$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa File: 7eb09365-a881-33b0-a012-5bc7ee1099db.roa (raw, json) Hash identifier: fF7C7u2a2FKr6EkDwKZns0iomEHnOB5gWcGe9K1Iaxk= Subject key identifier: 56:95:DB:D9:CD:2C:81:0C:E1:70:1A:14:19:A5:F2:40:6F:C1:E6:78 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584D091262B15FCA39A5DCAE2B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 271 IP address blocks: 128.189.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:62:b1:5f:ca:39:a5:dc:ae:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=544bd7ce-8749-4c39-86c3-f8243c114c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:30:de:30:4e:a6:d1:0c:9f:88:82:c1:11: 8d:e4:f2:27:36:b4:99:ad:6a:95:15:a2:48:ce:b2: 21:70:ae:91:7b:d3:91:7d:6a:bd:bd:9c:41:8d:35: 01:1f:15:2a:cc:d8:69:36:e7:df:5a:87:94:6c:42: 22:f6:8d:eb:f8:97:04:9f:da:e4:25:63:7a:88:00: ce:e0:ac:55:ae:12:39:fc:66:11:c7:53:dd:6d:36: f6:4d:be:1f:0f:e1:c9:d3:c8:d8:d4:9a:18:b7:d2: 08:de:17:1c:c2:3c:d0:b4:13:e0:2c:96:86:d6:d4: 01:72:65:41:02:d9:be:12:00:6b:0b:d5:c2:da:86: cb:74:43:68:7f:25:f1:51:62:3a:01:e5:74:10:1f: 86:2a:6f:49:59:cc:29:fe:4e:20:69:99:0a:e9:61: 38:b6:8c:20:6f:50:f8:e9:7f:f7:54:40:e8:4d:40: b9:9e:22:b9:60:8c:ec:40:be:08:a2:33:ab:fa:db: c3:7e:8f:41:2c:3d:2c:34:e9:30:74:27:b5:e1:e9: df:98:54:26:9a:23:df:f3:27:6a:26:dd:2a:eb:da: 14:32:56:23:7c:04:e5:6e:d8:4a:35:e2:6e:03:b0: 19:47:d4:5c:f1:31:a2:41:9f:25:22:86:5c:eb:36: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:95:DB:D9:CD:2C:81:0C:E1:70:1A:14:19:A5:F2:40:6F:C1:E6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:5b:a7:82:8d:16:ab:8c:a0:30:7c:35:fc:52:4a:05:83:e3: 0f:70:c2:40:b2:b1:45:c8:f8:2d:21:63:69:48:1a:61:40:e2: 5e:e1:1c:58:26:f1:65:16:eb:ac:4d:b6:41:55:20:0d:9b:be: b1:18:5d:7d:fa:45:d2:46:5b:c7:25:bb:dd:af:3c:23:34:2f: 56:67:65:34:e0:00:9e:94:93:71:da:06:b5:d5:e5:8b:07:1d: dc:23:b4:6d:03:bf:b8:cf:ce:c5:a3:f3:2b:4b:88:0e:b1:08: 26:3a:ef:e0:5e:49:f2:fb:11:31:a1:79:0d:0c:f7:83:dc:96: 62:fd:5c:01:4d:31:7b:a1:07:7c:72:b8:b8:8f:a7:4c:03:b1: f4:8f:fe:de:4a:c3:0c:4b:60:f0:8c:11:5b:32:cd:5f:29:7a: f0:c6:e6:2c:31:e5:a8:2d:43:cb:8d:05:9a:e9:41:c1:a4:f6: 7d:e4:df:8d:8a:ac:5e:a8:4a:7f:f6:c3:fa:d0:73:72:ee:95: 3f:b5:1a:e5:51:54:24:bb:0a:af:28:31:56:f8:e8:62:80:36: c5:cf:5d:66:91:87:3c:0e:90:8b:57:6a:44:08:9b:2e:ba:d0: 6d:27:7a:71:19:63:a3:3e:15:26:1b:a2:31:c2:45:69:a7:17: fb:2e:bc:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmKxX8o5pdyuK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NTQ0YmQ3Y2UtODc0OS00YzM5LTg2YzMtZjgyNDNjMTE0YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs8w3jBOptEMn4iCwRGN5PInNrSZrWqVFaJI zrIhcK6Re9ORfWq9vZxBjTUBHxUqzNhpNuffWoeUbEIi9o3r+JcEn9rkJWN6iADO 4KxVrhI5/GYRx1PdbTb2Tb4fD+HJ08jY1JoYt9II3hccwjzQtBPgLJaG1tQBcmVB Atm+EgBrC9XC2obLdENofyXxUWI6AeV0EB+GKm9JWcwp/k4gaZkK6WE4towgb1D4 6X/3VEDoTUC5niK5YIzsQL4IojOr+tvDfo9BLD0sNOkwdCe14enfmFQmmiPf8ydq Jt0q69oUMlYjfATlbthKNeJuA7AZR9Rc8TGiQZ8lIoZc6zbbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaV29nNLIEM4XAaFBml8kBvweZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2ViMDkzNjUtYTg4MS0z M2IwLWEwMTItNWJjN2VlMTA5OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgL0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlbp4KNFquMoDB8NfxSSgWD4w9wwkCysUXI+C0hY2lIGmFA4l7hHFgm 8WUW66xNtkFVIA2bvrEYXX36RdJGW8clu92vPCM0L1ZnZTTgAJ6Uk3HaBrXV5YsH HdwjtG0Dv7jPzsWj8ytLiA6xCCY67+BeSfL7ETGheQ0M94PclmL9XAFNMXuhB3xy uLiPp0wDsfSP/t5KwwxLYPCMEVsyzV8pevDG5iwx5agtQ8uNBZrpQcGk9n3k342K rF6oSn/2w/rQc3LulT+1GuVRVCS7Cq8oMVb46GKANsXPXWaRhzwOkItXakQImy66 0G0nenEZY6M+FSYbojHCRWmnF/suvIY= -----END CERTIFICATE-----Generated at Mon Mar 16 12:19:11 2026 by rpki-client