$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa File: 678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa (raw, json) Hash identifier: zOmAZo+RNpIL8pyo42yEGenRpjU3N5XXJOPoHCpAKmI= Subject key identifier: 79:A9:CE:03:5C:FA:10:D1:D3:C2:2E:5C:BE:36:11:6A:D3:B7:54:3F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1635FD273A4B83D406EB0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 128.109.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:63:5f:d2:73:a4:b8:3d:40:6e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=576ac133-579e-402e-9061-5c7cf7f6f188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:33:90:28:a6:b4:c8:07:9f:cf:c2:31:15: be:a7:37:e2:0a:07:8a:da:01:71:77:e8:15:4a:17: a5:60:f8:47:be:9d:d9:24:61:5c:98:65:d9:e5:3e: a9:fa:9f:26:da:5e:aa:31:7a:8a:c5:de:c9:b2:73: f7:da:ef:fc:aa:3d:a0:a4:cf:19:02:9c:62:ea:ea: 3d:4f:9e:81:19:f7:cc:67:e2:d0:a5:a7:05:d8:42: df:1f:ae:15:48:29:5c:66:06:1e:87:4b:f3:14:e3: b0:ab:83:06:cb:e8:70:db:f9:2b:79:b1:90:dc:f7: 73:14:9e:a0:66:48:f3:16:8a:1c:5f:cd:a3:21:32: 57:83:0f:44:e8:09:a7:e4:37:24:8c:56:8d:3f:01: 6c:d1:70:1c:d4:af:c7:ab:48:8a:06:17:34:33:b2: 43:6c:3c:d3:10:c8:65:0e:fc:09:38:95:4c:a3:82: 08:e9:93:57:d9:3a:fc:be:62:d3:dc:d5:34:4e:39: 6f:c0:22:7d:13:39:d1:1e:8a:1a:10:ac:06:0f:73: 97:80:c3:c3:77:96:9e:2c:3b:97:c9:27:d5:b6:c5: 92:62:96:fd:e8:f0:83:d7:c0:0f:60:0d:90:ce:3b: 7b:dd:7a:f5:81:bb:a0:76:d6:54:26:00:e2:7c:3e: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:CE:03:5C:FA:10:D1:D3:C2:2E:5C:BE:36:11:6A:D3:B7:54:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0d:92:2f:96:dd:1a:0d:49:03:03:20:53:61:ee:0d:83:5d: 3d:21:08:05:90:0c:1a:c9:9a:95:44:cd:a0:00:08:73:6b:76: c7:6b:e6:89:86:39:06:62:01:27:f2:36:f2:2e:70:d5:20:39: e6:e4:f5:04:9c:e6:83:7c:3b:d3:65:3f:cd:dc:60:78:4b:0f: 73:48:96:60:59:92:3a:50:24:44:7d:ec:ff:7b:66:bd:78:8f: 6a:3e:0a:04:b8:c4:98:44:a3:6b:b0:11:d9:f4:67:17:70:70: 4a:9d:d6:4a:1c:f3:91:36:6d:05:63:40:40:0d:ec:88:71:21: 84:74:88:67:67:8a:be:d3:7f:80:18:d4:dd:87:af:55:3d:bd: ec:1a:8a:c3:42:63:78:8f:e6:e0:e0:66:4a:2f:8e:c3:54:5a: 21:43:39:a1:86:13:e2:d3:d5:d8:3d:25:c1:66:d1:48:a9:32: 98:e7:ab:4e:26:4f:ba:cf:44:d1:0b:f8:1a:00:63:97:1d:9e: 4a:fa:89:8b:4d:cc:f8:18:31:b3:b9:35:7f:a8:62:2a:34:09: 2d:7f:d3:06:b3:9e:56:0a:62:b1:1c:88:97:a5:15:a0:2a:8a: 69:44:dd:9f:b0:a0:26:a6:2e:a8:f7:52:92:73:7b:ec:ef:6c: 3d:40:e3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWNf0nOkuD1AbrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTc2YWMxMzMtNTc5ZS00MDJlLTkwNjEtNWM3Y2Y3ZjZmMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKYzkCimtMgHn8/CMRW+pzfiCgeK2gFxd+gV ShelYPhHvp3ZJGFcmGXZ5T6p+p8m2l6qMXqKxd7JsnP32u/8qj2gpM8ZApxi6uo9 T56BGffMZ+LQpacF2ELfH64VSClcZgYeh0vzFOOwq4MGy+hw2/krebGQ3PdzFJ6g ZkjzFoocX82jITJXgw9E6Amn5DckjFaNPwFs0XAc1K/Hq0iKBhc0M7JDbDzTEMhl DvwJOJVMo4II6ZNX2Tr8vmLT3NU0TjlvwCJ9EznRHooaEKwGD3OXgMPDd5aeLDuX ySfVtsWSYpb96PCD18APYA2Qzjt73Xr1gbugdtZUJgDifD7mHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmpzgNc+hDR08IuXL42EWrTt1Q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNjc4YzVlYWQtZmY0ZS0z YzY5LTgzYzAtN2ZmMmEzNDk2MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMNki+W3RoNSQMDIFNh7g2DXT0hCAWQDBrJmpVEzaAACHNrdsdr5omG OQZiASfyNvIucNUgOebk9QSc5oN8O9NlP83cYHhLD3NIlmBZkjpQJER97P97Zr14 j2o+CgS4xJhEo2uwEdn0ZxdwcEqd1koc85E2bQVjQEAN7IhxIYR0iGdnir7Tf4AY 1N2Hr1U9vewaisNCY3iP5uDgZkovjsNUWiFDOaGGE+LT1dg9JcFm0UipMpjnq04m T7rPRNEL+BoAY5cdnkr6iYtNzPgYMbO5NX+oYio0CS1/0waznlYKYrEciJelFaAq imlE3Z+woCamLqj3UpJze+zvbD1A43M= -----END CERTIFICATE-----Generated at Tue Sep 9 07:59:36 2025 by rpki-client