$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/52727c3f-0189-327d-939c-80750380c4fc.roa File: 52727c3f-0189-327d-939c-80750380c4fc.roa (raw, json) Hash identifier: P1bEw9ci4h4nCJGT9SUQnduU1DzQVPz9E8munZB2lr4= Subject key identifier: 5E:23:60:32:9F:33:A8:6C:15:E3:26:95:68:16:E7:91:2C:09:BB:BD Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1634999A265F452BB0AA0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/52727c3f-0189-327d-939c-80750380c4fc.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 128.109.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:63:49:99:a2:65:f4:52:bb:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=e9f96464-30c4-41dd-9842-b83371f83dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ba:22:79:3d:50:bc:00:64:b2:87:48:95:02: c4:1f:44:44:01:07:5d:4d:5b:5b:4b:cb:c6:f2:75: 8f:2f:73:82:b0:05:e4:c9:8e:e9:0c:71:05:de:54: f4:94:d0:9b:bd:8c:ec:ae:5a:d7:68:03:08:db:e4: 8b:02:ea:23:c1:cb:20:43:02:94:6b:0a:ce:56:68: 0f:f5:7e:c5:ef:22:8b:85:95:38:ea:c7:aa:42:f0: 34:e3:50:0d:ac:1c:09:b0:1f:3c:c9:99:ba:86:3e: 35:f0:fc:b2:09:32:5e:f0:86:ff:9e:c8:f1:57:03: 19:5e:b9:fa:8e:bc:5d:09:e2:d4:14:50:a8:7b:b0: 16:12:7c:e4:b3:aa:66:85:35:63:16:d3:62:cc:a0: 05:e8:c4:4e:2f:6b:71:97:b6:22:bb:cf:5c:a9:7b: fa:6a:5e:91:a4:6b:a6:55:d1:df:7c:dd:44:ca:cc: bf:1c:47:17:68:ec:4e:57:e9:d2:c4:82:f2:b8:cb: 67:ce:dd:a6:1a:b1:05:70:81:eb:cf:e2:19:25:8e: 37:bf:9e:8f:d4:f8:e6:58:8c:16:73:ca:b6:f6:3e: 94:22:db:b4:86:b2:15:56:92:25:af:33:78:4d:d2: f8:c3:f4:67:32:12:31:2a:50:ea:46:3f:a5:95:ce: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:60:32:9F:33:A8:6C:15:E3:26:95:68:16:E7:91:2C:09:BB:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/52727c3f-0189-327d-939c-80750380c4fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3f:f8:13:66:06:c9:31:cd:ab:54:02:1b:ce:26:de:38:89: 1d:af:45:31:42:57:cb:e0:60:c6:6c:3d:c6:5b:cb:4d:61:cb: 26:44:a2:60:1a:d9:91:ac:a7:ec:04:59:be:f3:76:6c:b9:38: b7:34:90:dd:be:4f:91:29:e2:7c:16:af:2f:0c:b9:69:79:89: ff:b3:42:f4:e9:3d:7e:8a:cd:bc:4a:48:f2:3d:07:bf:c5:80: 5b:f7:32:97:d7:21:0a:30:3f:d6:7b:35:f6:f7:03:de:5a:c3: e7:13:b3:cf:4c:c1:92:88:a0:48:42:ac:a5:15:d5:40:f5:77: 9b:d0:34:67:66:3f:fe:af:32:4a:3a:1a:76:9d:0d:54:c4:3d: 3f:dd:a9:9f:a5:95:9d:73:72:01:1d:af:b4:17:7f:e5:02:4d: 53:2a:4a:15:b8:1a:c5:cc:b4:21:62:f7:b9:64:8d:da:b7:18: 45:1a:1f:ec:a8:b7:ed:81:c9:c8:9d:96:26:78:c3:21:b5:9c: 57:2a:4b:92:d7:3c:c6:9b:5a:6f:95:71:a9:31:6d:ba:2c:9a: f4:42:1a:64:8a:e1:3b:7d:f4:7f:59:c7:32:22:78:72:48:2f: d8:4c:60:79:03:4e:e5:6d:da:d9:52:f0:44:ce:ee:ce:39:1d: 83:d8:e4:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWNJmaJl9FK7CqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTlmOTY0NjQtMzBjNC00MWRkLTk4NDItYjgzMzcxZjgzZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7oieT1QvABksodIlQLEH0REAQddTVtbS8vG 8nWPL3OCsAXkyY7pDHEF3lT0lNCbvYzsrlrXaAMI2+SLAuojwcsgQwKUawrOVmgP 9X7F7yKLhZU46seqQvA041ANrBwJsB88yZm6hj418PyyCTJe8Ib/nsjxVwMZXrn6 jrxdCeLUFFCoe7AWEnzks6pmhTVjFtNizKAF6MROL2txl7Yiu89cqXv6al6RpGum VdHffN1Eysy/HEcXaOxOV+nSxILyuMtnzt2mGrEFcIHrz+IZJY43v56P1PjmWIwW c8q29j6UItu0hrIVVpIlrzN4TdL4w/RnMhIxKlDqRj+llc5wowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4jYDKfM6hsFeMmlWgW55EsCbu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTI3MjdjM2YtMDE4OS0z MjdkLTkzOWMtODA3NTAzODBjNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE/+BNmBskxzatUAhvOJt44iR2vRTFCV8vgYMZsPcZby01hyyZEomAa 2ZGsp+wEWb7zdmy5OLc0kN2+T5Ep4nwWry8MuWl5if+zQvTpPX6KzbxKSPI9B7/F gFv3MpfXIQowP9Z7Nfb3A95aw+cTs89MwZKIoEhCrKUV1UD1d5vQNGdmP/6vMko6 GnadDVTEPT/dqZ+llZ1zcgEdr7QXf+UCTVMqShW4GsXMtCFi97lkjdq3GEUaH+yo t+2BycidliZ4wyG1nFcqS5LXPMabWm+VcakxbbosmvRCGmSK4Tt99H9ZxzIieHJI L9hMYHkDTuVt2tlS8ETO7s45HYPY5Fg= -----END CERTIFICATE-----Generated at Tue Sep 9 08:03:44 2025 by rpki-client