$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa File: 942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json) Hash identifier: OlliSJeiI+6V8qhT0aVbBgN3h/XvjIORFMIj+gl0T4c= Subject key identifier: A3:52:03:56:C1:29:D7:56:F9:3B:73:2F:D1:34:6A:64:8E:E3:7C:98 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584A3B7B010E348A482E944FF280 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 393249 IP address blocks: 128.189.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:01:0e:34:8a:48:2e:94:4f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=6fe45af1-6ae2-4be2-9508-676fa37a6624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:15:a2:dd:11:76:61:a8:93:cb:82:f9:22: b7:25:b1:65:82:cc:9a:7f:c1:d0:3d:6e:3f:91:fa: 9c:5b:c7:1c:6e:36:a1:2f:23:bc:82:5a:9c:cb:2d: b5:a1:4b:64:0c:cf:a0:31:db:a7:e3:95:3c:f7:db: d8:2d:c7:de:2a:87:ea:77:d1:bd:47:aa:2b:9a:4a: 11:04:7f:3b:07:1a:ea:25:cd:25:98:e4:c0:19:cf: 9a:a5:31:a5:8d:cb:12:21:a3:60:18:0c:8f:86:6f: 91:e1:00:f7:19:fe:1c:28:93:94:8e:b8:f4:5a:b1: 04:c0:bc:dd:99:86:36:b5:3c:5b:01:9f:25:01:11: 13:c6:f7:4a:9d:f4:1a:08:91:1c:c2:d6:1f:cb:89: ef:4c:f5:69:4d:88:47:09:23:de:7c:89:bd:5a:7d: 12:d7:2c:56:35:e3:de:be:c0:8b:e0:37:9c:bf:73: 8b:72:e5:3b:bf:a9:fc:53:93:97:c8:94:5c:48:48: ae:83:35:44:6f:c4:3f:02:92:e5:dc:28:e9:48:3b: 74:8d:a1:e7:9a:5c:3b:2b:63:2c:1b:a8:9c:d9:42: 6d:e9:c2:df:ca:00:99:70:68:bf:36:49:55:10:2b: e3:8f:fc:03:dd:bd:99:2f:e4:54:d1:9c:8e:17:2b: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:03:56:C1:29:D7:56:F9:3B:73:2F:D1:34:6A:64:8E:E3:7C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:48:4e:3d:86:15:c9:4e:d1:de:f2:cf:67:2b:b2:66:20:86: 93:d3:c5:27:0a:92:ca:2b:36:5d:d1:c6:d5:c7:1c:59:7d:0f: 4a:5a:31:04:40:11:b4:2e:0a:d2:1a:a4:99:7a:f0:a2:4c:bb: ac:d3:06:c6:df:89:ca:0e:ae:59:d6:83:88:73:c1:14:2c:a5: e4:66:2d:ce:a2:4d:45:d8:b4:a3:1a:41:08:f3:65:7b:ab:94: cf:e7:2c:29:f0:24:bf:ae:2c:1d:96:21:24:fa:a0:bf:a6:6c: f2:ea:8b:f4:c2:05:2f:2e:0a:34:53:a4:92:54:43:86:37:14: f3:31:a5:31:6d:c4:ab:a8:31:1f:24:bd:0c:e2:95:5c:c3:d7: 4c:df:75:2e:aa:00:91:cd:d0:e6:7e:94:d6:66:32:17:31:7c: c8:19:b6:ed:ac:15:8f:61:e2:92:69:9e:5a:5c:88:04:23:c3: 58:c9:db:f4:69:4a:f3:ca:8a:13:fc:4c:8e:3d:74:cc:91:03: cf:b8:12:b3:20:00:36:d0:f3:c0:c7:3f:d6:ab:6d:93:97:c5: fa:f0:d6:23:58:5a:b1:84:48:2f:32:4b:fe:b7:fb:e0:35:7e: 46:16:80:a2:6a:9c:60:1f:24:20:a2:fe:bc:6d:05:2b:81:a4: 83:e0:36:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewEONIpILpRP8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NmZlNDVhZjEtNmFlMi00YmUyLTk1MDgtNjc2ZmEzN2E2NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdcVot0RdmGok8uC+SK3JbFlgsyaf8HQPW4/ kfqcW8ccbjahLyO8glqcyy21oUtkDM+gMdun45U899vYLcfeKofqd9G9R6ormkoR BH87BxrqJc0lmOTAGc+apTGljcsSIaNgGAyPhm+R4QD3Gf4cKJOUjrj0WrEEwLzd mYY2tTxbAZ8lARETxvdKnfQaCJEcwtYfy4nvTPVpTYhHCSPefIm9Wn0S1yxWNePe vsCL4Decv3OLcuU7v6n8U5OXyJRcSEiugzVEb8Q/ApLl3CjpSDt0jaHnmlw7K2Ms G6ic2UJt6cLfygCZcGi/NklVECvjj/wD3b2ZL+RU0ZyOFytLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNSA1bBKddW+TtzL9E0amSO43yYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTQyZWM0MjUtMjI1OS0z Y2Q0LTk3ZjEtZjdlZmJjYjRmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9ITj2GFclO0d7yz2crsmYghpPTxScKksorNl3RxtXHHFl9D0paMQRA EbQuCtIapJl68KJMu6zTBsbficoOrlnWg4hzwRQspeRmLc6iTUXYtKMaQQjzZXur lM/nLCnwJL+uLB2WIST6oL+mbPLqi/TCBS8uCjRTpJJUQ4Y3FPMxpTFtxKuoMR8k vQzilVzD10zfdS6qAJHN0OZ+lNZmMhcxfMgZtu2sFY9h4pJpnlpciAQjw1jJ2/Rp SvPKihP8TI49dMyRA8+4ErMgADbQ88DHP9arbZOXxfrw1iNYWrGESC8yS/63++A1 fkYWgKJqnGAfJCCi/rxtBSuBpIPgNoo= -----END CERTIFICATE-----Generated at Sun Jun 29 22:32:09 2025 by rpki-client