$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa File: d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa (raw, json) Hash identifier: LhgfY+CZBhd5neGITxAN7qcGB7jihuVVC5lWcqh0GAA= Subject key identifier: B7:1A:32:62:B9:D0:D6:EC:C1:69:19:6B:3F:65:79:EE:A8:7E:AF:71 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D298D9FA2CC652F74F1800 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 81 IP address blocks: 128.109.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:98:d9:fa:2c:c6:52:f7:4f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=9888b909-ae3a-42c7-b087-91ad600285fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:37:d4:f3:c8:26:86:d1:91:12:c0:03:c7: 4f:cc:3a:47:a3:e7:38:4d:87:ba:51:d7:ba:51:c1: af:da:c7:e0:ba:0a:43:7c:1c:5f:d3:ae:89:4b:17: 85:23:f2:b3:28:2b:b5:2d:a1:bd:05:52:ba:fa:2a: 6c:ba:4c:30:72:f7:b6:fe:90:cc:62:dc:ae:1c:8a: 4a:bf:29:ff:c0:2b:31:93:5b:64:be:f6:9e:88:97: 23:e7:8a:21:92:06:2f:31:2f:50:65:5a:ea:11:ac: b0:34:ac:01:21:ce:0d:5b:ba:5c:29:57:b1:6f:ea: 52:a8:1f:d6:b5:93:48:72:21:11:47:fc:52:df:65: 8b:64:03:c0:b9:c3:09:e8:82:33:25:88:38:0d:f9: 32:68:c4:1e:5b:41:94:13:3c:ef:d4:1b:74:3e:e2: 64:83:ca:a2:86:d2:77:e6:3d:4c:63:0e:09:fd:1e: 6f:ad:3d:d8:93:90:dc:4d:53:9f:3a:6e:fb:76:f0: c5:35:f5:7f:d3:04:57:db:6e:b8:5c:e7:2e:fd:9c: 15:93:58:0e:b5:84:5d:67:85:16:64:d9:da:17:dc: 0d:3c:85:3b:a0:fa:43:8c:6c:ab:53:cf:40:2e:fc: 44:15:ee:88:f2:57:9f:12:45:b1:e2:a2:1f:be:fb: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:32:62:B9:D0:D6:EC:C1:69:19:6B:3F:65:79:EE:A8:7E:AF:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b8:54:71:11:6f:31:7e:c0:7d:f4:6c:64:ab:b2:0f:3e:3a: 57:cf:cd:77:1c:44:4b:89:95:39:a2:e9:fd:8b:57:33:31:4b: 80:da:91:78:ae:ff:d6:ae:fa:73:65:ad:4c:72:e2:64:de:66: d1:e3:f2:1b:a7:15:25:7c:51:51:51:5b:56:33:30:ef:e0:d9: 52:5d:30:1d:fb:2d:61:3e:ef:68:8f:6a:13:0c:a4:b6:07:69: e6:e8:26:7f:01:af:11:2b:05:f9:a3:8d:dc:e3:8f:ad:2a:55: 05:ae:82:d4:91:11:40:d2:66:a4:ea:7c:e0:87:50:f1:f5:ef: c8:ce:ee:fb:fe:27:18:2b:2f:bd:bb:7e:03:fd:30:e4:ba:39: ba:64:47:d9:70:45:a8:02:c9:01:36:07:aa:06:3d:87:0a:17: 00:dd:e2:18:8e:86:cb:5c:d6:86:a5:a7:79:e2:b9:bd:3a:d2: bc:16:88:c4:ff:79:04:05:e8:95:1b:8a:75:c9:df:fe:bd:77: ad:55:06:01:82:c1:d1:9d:0d:1a:3a:98:a9:05:0a:2c:e5:6c: b8:28:9a:72:41:f3:82:18:36:05:04:5a:12:53:95:d7:ea:43: b1:2c:d0:03:3c:3c:ab:3b:fa:da:fd:a1:26:20:bf:47:19:37: 24:dc:79:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0pjZ+izGUvdPGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OTg4OGI5MDktYWUzYS00MmM3LWIwODctOTFhZDYwMDI4NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31M31PPIJobRkRLAA8dPzDpHo+c4TYe6Ude6 UcGv2sfgugpDfBxf066JSxeFI/KzKCu1LaG9BVK6+ipsukwwcve2/pDMYtyuHIpK vyn/wCsxk1tkvvaeiJcj54ohkgYvMS9QZVrqEaywNKwBIc4NW7pcKVexb+pSqB/W tZNIciERR/xS32WLZAPAucMJ6IIzJYg4DfkyaMQeW0GUEzzv1Bt0PuJkg8qihtJ3 5j1MYw4J/R5vrT3Yk5DcTVOfOm77dvDFNfV/0wRX2264XOcu/ZwVk1gOtYRdZ4UW ZNnaF9wNPIU7oPpDjGyrU89ALvxEFe6I8lefEkWx4qIfvvu7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcaMmK50NbswWkZaz9lee6ofq9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDNiOWE3MWItMGE2OC0z MTk4LThiNjktODZiMWIwZmY3MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS4VHERbzF+wH30bGSrsg8+OlfPzXccREuJlTmi6f2LVzMxS4DakXiu /9au+nNlrUxy4mTeZtHj8hunFSV8UVFRW1YzMO/g2VJdMB37LWE+72iPahMMpLYH aeboJn8BrxErBfmjjdzjj60qVQWugtSREUDSZqTqfOCHUPH178jO7vv+JxgrL727 fgP9MOS6ObpkR9lwRagCyQE2B6oGPYcKFwDd4hiOhstc1oalp3niub060rwWiMT/ eQQF6JUbinXJ3/69d61VBgGCwdGdDRo6mKkFCizlbLgomnJB84IYNgUEWhJTldfq Q7Es0AM8PKs7+tr9oSYgv0cZNyTceWM= -----END CERTIFICATE-----Generated at Fri Oct 9 17:44:52 2026 by rpki-client