$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa File: 84c6b55b-d903-33e7-a64f-292b8c3f765b.roa (raw, json) Hash identifier: w+8MmT7QxWZhn5F7kQFZWuTudpdu2DXtLdf2CG4M//0= Subject key identifier: C3:79:1A:25:32:15:93:7D:E6:28:43:C1:EF:75:53:1D:FA:92:D2:07 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584DBD05A040A69671ECD5766B80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 393249 IP address blocks: 128.189.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a0:40:a6:96:71:ec:d5:76:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=b76a81e8-e46e-46d7-8df2-9afea974b77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:0f:4b:c8:ce:91:fe:b7:e0:db:74:9b:fa: f6:b0:af:1f:b2:b3:ff:66:60:cf:c9:72:9a:48:31: 67:66:40:b9:59:f6:3c:5b:77:8e:31:7b:06:aa:8a: 7c:9c:25:7c:32:34:d7:e8:4d:51:04:0d:eb:e4:67: 23:2f:b9:77:99:dc:86:04:bc:5e:82:3e:e6:7e:ef: c0:16:d5:3c:b0:f5:d5:eb:50:dc:69:4c:09:a1:b9: 88:14:2e:f6:60:95:a3:50:44:ea:17:dc:ba:11:d2: a9:28:ea:bf:55:ad:ef:6f:94:83:50:a9:c6:bd:81: fa:c9:40:4f:b4:41:1e:52:bc:4c:26:95:06:b2:19: 07:08:0a:26:a5:9f:53:95:2c:85:45:9d:41:90:e5: c4:22:cf:d6:84:0e:78:a3:c4:21:df:08:34:97:ff: b7:a3:09:72:4f:68:63:b2:8d:38:c4:2a:dc:21:47: 2b:3a:d4:36:2c:66:97:94:c7:72:d9:12:65:fe:e0: 6c:48:f4:ea:5c:92:df:e0:fa:2b:8a:d1:5d:a1:9f: e6:ac:1c:33:65:24:4a:5b:a3:72:a9:41:87:74:4f: ef:21:c6:62:2d:70:23:40:0e:b7:21:d4:7f:31:96: 38:76:e9:06:e3:6a:ee:40:50:f6:88:b9:3b:c2:c0: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:1A:25:32:15:93:7D:E6:28:43:C1:EF:75:53:1D:FA:92:D2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1e:64:b6:93:ec:7c:8b:78:37:62:21:ba:9d:84:e4:f6:42: 31:31:63:0b:59:ee:2d:9d:b4:cf:75:39:89:f6:18:89:fe:36: c6:f4:a4:39:d2:8c:17:ac:b3:8f:b2:f3:40:dd:05:68:7b:98: f3:92:02:2a:f8:40:0a:99:13:e2:d3:8d:87:6f:4d:f9:e8:4c: 5c:bb:68:46:f2:2d:f7:48:1b:3b:28:bc:85:71:32:0c:2e:c1: d2:c7:ef:48:e2:c6:3a:14:bc:8a:fd:df:af:49:49:f4:67:32: 98:8f:f6:9c:f4:65:60:ad:6e:aa:8b:0c:84:56:70:20:a4:3b: 74:e3:8b:9f:a4:c0:08:f6:86:33:68:14:00:fd:ac:47:65:d5: 91:ea:51:c3:fe:47:44:af:98:1f:f5:87:af:09:f9:75:db:ee: 81:e9:bd:55:ba:3f:d3:b3:d7:c1:f7:79:d6:b3:8a:44:42:c1: c0:8c:b0:c1:20:23:77:d5:3a:48:6e:5b:c5:5f:8a:1b:8a:90: aa:9e:a4:9e:0a:19:c2:73:71:1e:12:f9:38:ea:76:95:80:30: 02:ba:97:76:9c:d0:58:de:6e:1e:8c:cb:b3:8c:9c:35:1a:93: 5c:93:b1:71:23:48:af:16:a9:4c:c4:45:a8:98:f5:b0:47:8e: e5:24:29:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaBAppZx7NV2a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk Yjc2YTgxZTgtZTQ2ZS00NmQ3LThkZjItOWFmZWE5NzRiNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitEPS8jOkf634Nt0m/r2sK8fsrP/ZmDPyXKa SDFnZkC5WfY8W3eOMXsGqop8nCV8MjTX6E1RBA3r5GcjL7l3mdyGBLxegj7mfu/A FtU8sPXV61DcaUwJobmIFC72YJWjUETqF9y6EdKpKOq/Va3vb5SDUKnGvYH6yUBP tEEeUrxMJpUGshkHCAompZ9TlSyFRZ1BkOXEIs/WhA54o8Qh3wg0l/+3owlyT2hj so04xCrcIUcrOtQ2LGaXlMdy2RJl/uBsSPTqXJLf4PoritFdoZ/mrBwzZSRKW6Ny qUGHdE/vIcZiLXAjQA63IdR/MZY4dukG42ruQFD2iLk7wsDaPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN5GiUyFZN95ihDwe91Ux36ktIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODRjNmI1NWItZDkwMy0z M2U3LWE2NGYtMjkyYjhjM2Y3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoeZLaT7HyLeDdiIbqdhOT2QjExYwtZ7i2dtM91OYn2GIn+Nsb0pDnS jBess4+y80DdBWh7mPOSAir4QAqZE+LTjYdvTfnoTFy7aEbyLfdIGzsovIVxMgwu wdLH70jixjoUvIr9369JSfRnMpiP9pz0ZWCtbqqLDIRWcCCkO3Tji5+kwAj2hjNo FAD9rEdl1ZHqUcP+R0SvmB/1h68J+XXb7oHpvVW6P9Oz18H3edazikRCwcCMsMEg I3fVOkhuW8VfihuKkKqepJ4KGcJzcR4S+TjqdpWAMAK6l3ac0Fjebh6My7OMnDUa k1yTsXEjSK8WqUzERaiY9bBHjuUkKfs= -----END CERTIFICATE-----Generated at Wed May 13 15:54:16 2026 by rpki-client