$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c903c391-cacb-3303-9476-901270e93ea4.roa File: c903c391-cacb-3303-9476-901270e93ea4.roa (raw, json) Hash identifier: eml7E67AZceiQxo3nL8Hjt/nj73oN7XTy2rnT9ttcNc= Subject key identifier: 4D:F7:81:04:11:D7:B3:8D:F5:B1:4A:67:F9:83:CD:6E:C0:B8:97:14 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584EAF234A8F5D6491596C498AE0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c903c391-cacb-3303-9476-901270e93ea4.roa Signing time: Fri 31 Jul 2026 18:26:05 +0000 ROA not before: Fri 31 Jul 2026 18:26:05 +0000 ROA not after: Thu 29 Oct 2026 18:26:05 +0000 asID: 81 IP address blocks: 128.109.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:4a:8f:5d:64:91:59:6c:49:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jul 31 18:26:05 2026 GMT Not After : Oct 29 18:26:05 2026 GMT Subject: CN=72362937-223f-4067-95ff-2cf605b04c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:50:c6:bb:76:05:48:c1:15:42:92:a0:2b:7f: e6:ae:c0:06:3b:df:25:60:fd:17:b3:09:86:40:50: f3:00:36:16:52:2d:27:a5:23:e8:b4:f6:f1:94:76: 76:ab:80:78:ba:a5:17:13:f1:b8:8d:12:64:cf:93: 5d:99:b1:37:98:9d:5d:0c:f3:7a:d0:f2:c6:e9:77: 3a:9a:b1:89:ca:7f:71:92:f0:67:c6:37:e8:98:52: 20:8f:77:80:60:58:e8:c4:a6:77:6f:1e:41:6f:4e: e6:7f:da:24:d5:f4:c3:64:7e:29:f1:8b:ec:a4:11: 23:dc:11:3b:59:78:ad:2c:c1:bf:a3:04:29:a7:bb: 56:be:ef:dc:bd:16:e0:ac:8d:07:93:33:4c:63:8b: 8f:1b:7d:1f:5b:cc:e2:f2:f4:97:53:54:8d:47:72: c3:b8:37:53:bf:3b:62:32:4e:0b:ce:18:7b:f1:b5: b3:77:21:b0:ca:39:10:c1:cf:98:f2:41:a0:38:1a: df:48:d5:1b:33:78:33:31:a4:64:a1:69:ec:d7:87: 9c:4b:38:78:5f:f1:5c:2a:e8:4f:62:4d:15:9b:00: 39:04:66:19:47:5b:eb:e0:e1:17:01:fd:ae:51:aa: 2e:22:06:09:c2:78:0b:e2:05:ec:61:2e:6f:0c:1f: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:81:04:11:D7:B3:8D:F5:B1:4A:67:F9:83:CD:6E:C0:B8:97:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c903c391-cacb-3303-9476-901270e93ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:35:9f:42:01:ae:bf:ec:2c:7a:f5:5d:fb:9e:d6:b7:dd:cf: 79:0f:8c:68:4b:83:7c:46:49:1f:03:5b:85:31:a0:36:d6:4e: 64:22:0c:27:2e:dd:4f:e4:50:2e:ac:ad:be:78:0b:85:4a:bf: 70:cc:a7:7f:40:e3:22:72:b8:fb:98:5c:e0:b0:9a:26:56:eb: 35:e6:ea:1e:0f:b5:43:6d:62:e5:71:96:a6:d4:52:49:92:73: 9a:81:61:37:73:ff:9a:3e:37:09:63:83:52:61:02:01:46:48: 6f:80:fd:38:db:0a:62:32:ef:75:36:18:f8:17:e8:12:ca:27: e8:34:8f:a3:d7:6f:9c:5d:76:e0:d8:af:93:c2:16:15:7c:ce: fb:ed:9d:4b:be:59:bf:c8:fd:78:74:90:c0:da:3e:0f:04:3d: 35:e0:a8:08:fa:6e:24:54:20:dc:b4:94:58:61:94:a1:bc:05: c4:23:7a:a1:2a:0b:92:0f:17:b1:5c:47:30:7a:ff:4d:9c:06: 32:a9:d2:44:6b:15:a2:10:3b:3f:90:85:ff:9f:95:5f:3b:2c: 85:55:63:7a:84:99:42:33:5a:f5:3a:cc:5a:6c:fb:53:32:62: 10:f5:34:45:22:f0:c8:ec:19:9e:23:77:ab:ce:de:d6:de:c3: ad:9d:32:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vI0qPXWSRWWxJiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDczMTE4MjYwNVoXDTI2MTAyOTE4MjYwNVowLzEtMCsGA1UEAxMk NzIzNjI5MzctMjIzZi00MDY3LTk1ZmYtMmNmNjA1YjA0YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VDGu3YFSMEVQpKgK3/mrsAGO98lYP0XswmG QFDzADYWUi0npSPotPbxlHZ2q4B4uqUXE/G4jRJkz5NdmbE3mJ1dDPN60PLG6Xc6 mrGJyn9xkvBnxjfomFIgj3eAYFjoxKZ3bx5Bb07mf9ok1fTDZH4p8YvspBEj3BE7 WXitLMG/owQpp7tWvu/cvRbgrI0HkzNMY4uPG30fW8zi8vSXU1SNR3LDuDdTvzti Mk4Lzhh78bWzdyGwyjkQwc+Y8kGgOBrfSNUbM3gzMaRkoWns14ecSzh4X/FcKuhP Yk0VmwA5BGYZR1vr4OEXAf2uUaouIgYJwngL4gXsYS5vDB+JfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE33gQQR17ON9bFKZ/mDzW7AuJcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzkwM2MzOTEtY2FjYi0z MzAzLTk0NzYtOTAxMjcwZTkzZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB41n0IBrr/sLHr1Xfue1rfdz3kPjGhLg3xGSR8DW4UxoDbWTmQiDCcu 3U/kUC6srb54C4VKv3DMp39A4yJyuPuYXOCwmiZW6zXm6h4PtUNtYuVxlqbUUkmS c5qBYTdz/5o+Nwljg1JhAgFGSG+A/TjbCmIy73U2GPgX6BLKJ+g0j6PXb5xdduDY r5PCFhV8zvvtnUu+Wb/I/Xh0kMDaPg8EPTXgqAj6biRUINy0lFhhlKG8BcQjeqEq C5IPF7FcRzB6/02cBjKp0kRrFaIQOz+Qhf+flV87LIVVY3qEmUIzWvU6zFps+1My YhD1NEUi8MjsGZ4jd6vO3tbew62dMpA= -----END CERTIFICATE-----Generated at Sat Aug 22 18:45:13 2026 by rpki-client