$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d2914b10-529a-3c15-9db2-46515d4bd98a.roa File: d2914b10-529a-3c15-9db2-46515d4bd98a.roa (raw, json) Hash identifier: Y5llyxqKX4ATx1J8wbcWEa9uTezliQvMwT5Rg7ngq1Y= Subject key identifier: E5:88:8B:EF:E7:20:45:5A:E8:C4:5C:09:F4:CD:24:75:3F:6C:19:68 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A162F3703EE3B88C255380 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d2914b10-529a-3c15-9db2-46515d4bd98a.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 128.109.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:62:f3:70:3e:e3:b8:8c:25:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=b078e215-014f-4559-9ce6-0476c5d6a925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b8:60:0e:eb:6c:2c:2c:64:9b:3d:60:4a:27: 7c:c6:36:3b:96:49:da:00:2f:aa:da:c1:fd:26:89: 54:08:3a:c7:77:05:e1:ce:e7:1a:e4:84:7c:1c:f7: ad:11:3d:a4:26:8d:3b:63:d6:5a:ff:9b:b0:07:7f: 21:16:ef:48:6d:61:0b:31:13:99:36:d8:32:08:9f: bf:72:88:db:d7:00:99:1b:58:9c:d7:b3:48:f1:19: 24:0c:93:81:e0:39:d6:5e:40:3f:d3:29:69:55:06: dd:0b:06:10:ad:55:71:80:b7:2e:b4:ae:4a:22:62: 81:52:55:59:04:11:88:34:08:13:7b:6f:c8:a1:45: 21:16:a2:9e:de:36:87:93:b1:f7:59:89:ad:e7:8a: 8c:fc:85:ba:10:49:02:70:24:02:97:82:20:69:a1: 53:7a:51:40:86:b6:71:c2:a1:7c:67:42:05:01:79: 92:6f:45:2d:e0:11:1c:9d:4c:df:d6:58:40:64:27: 4c:75:04:88:10:0b:d9:7c:12:8c:ce:75:b6:0c:d3: 24:ed:7a:a6:bb:94:ca:27:ea:34:e5:a9:be:64:e7: 39:32:96:d9:58:ca:9a:34:d8:14:c3:c9:9c:a8:01: 55:96:5c:93:51:93:f5:24:22:6c:1f:47:5f:7f:81: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:8B:EF:E7:20:45:5A:E8:C4:5C:09:F4:CD:24:75:3F:6C:19:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d2914b10-529a-3c15-9db2-46515d4bd98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:dd:4f:7c:d9:2f:18:1d:85:4d:4d:e4:04:dd:62:02:13:63: 86:bf:3b:2c:35:40:28:c3:d3:49:ab:32:ab:5b:4a:85:f8:4d: d6:b5:cb:0e:11:be:2d:a0:77:21:07:38:f7:83:ba:92:55:9a: 90:3d:39:15:1a:4c:a8:06:7f:97:cb:b0:5e:89:0d:c8:1b:02: 39:a2:52:cc:45:c3:37:da:7f:0f:23:1e:be:6b:cd:6b:19:29: 53:61:8c:26:e0:f2:f0:1d:ba:85:11:19:7e:b1:ef:5a:47:7c: 50:f2:6c:9f:98:65:a1:04:81:2b:28:11:d7:53:d3:69:b3:3b: 30:1e:b7:79:61:8b:7c:e2:4b:c0:a6:56:e0:04:f4:cc:6e:18: eb:ba:3d:58:6b:9f:cf:c4:b0:10:b9:a7:78:2e:62:ce:44:25: 98:b8:34:4e:13:cb:68:51:4b:fe:08:48:b2:6b:d6:7b:8d:e4: 96:08:0d:79:c1:ba:64:50:23:a2:7d:8a:66:f2:40:c1:a6:e6: b3:6a:bf:47:56:97:6c:ed:f5:25:b0:2c:c8:79:6a:86:72:a6: 28:d0:25:1a:f0:6f:5f:75:49:9a:f6:aa:7d:3f:a9:55:af:e6: a9:81:b4:d7:30:2b:a5:6d:16:cf:d8:6f:de:ab:11:fa:84:f3: ab:7a:59:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWLzcD7juIwlU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjA3OGUyMTUtMDE0Zi00NTU5LTljZTYtMDQ3NmM1ZDZhOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rhgDutsLCxkmz1gSid8xjY7lknaAC+q2sH9 JolUCDrHdwXhzuca5IR8HPetET2kJo07Y9Za/5uwB38hFu9IbWELMROZNtgyCJ+/ cojb1wCZG1ic17NI8RkkDJOB4DnWXkA/0ylpVQbdCwYQrVVxgLcutK5KImKBUlVZ BBGINAgTe2/IoUUhFqKe3jaHk7H3WYmt54qM/IW6EEkCcCQCl4IgaaFTelFAhrZx wqF8Z0IFAXmSb0Ut4BEcnUzf1lhAZCdMdQSIEAvZfBKMznW2DNMk7Xqmu5TKJ+o0 5am+ZOc5MpbZWMqaNNgUw8mcqAFVllyTUZP1JCJsH0dff4GRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWIi+/nIEVa6MRcCfTNJHU/bBloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDI5MTRiMTAtNTI5YS0z YzE1LTlkYjItNDY1MTVkNGJkOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/dT3zZLxgdhU1N5ATdYgITY4a/Oyw1QCjD00mrMqtbSoX4Tda1yw4R vi2gdyEHOPeDupJVmpA9ORUaTKgGf5fLsF6JDcgbAjmiUsxFwzfafw8jHr5rzWsZ KVNhjCbg8vAduoURGX6x71pHfFDybJ+YZaEEgSsoEddT02mzOzAet3lhi3ziS8Cm VuAE9MxuGOu6PVhrn8/EsBC5p3guYs5EJZi4NE4Ty2hRS/4ISLJr1nuN5JYIDXnB umRQI6J9imbyQMGm5rNqv0dWl2zt9SWwLMh5aoZypijQJRrwb191SZr2qn0/qVWv 5qmBtNcwK6VtFs/Yb96rEfqE86t6WaM= -----END CERTIFICATE-----Generated at Tue Sep 9 07:58:43 2025 by rpki-client