$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa File: 7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa (raw, json) Hash identifier: p4pgDJYotD32wO9UwJ/yW7nePd+Q8XTeLyI70L+4HQE= Subject key identifier: B7:F1:75:15:40:B4:11:5F:90:D7:F8:B9:06:0F:B4:25:37:D5:C8:AB Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F3FAD4046022A77D24A42B200 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 393249 IP address blocks: 128.189.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:40:46:02:2a:77:d2:4a:42:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=0cedebab-f909-4a49-891a-4803dd0f1f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:60:76:aa:14:c5:24:f5:de:da:96:28:31: 69:a2:b2:e3:df:53:25:de:8f:42:0c:e6:b8:6d:22: ea:5d:c1:10:6c:0b:3e:0e:cd:74:f1:04:c3:77:51: 74:c0:87:70:0f:b2:90:a6:53:74:44:7a:6d:e1:36: 4b:ca:b0:68:e1:2a:e1:8b:dd:56:28:21:de:2b:6a: cf:0a:53:41:17:70:24:da:ac:1d:1d:8a:43:72:c7: d5:c4:4d:24:5d:c9:2a:f9:9f:04:6e:81:17:02:c7: d8:93:eb:00:2e:d5:d3:9a:3c:8f:04:02:a0:a1:f2: a0:64:ad:c5:34:64:ff:9f:d5:be:c8:2c:f6:8c:d4: bb:e5:44:19:b9:d2:5c:c7:4b:e9:ae:cb:24:47:da: 40:cd:c2:57:f2:85:ee:8f:3c:c4:9f:dd:5f:b6:23: 9e:de:21:41:3a:e7:87:c3:aa:38:58:7f:d1:70:99: 15:82:bb:0a:0a:7f:76:cb:c2:32:3b:99:49:09:c7: 0a:1e:4c:ae:55:56:a8:90:6e:99:eb:76:84:f8:e8: 35:b4:f4:b8:91:b2:f1:e7:0c:35:fe:ee:cb:23:71: e5:dc:7f:a9:89:42:a0:4c:d9:b0:3f:6b:15:6a:8a: 21:ea:78:93:d6:24:d8:28:1d:41:67:38:42:65:5e: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F1:75:15:40:B4:11:5F:90:D7:F8:B9:06:0F:B4:25:37:D5:C8:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ae:7d:94:25:28:9a:6e:26:fb:07:70:67:6c:16:54:ec:62: fc:d3:30:20:97:88:6e:82:d9:2a:8a:60:f9:b7:23:84:28:a5: 1a:4f:d7:e5:af:1f:e8:13:14:20:9d:97:25:c8:d2:1e:42:32: 14:24:dc:6a:75:01:01:43:7a:47:f0:23:5f:0d:84:59:4b:ed: 90:87:0d:ab:54:96:1c:65:3c:26:33:05:66:43:7d:6b:91:a5: 11:2f:d7:88:73:bc:df:f3:d4:f0:fe:25:5d:d2:b8:cc:2f:91: 92:ed:5e:b1:4b:22:d2:c8:c3:fb:b6:78:b1:78:6d:9f:6e:c7: 6f:5f:ce:6b:a4:6e:73:22:09:b9:40:83:82:77:90:bd:13:7f: c8:5c:be:21:1b:6d:3b:20:43:06:f4:67:c1:8b:55:96:20:c2: cb:e3:45:89:fa:01:96:8c:ca:77:66:0c:a2:fd:49:3f:d1:cc: af:4f:6f:d7:84:9e:a2:38:e7:6c:3f:eb:96:dd:27:0b:51:4f: c2:18:22:e2:48:41:7b:46:2e:b6:df:da:3a:b8:98:53:16:6f: 22:71:c1:00:6b:6a:47:28:74:99:04:59:98:77:e3:e4:ff:9c: 0e:ab:14:6f:b5:91:d7:42:73:79:6f:f3:a7:4e:28:0c:19:2a: 6b:63:5c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUBGAip30kpCsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MGNlZGViYWItZjkwOS00YTQ5LTg5MWEtNDgwM2RkMGYxZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulhgdqoUxST13tqWKDFporLj31Ml3o9CDOa4 bSLqXcEQbAs+Ds108QTDd1F0wIdwD7KQplN0RHpt4TZLyrBo4Srhi91WKCHeK2rP ClNBF3Ak2qwdHYpDcsfVxE0kXckq+Z8EboEXAsfYk+sALtXTmjyPBAKgofKgZK3F NGT/n9W+yCz2jNS75UQZudJcx0vprsskR9pAzcJX8oXujzzEn91ftiOe3iFBOueH w6o4WH/RcJkVgrsKCn92y8IyO5lJCccKHkyuVVaokG6Z63aE+Og1tPS4kbLx5ww1 /u7LI3Hl3H+piUKgTNmwP2sVaooh6niT1iTYKB1BZzhCZV6yowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfxdRVAtBFfkNf4uQYPtCU31cirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2E2NTY1OWYtMjkxYS0z NDY4LWJmMGItNjMwZDdiN2U2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOufZQlKJpuJvsHcGdsFlTsYvzTMCCXiG6C2SqKYPm3I4QopRpP1+Wv H+gTFCCdlyXI0h5CMhQk3Gp1AQFDekfwI18NhFlL7ZCHDatUlhxlPCYzBWZDfWuR pREv14hzvN/z1PD+JV3SuMwvkZLtXrFLItLIw/u2eLF4bZ9ux29fzmukbnMiCblA g4J3kL0Tf8hcviEbbTsgQwb0Z8GLVZYgwsvjRYn6AZaMyndmDKL9ST/RzK9Pb9eE nqI452w/65bdJwtRT8IYIuJIQXtGLrbf2jq4mFMWbyJxwQBrakcodJkEWZh34+T/ nA6rFG+1kddCc3lv86dOKAwZKmtjXP8= -----END CERTIFICATE-----Generated at Mon Sep 28 21:41:55 2026 by rpki-client