$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c6512a0d-e920-3282-a9cc-6ac4bf5ae1e3.roa File: c6512a0d-e920-3282-a9cc-6ac4bf5ae1e3.roa (raw, json) Hash identifier: Xe2uLUOFuALbBjOcXXWp6OOM9qWu6KDUqzjtMOOC+Uw= Subject key identifier: E5:47:F6:85:E6:D9:18:A6:89:3E:69:83:80:B4:36:1D:3A:AD:51:9A Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1628B5CE9165FCA3A8800 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c6512a0d-e920-3282-a9cc-6ac4bf5ae1e3.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 128.109.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:62:8b:5c:e9:16:5f:ca:3a:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=19553104-cca2-4ea4-92ce-8bc8feb0c886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:7b:af:f6:cd:35:72:c1:d3:d4:15:07:48: 1a:5d:6d:21:1d:38:23:bc:65:1e:de:05:ae:8a:9d: f8:99:4a:4e:07:ed:83:f3:88:80:d1:de:14:49:f2: 8d:7d:c0:81:97:3a:43:94:ed:26:ae:1c:f4:02:44: f6:1f:3d:7a:c7:8b:7b:b5:57:43:28:3a:7b:a0:a9: ff:da:d2:f4:c0:d7:f9:60:ae:11:b4:16:d6:e0:2d: 79:fb:b2:56:15:9e:17:95:c3:6f:57:a1:15:6c:22: 20:06:44:4d:9b:9f:90:12:c8:77:16:66:df:ed:65: 5b:bc:71:62:3b:86:41:02:23:86:24:ab:34:ae:e2: bd:79:e9:75:98:c6:a7:ac:a6:a2:23:99:7e:a2:64: 56:bd:e8:ad:1f:2a:bd:6c:3e:0e:80:2c:00:c4:bf: 8d:50:3b:91:8e:7a:4f:37:48:94:b2:6a:9c:b8:e7: fb:7d:71:2d:e6:8c:4f:6d:d1:3b:dd:62:b2:f4:01: a5:8b:13:bb:3c:2e:91:35:bd:a1:76:10:0a:95:24: 1f:92:a2:d9:99:09:54:58:cd:2c:b2:a9:4d:a1:8e: e8:ef:c9:5b:e7:3c:46:64:6c:d2:ea:11:f8:72:40: bf:48:7a:92:e3:01:53:ef:5b:70:27:de:6f:c6:af: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:F6:85:E6:D9:18:A6:89:3E:69:83:80:B4:36:1D:3A:AD:51:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c6512a0d-e920-3282-a9cc-6ac4bf5ae1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:89:f1:5f:37:81:fd:e7:9e:37:46:9d:2d:82:92:8c:36:77: 2c:11:1a:0f:46:84:b0:e6:2b:57:0e:a6:43:ee:7c:94:0c:f2: 1d:09:4e:c9:68:4e:87:1a:5a:a4:ee:52:e7:11:f6:ef:b4:5a: f3:85:00:2f:22:63:c7:48:e2:08:d6:ca:ac:50:0d:1b:b7:b7: b1:00:4b:7f:53:6c:2b:95:05:4a:8e:a5:df:9e:34:73:58:64: 62:40:70:b4:67:42:3b:f6:80:e8:99:6b:70:1d:22:41:eb:84: b1:3d:c9:a0:80:fb:65:2d:73:d9:6b:fb:01:c3:78:94:b3:ac: 85:fe:28:68:d4:fb:f7:96:05:5c:f5:46:bb:9e:13:60:65:3a: b5:f1:2a:eb:fd:48:cf:2f:6a:4e:9b:11:fa:da:d0:8b:bc:9e: 09:53:70:99:c8:bd:be:9d:19:4e:d7:b4:3a:29:27:44:28:c6: a2:ab:6d:1c:e9:c7:59:20:39:64:2e:3b:b4:33:9d:6b:24:b5: ec:4c:f6:3b:24:11:90:43:90:cb:68:8a:5a:1c:34:ae:ea:2f: 69:f2:9f:f5:d8:7c:1f:dc:62:60:81:4e:cb:7a:f9:7b:75:a4: 0a:84:dd:b0:0a:13:1f:94:a8:d4:16:c5:dd:6c:ae:b9:c2:b6: f7:1c:a6:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWKLXOkWX8o6iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTk1NTMxMDQtY2NhMi00ZWE0LTkyY2UtOGJjOGZlYjBjODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx97r/bNNXLB09QVB0gaXW0hHTgjvGUe3gWu ip34mUpOB+2D84iA0d4USfKNfcCBlzpDlO0mrhz0AkT2Hz16x4t7tVdDKDp7oKn/ 2tL0wNf5YK4RtBbW4C15+7JWFZ4XlcNvV6EVbCIgBkRNm5+QEsh3Fmbf7WVbvHFi O4ZBAiOGJKs0ruK9eel1mManrKaiI5l+omRWveitHyq9bD4OgCwAxL+NUDuRjnpP N0iUsmqcuOf7fXEt5oxPbdE73WKy9AGlixO7PC6RNb2hdhAKlSQfkqLZmQlUWM0s sqlNoY7o78lb5zxGZGzS6hH4ckC/SHqS4wFT71twJ95vxq+vHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVH9oXm2RimiT5pg4C0Nh06rVGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzY1MTJhMGQtZTkyMC0z MjgyLWE5Y2MtNmFjNGJmNWFlMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKJ8V83gf3nnjdGnS2Ckow2dywRGg9GhLDmK1cOpkPufJQM8h0JTslo TocaWqTuUucR9u+0WvOFAC8iY8dI4gjWyqxQDRu3t7EAS39TbCuVBUqOpd+eNHNY ZGJAcLRnQjv2gOiZa3AdIkHrhLE9yaCA+2Utc9lr+wHDeJSzrIX+KGjU+/eWBVz1 RrueE2BlOrXxKuv9SM8vak6bEfra0Iu8nglTcJnIvb6dGU7XtDopJ0QoxqKrbRzp x1kgOWQuO7QznWsktexM9jskEZBDkMtoilocNK7qL2nyn/XYfB/cYmCBTst6+Xt1 pAqE3bAKEx+UqNQWxd1srrnCtvccppw= -----END CERTIFICATE-----Generated at Tue Sep 9 08:06:03 2025 by rpki-client