$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa File: 991cf70e-362f-3d84-afc7-74ab49a12348.roa (raw, json) Hash identifier: BiRe4VHVasZCUweHzrZQpFY/YWqCjcZErMos3rYWdwc= Subject key identifier: A0:D2:A2:57:51:8A:5D:7E:45:7F:0E:5F:5F:DC:1F:1E:70:80:3D:15 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F4987BDC6D9F88B581C6888C0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393249 IP address blocks: 128.189.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:bd:c6:d9:f8:8b:58:1c:68:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=57d57ded-43d1-4c81-9a83-83a3e71d9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:27:b1:7e:08:f8:c0:4a:68:1b:94:b8:cd:18: 9e:fc:c0:89:14:57:5d:85:9b:c4:aa:4c:8e:ec:bd: 1f:67:fc:a2:a5:de:2a:6a:9d:a9:59:d6:42:09:51: 88:72:10:ad:80:70:c8:15:37:44:46:46:7e:cd:49: b3:47:79:70:bf:d2:56:48:4e:65:bb:a2:3a:92:ea: 07:90:10:e6:42:6a:ea:10:f1:cf:83:ad:af:2a:e8: 1e:2e:fa:61:ae:f8:c7:b6:83:f4:98:cb:8b:bc:aa: a4:39:19:50:9e:96:e8:74:a2:3f:2f:0f:8e:73:65: 4f:f0:19:09:6a:dd:72:f6:c6:66:84:84:d6:ce:27: a4:fe:9a:3c:c7:41:76:b6:70:c0:ed:87:6d:42:a2: 5e:db:bf:da:26:81:a6:ab:87:1c:23:b9:a4:23:e3: 05:ef:a1:97:47:39:40:9a:83:1c:3e:19:5f:0f:fa: 8e:56:7f:c8:83:c0:85:27:e2:85:6c:78:4d:b6:8e: c4:55:31:e4:ba:94:a5:95:62:eb:83:cb:fa:61:ee: 45:29:f3:d7:1f:d7:65:83:ac:9d:a4:3c:9b:57:59: 2b:30:73:c1:93:56:f1:50:2a:d8:6b:91:0a:50:c3: 83:6f:00:eb:50:ac:20:5e:54:6d:81:b5:a4:4e:10: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D2:A2:57:51:8A:5D:7E:45:7F:0E:5F:5F:DC:1F:1E:70:80:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a5:8c:5c:90:72:2b:57:ac:5b:67:dc:58:a6:45:3b:b8:43: 7d:f3:1a:ef:ed:45:a7:7a:ff:50:99:e4:c1:b5:c2:de:84:3c: af:47:c6:c9:38:4d:6e:86:91:8e:6c:3c:a7:4a:4e:4f:f8:e0: 22:1e:ec:a6:e5:d4:36:0e:9f:29:9d:70:48:54:c1:69:a5:8a: c6:c4:0d:e8:ef:d3:1f:37:be:98:78:56:61:82:42:78:66:8c: 85:99:5f:b6:1c:ea:61:4d:6a:f0:08:b3:bf:ec:50:46:d0:83: 70:e5:b9:01:50:53:5b:c4:d8:c3:aa:ef:2e:a5:06:14:41:0f: be:c3:59:5e:89:31:8a:ac:b2:83:6c:f3:2e:ce:63:4b:2c:fc: 46:76:58:3d:4b:c7:58:dd:e6:18:35:71:f9:c4:93:be:f3:bf: d3:1d:84:23:ae:7f:d2:da:8c:4a:14:00:45:f7:e6:1f:32:be: 2c:3c:18:78:ae:8b:2f:b7:09:5d:1d:45:de:52:05:e7:fc:4f: 2a:83:00:5b:3b:c8:d2:5d:45:50:c4:a6:a8:6b:c4:bd:47:63: e5:e2:00:02:f7:16:f1:33:2e:36:55:21:b4:60:fa:c4:4e:cd: e1:1d:a7:68:1e:0c:00:88:7c:9e:56:86:5a:58:90:74:7f:a5: 41:94:d4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh73G2fiLWBxoiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTdkNTdkZWQtNDNkMS00YzgxLTlhODMtODNhM2U3MWQ5NjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCexfgj4wEpoG5S4zRie/MCJFFddhZvEqkyO 7L0fZ/yipd4qap2pWdZCCVGIchCtgHDIFTdERkZ+zUmzR3lwv9JWSE5lu6I6kuoH kBDmQmrqEPHPg62vKugeLvphrvjHtoP0mMuLvKqkORlQnpbodKI/Lw+Oc2VP8BkJ at1y9sZmhITWziek/po8x0F2tnDA7YdtQqJe27/aJoGmq4ccI7mkI+MF76GXRzlA moMcPhlfD/qOVn/Ig8CFJ+KFbHhNto7EVTHkupSllWLrg8v6Ye5FKfPXH9dlg6yd pDybV1krMHPBk1bxUCrYa5EKUMODbwDrUKwgXlRtgbWkThDjvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDSoldRil1+RX8OX1/cHx5wgD0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTkxY2Y3MGUtMzYyZi0z ZDg0LWFmYzctNzRhYjQ5YTEyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyljFyQcitXrFtn3FimRTu4Q33zGu/tRad6/1CZ5MG1wt6EPK9Hxsk4 TW6GkY5sPKdKTk/44CIe7Kbl1DYOnymdcEhUwWmlisbEDejv0x83vph4VmGCQnhm jIWZX7Yc6mFNavAIs7/sUEbQg3DluQFQU1vE2MOq7y6lBhRBD77DWV6JMYqssoNs 8y7OY0ss/EZ2WD1Lx1jd5hg1cfnEk77zv9MdhCOuf9LajEoUAEX35h8yviw8GHiu iy+3CV0dRd5SBef8TyqDAFs7yNJdRVDEpqhrxL1HY+XiAAL3FvEzLjZVIbRg+sRO zeEdp2geDACIfJ5WhlpYkHR/pUGU1Go= -----END CERTIFICATE-----Generated at Tue Oct 6 15:49:46 2026 by rpki-client