d:13:75: b8:63:76:eb:61:6e:19:6d:9e:9c:fc:7d:cb:28:be:38:26:b6: ef:e5:c7:82:9a:5d:7c:50:76:72:d1:70:4c:6b:a3:7d:db:7d: 55:bd:81:af:7b:89:dd:e2:38:50:0d:ff:4b:9e:b0:98:20:33: 89:4b:d3:bb:29:53:a2:bf:37:8c:bb:c0:c1:a2:6b:6d:e0:72: 70:ee:82:24:de:7a:8e:f5:4c:95:8a:89:45:f8:1b:ad:5b:c9: fd:bd:3e:5f:68:db:cf:0f:c9:4c:fa:34:5a:ba:b4:83:f1:ff: 5b:76:be:99:ad:eb:dd:8a:28:e4:6e:08:0d:ad:6f:5f:90:fd: 2d:d3:8c:84:e2:17:b2:66:15:7b:8e:92:c5:50:4b:73:20:a6: 63:9d:ca:0a:38:3a:e9:5b:22:11:eb:1e:b7:8e:7e:aa:25:f5: 18:12:66:7f:47:20:ef:22:86:46:fb:d6:e7:9c:d4:ce:41:e2: 71:51:72:ef:3c:1b:20:de:06:4d:11:5e:96:a2:f9:5e:39:4b: 16:33:3a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bpLQVOB514A/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTljMTA2NDktZjU1OC00ODY5LThjYjItODgxYjgzYWExYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU+waBbvFIZWCo0Rk7NF5O1ZErNCw/S8v6Cb WBDwBU5P7jUNEruoXVQsFIR5S7dAJOD/qq4eFfC9SF8Bx1aAn8VDenW3UPwIF+Ai OFrFWMY01jTdjSwGUCy5Q0WZ8Dl9LbE8fFwo0HR5BuJ40yr7/ZX9Dx6S7kK88r/U sovwqZKfV78ipNSxBKZ6wCEGMCuLTC67kMNlGevt4lvDEZ9/9x+Gc6BmELtNp/DU 7nkTE2u5409zz0Q3bLsHokrte8QDBYbTVd/jp3C73lM/IAe8x0JcshMXYKaMfbzB aFiK4tf3I3xqgXwBL//4AEiY1mIKvIr8LDdPFP2PABTsLvHIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaNL9yz3TEF8TL++A8TQ2n1IbjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2ViMDkzNjUtYTg4MS0z M2IwLWEwMTItNWJjN2VlMTA5OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgL0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK1UCRLrbdcaVzBK9tCBlX47k0PJA0XNl8jPOXY4i+gCUs1rgEz1Hbo msxZ+kto+SAWv30Tdbhjduthbhltnpz8fcsovjgmtu/lx4KaXXxQdnLRcExro33b fVW9ga97id3iOFAN/0uesJggM4lL07spU6K/N4y7wMGia23gcnDugiTeeo71TJWK iUX4G61byf29Pl9o288PyUz6NFq6tIPx/1t2vpmt692KKORuCA2tb1+Q/S3TjITi F7JmFXuOksVQS3MgpmOdygo4OulbIhHrHreOfqol9RgSZn9HIO8ihkb71uec1M5B 4nFRcu88GyDeBk0RXpai+V45SxYzOlk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:44 2025 by rpki-client