$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa File: 84c6b55b-d903-33e7-a64f-292b8c3f765b.roa (raw, json) Hash identifier: 2UEUGJV9stmqIOUrkJZeNLj2J3Qa1M5KVjD5E/TluDI= Subject key identifier: BB:62:14:18:30:DB:CB:45:67:AD:74:0C:1E:B5:72:5B:91:D7:9D:F6 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36CF1347EF613DF10B0309 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 128.189.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cf:13:47:ef:61:3d:f1:0b:03:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=aae82a90-e712-43ee-8ffc-900b2597be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:6c:b3:48:49:e6:7a:a5:d8:f1:31:66:6b: 01:d9:0c:78:34:cf:11:ce:d2:ae:82:db:05:a1:6f: 35:b5:59:af:e5:44:03:67:87:e9:11:c1:41:e6:3e: ca:45:b6:66:1d:e2:63:4e:b0:7b:fa:ba:a5:bc:07: ef:61:22:32:92:fe:c7:0d:b0:5f:38:9e:d8:b7:6d: 23:94:14:4a:28:ba:88:f7:2b:63:76:6e:94:cb:82: 7f:e2:d4:92:96:7d:de:0b:3a:cf:2e:55:ea:ea:3e: 6a:74:11:25:d7:79:0e:ef:96:d6:f6:4e:ff:21:10: 62:15:bc:ea:8e:d6:b3:0a:2b:ee:a4:14:38:3f:e8: 0c:a7:1e:00:59:1c:1f:26:37:4e:6e:81:db:9a:03: ae:7f:29:69:11:4e:8b:50:3a:06:22:92:3b:ab:eb: 30:f8:18:7a:1e:42:f0:eb:33:1a:5d:14:5b:8e:28: 32:a1:db:c0:14:8a:e5:df:c8:50:6b:34:85:49:64: 54:7c:8a:5d:cd:c6:51:95:61:6a:95:35:51:62:7c: d3:29:f8:a9:5c:24:9b:9f:71:12:3d:98:42:46:c7: e2:08:78:0f:bc:ac:7b:c8:2a:71:82:60:a1:d0:3b: 44:f3:f6:ba:9b:0c:99:13:b8:6f:7c:bc:20:83:ef: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:62:14:18:30:DB:CB:45:67:AD:74:0C:1E:B5:72:5B:91:D7:9D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d6:2d:13:78:fe:54:e0:8d:12:83:a9:08:0b:98:8a:74:da: 8b:85:79:5c:6b:f4:c6:5b:e4:d8:f5:a6:a5:fe:44:ff:cc:97: 93:78:e7:2d:28:f2:dd:44:69:72:d8:cb:7f:2c:97:cd:54:f8: 5f:ab:4b:64:bc:d0:a6:1f:63:9a:3d:35:af:7a:aa:0e:42:8f: 7b:9d:c1:13:ad:4a:bc:77:9c:da:35:fb:48:65:28:2a:ca:1c: ba:fa:35:8b:8e:de:78:0d:54:cf:da:81:c3:5d:a1:5a:5b:97: 64:7b:4b:17:61:1e:5f:3d:68:a5:85:d3:73:96:52:cf:af:3d: ec:3a:24:c7:27:dc:e5:ba:3e:7a:0d:62:ae:e9:1c:d2:a5:92: 01:dc:c5:5f:57:c8:7e:74:ce:33:47:f8:a6:bc:e5:ca:c4:64: 9b:1c:40:c6:cb:3a:03:ed:fb:28:58:a2:7e:a8:bf:02:bf:ce: 22:b6:bd:0b:11:be:2c:77:e7:8c:50:a0:d9:c0:d6:6f:a5:d5: 54:08:9d:47:92:b0:a4:35:05:f8:3c:0a:00:db:a1:54:b3:3f: eb:73:5f:d3:96:97:46:0a:82:7d:06:a7:d7:f2:66:7b:21:fa: 22:cb:08:5d:13:a1:91:a0:28:f7:a9:8e:49:ce:c8:bc:4d:32: 14:c9:3d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNs8TR+9hPfELAwkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YWFlODJhOTAtZTcxMi00M2VlLThmZmMtOTAwYjI1OTdiZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Jss0hJ5nql2PExZmsB2Qx4NM8RztKugtsF oW81tVmv5UQDZ4fpEcFB5j7KRbZmHeJjTrB7+rqlvAfvYSIykv7HDbBfOJ7Yt20j lBRKKLqI9ytjdm6Uy4J/4tSSln3eCzrPLlXq6j5qdBEl13kO75bW9k7/IRBiFbzq jtazCivupBQ4P+gMpx4AWRwfJjdOboHbmgOufylpEU6LUDoGIpI7q+sw+Bh6HkLw 6zMaXRRbjigyodvAFIrl38hQazSFSWRUfIpdzcZRlWFqlTVRYnzTKfipXCSbn3ES PZhCRsfiCHgPvKx7yCpxgmCh0DtE8/a6mwyZE7hvfLwgg+9ouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtiFBgw28tFZ610DB61cluR1532MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODRjNmI1NWItZDkwMy0z M2U3LWE2NGYtMjkyYjhjM2Y3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfWLRN4/lTgjRKDqQgLmIp02ouFeVxr9MZb5Nj1pqX+RP/Ml5N45y0o 8t1EaXLYy38sl81U+F+rS2S80KYfY5o9Na96qg5Cj3udwROtSrx3nNo1+0hlKCrK HLr6NYuO3ngNVM/agcNdoVpbl2R7SxdhHl89aKWF03OWUs+vPew6JMcn3OW6PnoN Yq7pHNKlkgHcxV9XyH50zjNH+Ka85crEZJscQMbLOgPt+yhYon6ovwK/ziK2vQsR vix354xQoNnA1m+l1VQInUeSsKQ1Bfg8CgDboVSzP+tzX9OWl0YKgn0Gp9fyZnsh +iLLCF0ToZGgKPepjknOyLxNMhTJPSs= -----END CERTIFICATE-----Generated at Sat Oct 11 11:05:33 2025 by rpki-client