$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa File: 942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json) Hash identifier: eEGaC0R/7gw5Pu7ek+qqhKpoGaPLKA56QfZ4qgCwDXA= Subject key identifier: B4:4C:43:9D:12:AB:8D:C8:1D:2D:CE:09:C1:DF:23:D7:AF:82:93:FE Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584DBD05A01D6E58AE96223DD880 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 393249 IP address blocks: 128.189.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a0:1d:6e:58:ae:96:22:3d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=69ab9844-4723-4e93-aa0d-42c9b4753b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:a7:4b:85:b2:d8:dd:02:2f:6f:67:c5:87: bd:ed:de:85:0e:56:57:01:14:2a:21:83:a8:8d:32: 87:a7:bb:f4:47:73:9e:e6:c8:8c:9d:04:b5:b6:0d: ee:af:f2:2d:cb:35:fb:54:9e:d1:75:97:07:70:3e: 7c:8b:92:98:ae:fb:f9:96:9a:ab:b9:9b:26:bf:79: 3b:46:45:c8:16:f8:79:b8:fd:9a:0f:44:40:ca:c4: ac:76:bb:57:06:58:e6:b0:77:b0:ba:a1:51:0b:e6: 93:cd:8d:18:cb:4f:27:f3:c6:42:cb:22:d8:16:87: 32:bc:0d:7b:02:fa:3b:b6:6c:84:be:14:72:70:9b: 20:46:71:88:54:ec:37:4d:3a:4a:ad:7d:35:0f:63: 75:46:19:4b:09:68:92:d4:65:11:32:81:35:c1:bd: 40:7a:60:35:c3:03:8a:b2:70:4e:66:2d:e5:47:8a: 54:9e:08:1b:cf:9b:c1:f7:5a:ec:8c:87:72:1d:02: 40:f1:5e:bf:eb:9b:51:47:0e:44:17:2d:b0:56:b1: 1a:7c:df:ab:3c:29:fa:b0:1a:14:f9:00:c4:1a:e5: f5:6b:30:8b:f1:58:3d:74:82:f7:13:a4:10:c3:7f: e1:c9:aa:f0:1d:43:05:55:db:21:ec:8c:ee:40:d5: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4C:43:9D:12:AB:8D:C8:1D:2D:CE:09:C1:DF:23:D7:AF:82:93:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:c9:89:77:26:7e:5f:11:dd:fd:b2:b2:45:b2:02:19:b9:ac: ab:42:94:7a:b0:63:af:41:f5:40:0b:96:35:a9:b1:49:7a:d5: 6a:ab:b1:ad:6f:77:4d:4b:e3:a5:ea:95:ec:12:09:99:f5:a9: 7f:2e:c5:40:65:da:33:64:ec:0f:40:16:5a:f4:59:4a:4b:5d: d7:03:18:27:0f:09:90:6b:ab:93:bc:1e:db:51:36:3a:2c:02: 0c:61:8f:fc:12:c4:8f:96:1c:f3:ff:1c:93:bb:17:d4:b5:72: 86:ed:79:39:6a:b6:52:f0:c6:a5:20:2e:38:8d:b2:2f:7c:81: 9a:ae:61:64:c3:91:73:31:81:a7:d9:3b:86:d0:ed:27:17:c0: 1a:68:08:5d:b7:e5:eb:13:90:e1:bd:ca:de:3b:a4:a0:97:cc: 6f:f0:98:dc:c1:91:05:84:f9:40:ae:31:16:ad:f5:bb:da:2c: 02:be:e9:0c:4e:2e:57:1a:d6:4e:e9:84:b4:0c:f1:12:6a:1f: dd:36:0c:64:42:35:58:3b:a5:1c:0f:0a:9b:fd:b6:60:56:f8: 33:fb:da:83:70:9b:33:06:ee:ef:71:30:27:c3:f5:3e:a3:93: 14:c0:a7:13:73:71:54:b0:00:37:08:0b:1f:aa:b9:80:cb:d2: c1:91:2d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaAdbliuliI92IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NjlhYjk4NDQtNDcyMy00ZTkzLWFhMGQtNDJjOWI0NzUzYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z2nS4Wy2N0CL29nxYe97d6FDlZXARQqIYOo jTKHp7v0R3Oe5siMnQS1tg3ur/ItyzX7VJ7RdZcHcD58i5KYrvv5lpqruZsmv3k7 RkXIFvh5uP2aD0RAysSsdrtXBljmsHewuqFRC+aTzY0Yy08n88ZCyyLYFocyvA17 Avo7tmyEvhRycJsgRnGIVOw3TTpKrX01D2N1RhlLCWiS1GURMoE1wb1AemA1wwOK snBOZi3lR4pUnggbz5vB91rsjIdyHQJA8V6/65tRRw5EFy2wVrEafN+rPCn6sBoU +QDEGuX1azCL8Vg9dIL3E6QQw3/hyarwHUMFVdsh7IzuQNXGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRMQ50Sq43IHS3OCcHfI9evgpP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTQyZWM0MjUtMjI1OS0z Y2Q0LTk3ZjEtZjdlZmJjYjRmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbJiXcmfl8R3f2yskWyAhm5rKtClHqwY69B9UALljWpsUl61Wqrsa1v d01L46XqlewSCZn1qX8uxUBl2jNk7A9AFlr0WUpLXdcDGCcPCZBrq5O8HttRNjos Agxhj/wSxI+WHPP/HJO7F9S1cobteTlqtlLwxqUgLjiNsi98gZquYWTDkXMxgafZ O4bQ7ScXwBpoCF235esTkOG9yt47pKCXzG/wmNzBkQWE+UCuMRat9bvaLAK+6QxO Llca1k7phLQM8RJqH902DGRCNVg7pRwPCpv9tmBW+DP72oNwmzMG7u9xMCfD9T6j kxTApxNzcVSwADcICx+quYDL0sGRLQ4= -----END CERTIFICATE-----Generated at Wed May 13 15:32:28 2026 by rpki-client