$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa File: b9bb34a8-3fb4-3229-af76-b084da323030.roa (raw, json) Hash identifier: SlX9h6o/RfO8jBy2mVG+kF/fetcf6yJweyanAT1QNuQ= Subject key identifier: 23:48:04:D2:0F:B0:29:AF:30:18:6C:31:70:AF:51:76:8B:CF:B2:30 Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584B08ABF1B523F9689E94507D00 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 20 IP address blocks: 128.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:f1:b5:23:f9:68:9e:94:50:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=79147303-9487-46e8-b17a-74d58c92abcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:ae:87:a6:ea:43:7b:ac:9d:2c:46:df:5c: 0b:e8:c5:4e:80:4a:51:5d:52:c7:ad:53:f1:51:88: b2:41:9e:51:3c:06:1e:db:d2:0b:4d:81:74:c9:6d: 4f:a6:04:65:f0:30:6d:d3:d2:45:71:b1:ea:c7:dc: 9e:a4:e2:d5:b6:e1:5d:6c:11:9e:24:3e:05:f0:9a: 11:a1:a7:74:df:59:ed:65:9e:6f:fc:ca:73:13:1d: ab:97:33:b0:4a:ed:57:ac:24:82:dc:e8:54:f8:22: 1e:b1:75:02:34:50:55:f5:9c:a4:91:dd:6f:c8:1d: 0c:b8:7a:67:1d:ff:dc:4a:5a:e5:18:37:3c:a5:30: 4b:13:3f:31:ff:9e:56:05:52:4f:dc:72:80:fa:aa: 7c:f4:36:02:31:83:dd:cf:b0:1f:f7:7a:8b:49:40: bf:c2:34:9b:44:ee:51:ae:f4:0b:9b:a8:86:cf:07: 00:41:b3:f8:29:61:a4:86:02:c5:79:8e:12:59:20: a1:08:69:c0:e1:02:1e:f9:52:62:50:27:42:fc:ad: 60:1d:e9:9b:52:74:7d:fb:d2:b5:2e:0c:b3:ca:76: 25:4a:61:bf:1f:4a:79:61:42:9b:dd:b7:72:9f:08: d5:e3:81:33:a9:53:91:ad:c5:37:11:ca:5c:4e:16: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:48:04:D2:0F:B0:29:AF:30:18:6C:31:70:AF:51:76:8B:CF:B2:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 128.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:65:13:98:d8:2d:ad:63:3c:7d:01:26:f0:e1:5c:bc:c9:ae: 5d:29:9e:a7:87:ba:cb:ec:46:a6:e5:8a:1b:c7:c8:c5:17:f0: ac:c5:1d:31:8d:ec:64:e8:94:01:59:48:ca:0e:1b:d2:40:1d: 9d:0e:58:28:76:ed:44:1f:71:34:fb:2a:0d:35:bc:6b:76:16: 58:90:5f:b1:34:c1:cf:20:10:9e:02:3a:bd:67:fc:42:02:51: a4:c2:3d:1f:0f:40:37:cd:c7:57:d0:d6:60:f2:72:73:cf:57: eb:e3:3e:19:5a:12:c9:2f:9b:d9:05:1a:33:54:ed:7d:36:2b: cd:65:47:6c:f9:5a:99:4b:e2:ab:f7:3a:dd:ce:22:d9:93:58: ea:80:38:82:46:c6:68:0e:d6:eb:e2:ac:aa:91:05:89:81:0c: d0:f3:8e:cc:95:75:b1:c5:ba:43:77:3e:12:29:47:79:d7:ed: 9b:06:a6:bd:30:0f:cd:20:61:1c:55:86:64:69:82:b4:d6:1a: c3:6e:58:1b:6e:34:1a:83:98:fd:b6:54:bd:18:e0:84:fb:40: b7:07:c3:08:c0:c5:95:b1:c2:e2:7f:84:15:64:7f:13:1b:fe: b4:1d:48:76:8d:60:c6:ec:c0:6e:cd:2c:3e:ec:7e:87:77:36: e9:10:08:43 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsIq/G1I/lonpRQfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk NzkxNDczMDMtOTQ4Ny00NmU4LWIxN2EtNzRkNThjOTJhYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Cuh6bqQ3usnSxG31wL6MVOgEpRXVLHrVPx UYiyQZ5RPAYe29ILTYF0yW1PpgRl8DBt09JFcbHqx9yepOLVtuFdbBGeJD4F8JoR oad031ntZZ5v/MpzEx2rlzOwSu1XrCSC3OhU+CIesXUCNFBV9Zykkd1vyB0MuHpn Hf/cSlrlGDc8pTBLEz8x/55WBVJP3HKA+qp89DYCMYPdz7Af93qLSUC/wjSbRO5R rvQLm6iGzwcAQbP4KWGkhgLFeY4SWSChCGnA4QIe+VJiUCdC/K1gHembUnR9+9K1 LgyzynYlSmG/H0p5YUKb3bdynwjV44EzqVORrcU3EcpcThbEswIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCNIBNIPsCmvMBhsMXCvUXaLz7IwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvYjliYjM0YTgtM2ZiNC0z MjI5LWFmNzYtYjA4NGRhMzIzMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgJcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaGUTmNgtrWM8fQEm8OFcvMmuXSmep4e6y+xGpuWKG8fIxRfwrMUdMY3s ZOiUAVlIyg4b0kAdnQ5YKHbtRB9xNPsqDTW8a3YWWJBfsTTBzyAQngI6vWf8QgJR pMI9Hw9AN83HV9DWYPJyc89X6+M+GVoSyS+b2QUaM1TtfTYrzWVHbPlamUviq/c6 3c4i2ZNY6oA4gkbGaA7W6+KsqpEFiYEM0POOzJV1scW6Q3c+EilHedftmwamvTAP zSBhHFWGZGmCtNYaw25YG240GoOY/bZUvRjghPtAtwfDCMDFlbHC4n+EFWR/Exv+ tB1Ido1gxuzAbs0sPux+h3c26RAIQw== -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:25 2025 by rpki-client