$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/52133986-3bd8-3439-83c2-831da28139e7.roa File: 52133986-3bd8-3439-83c2-831da28139e7.roa (raw, json) Hash identifier: F6D91StAIwjga1DP6vXpCX2jYji6Sf292umYGs5Cajo= Subject key identifier: B6:AD:80:4C:E2:E9:0F:28:7B:9E:DF:83:DD:E8:AE:53:52:77:74:6B Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584AF2326B2E87463C1A58D0CEE0 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/52133986-3bd8-3439-83c2-831da28139e7.roa Signing time: Fri 22 Aug 2025 20:44:45 +0000 ROA not before: Fri 22 Aug 2025 20:44:45 +0000 ROA not after: Thu 20 Nov 2025 21:44:45 +0000 asID: 19901 IP address blocks: 9.138.128.0/18 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:32:6b:2e:87:46:3c:1a:58:d0:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Aug 22 20:44:45 2025 GMT Not After : Nov 20 21:44:45 2025 GMT Subject: CN=5d79d3c5-e72d-4eab-96c9-b35a182f6f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:40:95:5c:45:05:82:7f:a8:ff:f2:73:99: ac:ec:b6:58:dc:6b:e4:f3:f5:40:79:a0:91:c5:6d: 8f:bb:80:24:0c:81:b9:76:a6:5f:be:5d:39:82:85: 38:03:01:fe:e5:35:78:c7:c0:ef:9b:96:72:f4:3d: a6:4c:d6:90:6a:e1:fc:01:62:99:45:bf:9b:39:70: 7b:66:b5:7d:f2:bc:0c:72:42:13:40:d4:6c:92:43: 1e:1d:31:b5:ce:5d:bb:72:5a:17:5f:9d:6f:c7:b5: 7e:42:d1:1f:aa:56:85:60:e0:08:0f:c1:f9:7e:f4: 88:3e:3e:2d:65:a3:47:a4:7a:d5:a3:36:3c:af:45: 9f:b3:26:e7:30:16:89:64:17:b3:57:06:ff:df:64: bc:a5:dc:ba:c3:02:99:de:6f:5e:5a:71:7a:01:41: 5f:43:2e:30:09:c2:d1:83:8a:dd:99:ab:59:49:13: ba:70:0e:fc:96:38:52:2a:55:67:3d:c7:5c:70:9d: 23:ee:12:67:5c:cc:51:fc:80:03:3f:b8:da:00:a5: f4:9e:76:9b:b8:0b:47:02:96:df:1e:94:c0:42:c0: b6:09:64:f2:5d:dd:10:7e:60:cd:5b:a8:fd:5c:d1: b0:ba:56:36:cc:56:14:cd:47:2d:17:6c:6f:8e:bb: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AD:80:4C:E2:E9:0F:28:7B:9E:DF:83:DD:E8:AE:53:52:77:74:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/52133986-3bd8-3439-83c2-831da28139e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 9.138.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ca:3c:f6:a2:6d:c9:ff:7b:dc:97:9c:e5:cc:b0:d1:67:c1: a6:1f:0c:ca:e4:45:10:50:7e:2f:87:43:11:1b:21:1f:a0:b7: 11:d8:8c:38:fe:23:3f:a7:24:f3:01:b1:66:b6:ea:4c:4f:22: 8d:08:7b:e7:af:70:49:f0:a6:95:18:70:09:e1:2b:6e:37:5e: df:e4:4a:27:06:4c:25:bd:03:64:2c:24:9f:84:07:15:87:25: b0:7b:28:45:6c:04:be:d6:ce:97:24:7d:07:55:d7:e5:b1:86: 00:e7:6c:04:4a:e7:44:c0:96:9d:4f:ad:35:a4:0b:62:5b:84: 8c:2c:5f:27:8e:05:5d:da:ae:65:4c:f2:77:51:26:46:c1:22: a3:be:bd:32:60:8a:e7:65:26:a7:01:36:b2:ca:12:73:7e:b3: 39:61:de:8b:a5:42:63:a1:7d:c9:3e:64:1c:e0:5e:b8:12:79: 44:1a:9e:0e:87:3a:57:34:ad:8b:ca:6a:54:2d:40:b4:30:2c: 0b:6b:09:e0:17:16:1b:d4:f7:8a:5b:85:fe:f3:e8:f3:1f:8d: 8f:bf:5a:b6:5f:65:a3:9e:44:05:7b:cb:18:5a:bb:c8:9d:76: d4:9d:d4:52:f8:26:74:58:7b:9c:f7:60:e6:5b:57:80:a4:46: 14:b4:fc:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryMmsuh0Y8GljQzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MDgyMjIwNDQ0NVoXDTI1MTEyMDIxNDQ0NVowLzEtMCsGA1UEAxMk NWQ3OWQzYzUtZTcyZC00ZWFiLTk2YzktYjM1YTE4MmY2ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKBAlVxFBYJ/qP/yc5ms7LZY3Gvk8/VAeaCR xW2Pu4AkDIG5dqZfvl05goU4AwH+5TV4x8Dvm5Zy9D2mTNaQauH8AWKZRb+bOXB7 ZrV98rwMckITQNRskkMeHTG1zl27cloXX51vx7V+QtEfqlaFYOAID8H5fvSIPj4t ZaNHpHrVozY8r0WfsybnMBaJZBezVwb/32S8pdy6wwKZ3m9eWnF6AUFfQy4wCcLR g4rdmatZSRO6cA78ljhSKlVnPcdccJ0j7hJnXMxR/IADP7jaAKX0nnabuAtHApbf HpTAQsC2CWTyXd0QfmDNW6j9XNGwulY2zFYUzUctF2xvjruChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLatgEzi6Q8oe57fg93orlNSd3RrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNTIxMzM5ODYtM2JkOC0z NDM5LTgzYzItODMxZGEyODEzOWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGCYqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3KPPaibcn/e9yXnOXMsNFnwaYfDMrkRRBQfi+HQxEbIR+gtxHYjDj+ Iz+nJPMBsWa26kxPIo0Ie+evcEnwppUYcAnhK243Xt/kSicGTCW9A2QsJJ+EBxWH JbB7KEVsBL7WzpckfQdV1+WxhgDnbARK50TAlp1PrTWkC2JbhIwsXyeOBV3armVM 8ndRJkbBIqO+vTJgiudlJqcBNrLKEnN+szlh3oulQmOhfck+ZBzgXrgSeUQang6H Olc0rYvKalQtQLQwLAtrCeAXFhvU94pbhf7z6PMfjY+/WrZfZaOeRAV7yxhau8id dtSd1FL4JnRYe5z3YOZbV4CkRhS0/Eo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:43 2025 by rpki-client