$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa File: 7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa (raw, json) Hash identifier: /byP9p+YmVIQYcrsdNljQ1XGWQ9diBEh4I/3P+vejpk= Subject key identifier: 3D:6F:D1:1E:5F:44:0B:E5:EE:07:F8:7A:A5:A2:09:A4:8A:08:4C:7C Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584DBD05A0117CDAB715E60A3780 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 393249 IP address blocks: 128.189.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a0:11:7c:da:b7:15:e6:0a:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=f2f3f822-106e-4719-bbc0-f04a2810e2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:a4:c7:73:47:e4:0b:c9:e4:f8:5a:29:cf: e4:43:7f:ce:0a:c2:99:e8:6b:58:ae:b8:25:8d:7e: ab:58:4a:34:38:a3:78:bd:d6:f9:66:60:10:49:b3: 19:c7:f3:62:5d:96:70:15:0a:15:77:a5:ec:18:ad: 59:16:a3:c8:a4:7b:2c:8f:1f:e7:e0:75:da:20:a3: 39:86:e3:f3:88:7a:f9:4e:7b:ce:2c:b1:87:0d:02: f8:2c:9a:b2:d4:15:4c:1f:2a:6d:d2:22:79:b9:a2: 91:0d:f0:68:96:a0:1b:2c:f5:77:c2:b3:18:1e:aa: 7e:6f:4b:aa:b0:ff:2d:2c:8e:f1:e0:b0:63:e0:03: d2:0a:51:55:84:f1:73:34:76:a1:fb:bd:4d:a7:d6: fe:b1:aa:9f:ce:db:23:cd:2a:b5:04:29:3d:c4:79: d1:c9:cf:7b:1a:f0:73:bd:8e:c0:16:1d:13:45:a5: b2:8c:a7:6f:4f:bd:77:67:41:e1:ec:44:53:d4:88: 6c:8e:6b:2e:f2:22:40:be:88:aa:12:11:b5:5a:86: 0c:c8:d8:c6:3b:6a:59:cf:7a:8f:fa:85:c0:d6:28: d5:31:32:0a:e2:1a:2b:81:95:fe:c4:df:35:c9:d6: ce:b9:78:aa:f5:41:02:83:ce:3c:93:57:27:9f:89: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6F:D1:1E:5F:44:0B:E5:EE:07:F8:7A:A5:A2:09:A4:8A:08:4C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7a65659f-291a-3468-bf0b-630d7b7e6d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:16:fa:90:ea:70:34:e4:08:aa:68:4d:5f:81:08:9f:07:4f: c6:de:e5:84:12:32:0b:1d:47:d9:86:3f:91:71:6f:dc:be:77: 40:60:c2:dd:9b:68:48:10:36:04:3f:6d:d8:29:66:0a:ba:8d: d9:1a:26:c3:87:ba:6b:d7:da:e4:55:35:1a:29:db:36:4f:7a: 5a:d6:59:01:3d:96:92:37:e3:f1:3e:24:71:79:b5:75:dc:60: bc:bc:2b:f9:e1:18:52:c7:b8:75:b0:22:9f:c8:5d:72:3a:88: 81:e5:6a:74:8d:a0:1c:e1:5a:18:c2:b2:49:24:d2:e9:8f:cb: c3:34:dd:0e:8e:79:ae:e1:d0:4c:1c:ec:b8:23:4d:dd:ca:ba: e3:2e:c1:16:9a:bf:bc:4a:a4:be:d1:f9:af:23:4d:88:d0:ba: 3f:0c:a3:57:2e:37:7b:5e:7c:b0:3f:72:5b:ba:ed:73:5f:78: e7:3a:20:55:2b:ef:a2:59:02:90:4c:b1:3d:f9:04:6c:63:8b: 12:af:fa:35:7b:cb:e2:d2:de:03:71:96:99:50:3f:2e:f8:e9: aa:80:42:0a:ab:e6:a1:5e:9c:08:1a:ef:29:d6:59:11:27:ca: a2:f9:a0:07:24:16:d1:53:16:f6:38:24:9a:e4:4d:a0:f6:fa: 65:c3:3f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaARfNq3FeYKN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjJmM2Y4MjItMTA2ZS00NzE5LWJiYzAtZjA0YTI4MTBlMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivGkx3NH5AvJ5PhaKc/kQ3/OCsKZ6GtYrrgl jX6rWEo0OKN4vdb5ZmAQSbMZx/NiXZZwFQoVd6XsGK1ZFqPIpHssjx/n4HXaIKM5 huPziHr5TnvOLLGHDQL4LJqy1BVMHypt0iJ5uaKRDfBolqAbLPV3wrMYHqp+b0uq sP8tLI7x4LBj4APSClFVhPFzNHah+71Np9b+saqfztsjzSq1BCk9xHnRyc97GvBz vY7AFh0TRaWyjKdvT713Z0Hh7ERT1Ihsjmsu8iJAvoiqEhG1WoYMyNjGO2pZz3qP +oXA1ijVMTIK4horgZX+xN81ydbOuXiq9UECg848k1cnn4lNJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1v0R5fRAvl7gf4eqWiCaSKCEx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2E2NTY1OWYtMjkxYS0z NDY4LWJmMGItNjMwZDdiN2U2ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMW+pDqcDTkCKpoTV+BCJ8HT8be5YQSMgsdR9mGP5Fxb9y+d0Bgwt2b aEgQNgQ/bdgpZgq6jdkaJsOHumvX2uRVNRop2zZPelrWWQE9lpI34/E+JHF5tXXc YLy8K/nhGFLHuHWwIp/IXXI6iIHlanSNoBzhWhjCskkk0umPy8M03Q6Oea7h0Ewc 7LgjTd3KuuMuwRaav7xKpL7R+a8jTYjQuj8Mo1cuN3tefLA/clu67XNfeOc6IFUr 76JZApBMsT35BGxjixKv+jV7y+LS3gNxlplQPy746aqAQgqr5qFenAga7ynWWREn yqL5oAckFtFTFvY4JJrkTaD2+mXDP08= -----END CERTIFICATE-----Generated at Wed May 13 14:38:44 2026 by rpki-client