$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa File: 7eb09365-a881-33b0-a012-5bc7ee1099db.roa (raw, json) Hash identifier: SGdtjDvG9tGzyKd+TG+gqyX6i8mxSo12jAwKaQLMgAc= Subject key identifier: E3:A7:2F:B3:F8:09:A1:43:42:F9:CA:A8:C2:08:C6:95:61:BF:87:A4 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F497438AD1F5CCBD6BD6A93C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 128.189.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:38:ad:1f:5c:cb:d6:bd:6a:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b9f3e95-0e29-45d6-a326-964715ca0c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:9c:a1:5a:be:5f:8b:55:11:ee:fd:0a:48: 92:4f:bd:a3:97:e0:0d:3a:9a:36:ee:8e:eb:1a:a8: 6a:58:b5:f0:ad:c9:91:82:b2:8d:21:97:f9:66:cc: ef:dc:86:78:75:ee:bd:f3:32:12:70:11:9f:84:8a: 9f:3b:a4:79:ad:3c:94:d0:55:36:0e:5f:55:f6:d0: e6:95:93:1e:13:1c:7c:b7:cf:1b:ee:be:e5:82:cf: 3b:fd:5a:e6:11:67:d4:14:d0:9b:a0:27:81:d3:1b: 6e:c6:55:c6:52:2e:5e:06:31:7d:43:fa:4c:84:6a: e2:c0:12:8f:10:ed:3e:e6:b9:81:46:17:43:94:e9: 8d:82:5a:bc:2a:b7:e2:c0:64:88:3c:5f:34:11:e8: a5:e7:0f:cc:cb:6b:72:a8:f6:29:4a:95:51:33:4e: b5:a7:55:23:6a:42:b7:fb:2b:b0:89:eb:dc:07:60: ef:f2:df:e1:0d:49:70:2d:b0:f7:bd:54:f4:5a:f8: 75:02:05:63:ad:50:27:f2:4f:ce:e0:2b:de:b4:53: e1:c6:c5:a5:8c:53:26:cd:1f:61:ef:16:33:b0:b7: cb:f5:2f:57:81:46:49:35:a4:e5:2e:cb:ce:be:3f: 14:a9:cb:39:77:5c:c5:b5:f3:6b:7f:08:de:af:a1: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A7:2F:B3:F8:09:A1:43:42:F9:CA:A8:C2:08:C6:95:61:BF:87:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7eb09365-a881-33b0-a012-5bc7ee1099db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1e:5f:14:90:70:58:1b:24:07:e9:79:7b:32:af:9d:c5:41: 1f:ae:88:2e:53:d9:47:18:53:4b:f7:7b:c9:be:5b:a8:7d:b4: ac:a3:c8:56:73:d5:a0:cc:eb:80:c5:0b:b5:73:6f:a2:21:01: 26:06:26:63:f0:03:0f:79:bc:7e:d8:1c:ef:fb:0d:4c:53:18: a7:88:a1:4d:e6:05:ab:35:fd:01:da:a5:c5:a3:f4:ec:4d:64: 12:ec:c3:bb:26:64:7a:18:0f:b9:e9:a6:fa:01:b8:fd:69:20: d3:08:0d:bd:12:26:dd:c3:f4:ae:9b:99:1a:fe:15:4f:9d:c0: bb:a3:de:8d:39:8a:f0:f8:9c:8b:e2:e9:86:ce:ad:d8:83:68: e4:b4:98:b7:5d:c2:f5:e1:b3:32:c3:2d:61:fa:a4:27:96:b5: d8:88:7b:43:86:0e:0f:2a:c1:6e:73:3f:a9:97:71:17:d1:5c: 8e:af:da:52:62:3f:94:49:39:49:30:35:0b:78:86:f9:78:61: 63:bc:72:e5:d5:c8:31:8d:8f:c8:35:2f:0f:a3:34:46:bc:77: 61:8c:f0:a6:9d:9b:65:14:37:e5:07:fc:51:ce:2b:cf:60:17: 60:22:d1:c0:64:45:07:38:63:b4:9a:bf:a1:24:c8:99:03:f4: 34:f9:2e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDitH1zL1r1qk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGI5ZjNlOTUtMGUyOS00NWQ2LWEzMjYtOTY0NzE1Y2EwYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQycoVq+X4tVEe79CkiST72jl+ANOpo27o7r GqhqWLXwrcmRgrKNIZf5Zszv3IZ4de698zIScBGfhIqfO6R5rTyU0FU2Dl9V9tDm lZMeExx8t88b7r7lgs87/VrmEWfUFNCboCeB0xtuxlXGUi5eBjF9Q/pMhGriwBKP EO0+5rmBRhdDlOmNglq8KrfiwGSIPF80Eeil5w/My2tyqPYpSpVRM061p1UjakK3 +yuwievcB2Dv8t/hDUlwLbD3vVT0Wvh1AgVjrVAn8k/O4CvetFPhxsWljFMmzR9h 7xYzsLfL9S9XgUZJNaTlLsvOvj8Uqcs5d1zFtfNrfwjer6EpkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOnL7P4CaFDQvnKqMIIxpVhv4ekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2ViMDkzNjUtYTg4MS0z M2IwLWEwMTItNWJjN2VlMTA5OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgL0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgeXxSQcFgbJAfpeXsyr53FQR+uiC5T2UcYU0v3e8m+W6h9tKyjyFZz 1aDM64DFC7Vzb6IhASYGJmPwAw95vH7YHO/7DUxTGKeIoU3mBas1/QHapcWj9OxN ZBLsw7smZHoYD7nppvoBuP1pINMIDb0SJt3D9K6bmRr+FU+dwLuj3o05ivD4nIvi 6YbOrdiDaOS0mLddwvXhszLDLWH6pCeWtdiIe0OGDg8qwW5zP6mXcRfRXI6v2lJi P5RJOUkwNQt4hvl4YWO8cuXVyDGNj8g1Lw+jNEa8d2GM8Kadm2UUN+UH/FHOK89g F2Ai0cBkRQc4Y7Sav6EkyJkD9DT5LlM= -----END CERTIFICATE-----Generated at Sat Oct 3 13:52:34 2026 by rpki-client