$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b9efbd9b-02d5-3059-85c3-ad67f5244ea8.roa File: b9efbd9b-02d5-3059-85c3-ad67f5244ea8.roa (raw, json) Hash identifier: +Cbt7+k8IR7hd89e1hBI+m/5bCXuJsZx5eeSbiFU32c= Subject key identifier: D0:88:9A:64:40:62:72:95:C7:54:26:9C:B0:59:6D:F3:20:8F:06:73 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A162740D1785BB8D948300 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b9efbd9b-02d5-3059-85c3-ad67f5244ea8.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 128.109.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:62:74:0d:17:85:bb:8d:94:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=b4932f46-f3d5-4d1e-b9cb-70e9ea4fce3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:6b:9c:47:07:af:4f:5d:c1:29:be:b5:3b: f4:a3:ef:78:9b:39:e7:29:60:aa:b0:b7:bd:d8:1d: a7:60:80:cf:47:e5:1e:f5:f9:fc:56:9a:d7:29:98: d4:6f:55:9e:be:0b:9d:af:fd:32:99:61:4a:a9:bd: c1:62:8b:72:aa:bf:05:35:6e:b8:73:30:2c:36:c3: c3:fc:b4:b6:09:21:25:c5:9b:7b:bf:d4:ac:1c:66: 93:fa:0d:95:89:0e:80:13:c6:59:65:66:c4:7b:b6: 98:22:d2:99:0a:06:5f:57:05:47:c8:e3:1b:01:ae: b0:c4:64:50:93:43:8b:dd:83:0b:d4:d7:cf:a5:71: f8:9d:5b:04:df:62:8e:0e:a5:7d:08:60:62:b8:2f: 33:d0:38:73:13:ab:23:87:56:93:f6:0b:77:1f:d4: c6:f0:be:5c:e1:1f:91:84:85:c7:82:8b:e8:ec:3f: cb:37:c5:f9:77:5e:68:52:90:18:c9:8f:c4:0a:ef: 00:38:4b:ac:45:41:e1:bf:a4:ec:8d:4e:f7:12:fe: 14:3b:db:54:c4:73:86:b4:c3:21:9c:3e:63:07:9f: 69:c1:05:e5:8d:62:52:16:a3:0a:0a:66:1b:6b:0f: c8:dd:e3:06:85:c1:e1:b6:36:cd:f3:16:aa:aa:6b: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:88:9A:64:40:62:72:95:C7:54:26:9C:B0:59:6D:F3:20:8F:06:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b9efbd9b-02d5-3059-85c3-ad67f5244ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0d:2c:8b:9f:fc:af:29:64:8e:73:78:db:4a:cf:3c:d4:ff: dc:ce:a4:aa:55:8f:f6:5c:55:cd:c3:f3:ca:59:a3:bc:57:86: 0d:d2:5e:2b:37:69:ef:c7:77:a4:cf:42:32:4f:77:ed:43:fb: d2:98:0c:f6:12:b7:2c:81:17:85:88:39:64:e1:61:d8:f5:91: 5f:24:33:10:65:91:ee:36:57:7e:9c:51:94:20:7a:77:d0:18: 3d:6e:03:b0:1d:b9:00:0b:42:5a:a2:cb:fd:bd:76:39:57:cd: ea:fb:53:d0:4c:9d:f5:16:8f:3c:ad:31:f3:a2:3e:51:94:1e: c0:d7:1b:5e:77:dc:53:67:5c:16:f9:12:11:aa:d0:b5:2d:de: d4:70:64:ba:e4:88:df:97:ed:47:e9:63:d7:2e:db:05:28:db: 80:6c:e7:e1:dc:74:f8:58:65:6d:50:cb:3b:ca:d5:db:be:01: dc:d1:e2:a6:e1:32:00:ea:15:0f:4f:b6:f9:f8:62:c9:03:9f: d0:38:27:59:18:02:74:cb:4f:e1:d0:09:de:4f:75:14:30:f0: c0:d9:71:36:e0:5e:32:80:87:83:c3:9b:8d:af:74:66:04:fa: 56:61:bc:31:69:a7:56:1c:3e:6e:d0:a9:7b:70:e6:82:85:16: 71:79:4d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWJ0DReFu42UgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjQ5MzJmNDYtZjNkNS00ZDFlLWI5Y2ItNzBlOWVhNGZjZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3prnEcHr09dwSm+tTv0o+94mznnKWCqsLe9 2B2nYIDPR+Ue9fn8VprXKZjUb1Wevgudr/0ymWFKqb3BYotyqr8FNW64czAsNsPD /LS2CSElxZt7v9SsHGaT+g2ViQ6AE8ZZZWbEe7aYItKZCgZfVwVHyOMbAa6wxGRQ k0OL3YML1NfPpXH4nVsE32KODqV9CGBiuC8z0DhzE6sjh1aT9gt3H9TG8L5c4R+R hIXHgovo7D/LN8X5d15oUpAYyY/ECu8AOEusRUHhv6TsjU73Ev4UO9tUxHOGtMMh nD5jB59pwQXljWJSFqMKCmYbaw/I3eMGhcHhtjbN8xaqqmuU7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCImmRAYnKVx1QmnLBZbfMgjwZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjllZmJkOWItMDJkNS0z MDU5LTg1YzMtYWQ2N2Y1MjQ0ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQNLIuf/K8pZI5zeNtKzzzU/9zOpKpVj/ZcVc3D88pZo7xXhg3SXis3 ae/Hd6TPQjJPd+1D+9KYDPYStyyBF4WIOWThYdj1kV8kMxBlke42V36cUZQgenfQ GD1uA7AduQALQlqiy/29djlXzer7U9BMnfUWjzytMfOiPlGUHsDXG1533FNnXBb5 EhGq0LUt3tRwZLrkiN+X7UfpY9cu2wUo24Bs5+HcdPhYZW1QyzvK1du+AdzR4qbh MgDqFQ9Ptvn4YskDn9A4J1kYAnTLT+HQCd5PdRQw8MDZcTbgXjKAh4PDm42vdGYE +lZhvDFpp1YcPm7QqXtw5oKFFnF5TWc= -----END CERTIFICATE-----Generated at Tue Sep 9 07:59:35 2025 by rpki-client