$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa File: 12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa (raw, json) Hash identifier: y/8BJqigZ9xXKZZT5qJZh/N//GgOhLaIVxiCJEIIqNs= Subject key identifier: 2B:2B:7E:A0:DD:02:2E:C3:AC:60:BE:0C:68:85:91:0A:C3:AE:55:21 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A162E070AD1AF490EEDE00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 128.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:62:e0:70:ad:1a:f4:90:ee:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=88e305ef-471f-431f-902b-5c9efdbb3fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:2c:e6:4f:9a:b9:a1:c8:ac:b2:28:ac:10: 8d:2e:88:3b:00:70:c1:82:c1:f4:5d:5c:e8:bd:60: ce:a5:cf:ae:f6:d2:a5:89:e5:1a:5d:eb:8e:70:f9: 06:3a:db:47:a4:91:f0:54:b3:7b:4a:4f:2c:94:c3: 8f:a4:ed:cc:ac:2c:5c:e1:7c:4d:10:04:67:47:3c: bf:bc:cd:2c:fb:4c:d8:e7:70:23:fb:3f:3a:83:48: 32:7f:eb:80:05:f7:18:eb:ab:af:64:da:4d:da:86: 33:12:1c:f7:79:fc:91:8a:b8:51:09:de:c2:2d:1f: 26:fc:01:bc:d3:a9:07:06:db:43:4e:c0:79:a6:68: 67:67:9f:15:67:aa:54:82:3b:b5:ea:8d:fb:61:27: 0a:92:c8:0d:b2:2f:93:e5:bd:c1:02:52:d2:44:22: 64:52:56:8b:12:cc:14:dc:91:6f:3f:95:7c:52:85: ca:82:62:4d:4e:10:b5:a1:2f:4c:bb:40:78:74:99: 10:5a:93:8f:c1:75:8e:4d:53:c5:7b:ce:b1:43:3b: 3f:c1:d5:de:70:85:8a:2d:d0:7b:b9:b5:72:1a:45: 5a:04:75:e3:53:4f:61:d5:8c:5a:ee:12:70:ab:87: fc:b7:e9:73:b8:53:5e:4c:01:6f:69:a8:ce:5e:90: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:7E:A0:DD:02:2E:C3:AC:60:BE:0C:68:85:91:0A:C3:AE:55:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:32:05:17:9a:48:dd:79:5f:5c:92:4e:a1:00:7e:94:ab:b0: b6:8c:a9:8e:31:b4:7e:b1:f5:ee:89:6a:65:31:46:94:0e:8c: 83:ca:5c:a9:79:5c:af:a2:a5:b7:35:2b:37:b2:9f:02:f5:83: fe:91:86:b7:11:44:18:b4:78:5d:8d:60:74:73:57:52:c6:a5: fd:ca:fb:a4:b5:25:1f:6c:91:05:d5:72:cf:5a:94:5c:f9:86: 29:35:7c:f6:bb:47:fd:6a:a1:87:e6:78:7b:45:8e:28:eb:e0: a7:c9:0e:a7:da:5f:eb:0f:b7:8d:70:5b:63:f5:33:30:21:5b: b9:06:93:3b:fc:17:5e:8e:bc:46:c8:f3:15:b5:ba:a7:ab:00: 6b:36:5c:7f:1e:fa:fd:77:d0:18:ec:24:f1:5c:88:b6:e9:41: ab:c2:1b:2f:f6:39:f0:13:6f:b2:58:b8:68:03:9d:98:aa:45: 5c:30:fe:59:e3:8d:28:35:31:22:a0:3a:11:ec:2c:9d:76:ae: cb:72:7e:f8:41:6d:e9:33:76:8f:43:57:a6:ba:51:99:50:d7: 9e:d9:9d:f9:de:7d:e0:0b:ba:26:76:d0:94:47:f5:08:50:1f: 0f:fe:69:22:5b:64:de:63:73:cb:69:57:c9:55:fe:ad:e9:99: a3:ea:b7:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWLgcK0a9JDu3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODhlMzA1ZWYtNDcxZi00MzFmLTkwMmItNWM5ZWZkYmIzZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Ms5k+auaHIrLIorBCNLog7AHDBgsH0XVzo vWDOpc+u9tKlieUaXeuOcPkGOttHpJHwVLN7Sk8slMOPpO3MrCxc4XxNEARnRzy/ vM0s+0zY53Aj+z86g0gyf+uABfcY66uvZNpN2oYzEhz3efyRirhRCd7CLR8m/AG8 06kHBttDTsB5pmhnZ58VZ6pUgju16o37YScKksgNsi+T5b3BAlLSRCJkUlaLEswU 3JFvP5V8UoXKgmJNThC1oS9Mu0B4dJkQWpOPwXWOTVPFe86xQzs/wdXecIWKLdB7 ubVyGkVaBHXjU09h1Yxa7hJwq4f8t+lzuFNeTAFvaajOXpCRtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsrfqDdAi7DrGC+DGiFkQrDrlUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTJjYTBmNGMtNGZkYy0z OGQyLThiMTItY2UyM2YwNzlkYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIyBReaSN15X1ySTqEAfpSrsLaMqY4xtH6x9e6JamUxRpQOjIPKXKl5 XK+ipbc1KzeynwL1g/6RhrcRRBi0eF2NYHRzV1LGpf3K+6S1JR9skQXVcs9alFz5 hik1fPa7R/1qoYfmeHtFjijr4KfJDqfaX+sPt41wW2P1MzAhW7kGkzv8F16OvEbI 8xW1uqerAGs2XH8e+v130BjsJPFciLbpQavCGy/2OfATb7JYuGgDnZiqRVww/lnj jSg1MSKgOhHsLJ12rstyfvhBbekzdo9DV6a6UZlQ157ZnfnefeALuiZ20JRH9QhQ Hw/+aSJbZN5jc8tpV8lV/q3pmaPqt/Y= -----END CERTIFICATE-----Generated at Tue Sep 9 08:06:03 2025 by rpki-client