$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50ffd74b-9f06-37ef-b11e-0376266355c8.roa File: 50ffd74b-9f06-37ef-b11e-0376266355c8.roa (raw, json) Hash identifier: Cv6b9F+fFHDa45pdIlw3F+NAkIg2Yyi1ZbEZd1dJHm0= Subject key identifier: 31:13:BF:B1:38:5D:2A:98:BA:49:10:CB:5C:13:FE:8C:FF:5F:F8:D1 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D298CBE39ED7F8D1549200 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50ffd74b-9f06-37ef-b11e-0376266355c8.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 81 IP address blocks: 128.109.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:98:cb:e3:9e:d7:f8:d1:54:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=c76e8acf-6ec1-4376-ad6f-9e8d9788afe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:ee:35:92:32:85:c5:ad:3f:fe:7c:be:99: 31:4c:93:3e:60:5f:f9:d1:83:1c:07:dd:7b:0b:28: a5:1e:7e:40:ff:04:41:39:88:ba:d7:4d:d4:76:dd: b4:5c:0f:7d:fd:3b:f8:9b:0e:bb:c2:f3:d8:33:d2: 13:6f:d2:65:16:9c:2b:ea:06:0e:de:7e:33:f0:23: 77:55:4b:0e:43:84:da:1a:3f:e1:37:db:4f:4f:c6: f6:19:b1:86:56:f6:f8:23:68:79:1e:9a:a0:a7:1a: 15:d6:a4:86:54:8a:35:7b:44:ec:d7:68:86:d4:9d: 9c:c9:c3:f7:63:1d:c4:2f:06:a4:d1:81:b3:74:bd: 85:e0:8c:1a:88:09:59:32:b1:cd:ec:df:07:33:98: 51:bb:5c:40:67:ef:ac:68:52:53:cc:34:b6:01:31: a2:20:33:72:e1:10:fd:bb:b0:c7:b9:51:13:9a:1a: af:b3:47:87:3d:c4:89:de:d2:1e:6b:cd:16:f9:df: 32:bb:03:ff:00:59:28:b4:d0:62:37:64:7d:d7:bc: 4c:58:75:aa:e2:f3:ee:9a:d2:f3:44:d5:35:73:cb: 44:7a:b1:c0:73:b8:26:50:84:16:4f:66:04:04:2d: e6:7f:ac:88:f3:71:f5:70:4d:a6:b4:3e:41:2c:fc: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:13:BF:B1:38:5D:2A:98:BA:49:10:CB:5C:13:FE:8C:FF:5F:F8:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/50ffd74b-9f06-37ef-b11e-0376266355c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a0:8f:48:63:4d:8f:14:15:97:dc:12:77:0d:3c:76:1c:39: 7a:1b:5c:f8:8b:ab:1e:66:8e:03:7d:de:4d:f5:d1:47:e8:b7: d7:c6:55:70:e0:98:7c:7e:ee:23:93:44:75:93:1f:19:83:74: 7c:5e:52:01:75:26:a0:0e:3d:88:8a:a0:0e:36:76:ae:8f:cc: d2:6b:0e:55:d8:b8:52:27:73:55:cb:30:b6:38:28:ce:32:73: f3:a7:e2:a8:5d:ae:08:05:26:06:85:f9:67:f3:b4:72:78:b3: 6b:8d:7a:09:e6:75:22:56:34:72:d6:50:51:6a:86:cb:d0:97: 0b:38:01:b5:a7:18:73:a0:a6:22:1e:d1:2c:50:05:17:65:cf: 7f:86:f3:8f:8e:45:23:3e:a6:a0:9a:2b:21:77:0c:b5:4f:e2: c2:ff:a0:21:2c:ed:7f:9f:7e:a1:5b:47:be:d1:0a:a2:01:0c: 79:c9:77:ae:8c:6f:bb:a0:bd:68:78:bc:df:18:d4:0b:6c:d3: d9:b5:22:ad:e7:8d:a6:6a:45:20:76:e4:53:cd:46:04:15:48: 9d:40:e6:48:70:32:b8:40:f3:6d:26:0e:9c:65:a1:57:8b:70: 74:c9:a7:81:98:c7:64:18:23:93:83:fb:2a:2e:70:0d:ff:12: 88:8f:c6:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0pjL457X+NFUkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk Yzc2ZThhY2YtNmVjMS00Mzc2LWFkNmYtOWU4ZDk3ODhhZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd3uNZIyhcWtP/58vpkxTJM+YF/50YMcB917 CyilHn5A/wRBOYi6103Udt20XA99/Tv4mw67wvPYM9ITb9JlFpwr6gYO3n4z8CN3 VUsOQ4TaGj/hN9tPT8b2GbGGVvb4I2h5HpqgpxoV1qSGVIo1e0Ts12iG1J2cycP3 Yx3ELwak0YGzdL2F4IwaiAlZMrHN7N8HM5hRu1xAZ++saFJTzDS2ATGiIDNy4RD9 u7DHuVETmhqvs0eHPcSJ3tIea80W+d8yuwP/AFkotNBiN2R917xMWHWq4vPumtLz RNU1c8tEerHAc7gmUIQWT2YEBC3mf6yI83H1cE2mtD5BLPz/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDETv7E4XSqYukkQy1wT/oz/X/jRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTBmZmQ3NGItOWYwNi0z N2VmLWIxMWUtMDM3NjI2NjM1NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6gj0hjTY8UFZfcEncNPHYcOXobXPiLqx5mjgN93k310Ufot9fGVXDg mHx+7iOTRHWTHxmDdHxeUgF1JqAOPYiKoA42dq6PzNJrDlXYuFInc1XLMLY4KM4y c/On4qhdrggFJgaF+WfztHJ4s2uNegnmdSJWNHLWUFFqhsvQlws4AbWnGHOgpiIe 0SxQBRdlz3+G84+ORSM+pqCaKyF3DLVP4sL/oCEs7X+ffqFbR77RCqIBDHnJd66M b7ugvWh4vN8Y1Ats09m1Iq3njaZqRSB25FPNRgQVSJ1A5khwMrhA820mDpxloVeL cHTJp4GYx2QYI5OD+youcA3/EoiPxhc= -----END CERTIFICATE-----Generated at Sat Oct 10 21:25:44 2026 by rpki-client