$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/31d2d530-efbc-3178-b1f0-4e10c19a2efe.roa File: 31d2d530-efbc-3178-b1f0-4e10c19a2efe.roa (raw, json) Hash identifier: mkco1FDUQ2DVo18hhFTBzEuFv7UX/m3NgOnpGQmyO1I= Subject key identifier: 6F:5C:93:89:1C:06:47:96:28:68:B5:CA:33:B3:79:E9:DA:7E:E4:25 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C687FFE791643111F3900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/31d2d530-efbc-3178-b1f0-4e10c19a2efe.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 128.109.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:68:7f:fe:79:16:43:11:1f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=b0f8c647-8b9d-42b7-952f-da893e49e65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:03:98:2f:c4:44:8d:35:ef:b4:4a:fb:c5: 6b:e5:09:8b:da:52:65:37:1c:50:05:f0:02:e7:78: 2b:5a:6c:f1:ad:bb:fd:ac:6d:c8:72:fb:15:7f:cc: 3c:dd:6a:84:a8:69:0e:c2:20:39:4b:dd:76:0c:98: ff:bd:74:88:63:a0:ba:c0:c1:dc:9a:0a:ed:58:1a: f9:9d:74:68:21:64:ef:b9:a3:a2:b2:6b:11:56:36: 4a:83:7b:8c:ef:86:7b:26:8e:84:40:c0:cd:ea:9d: 87:3c:98:1b:32:75:ac:ac:55:4c:f5:27:ec:9f:0d: a6:34:6a:b7:48:e1:d8:02:88:4c:d9:23:05:28:54: 9b:b3:2b:e5:b5:e7:75:f0:2f:a8:61:c5:06:b8:36: 4b:39:e2:97:9e:e4:af:6a:fd:e0:62:84:21:4c:2c: 85:04:1b:0c:bc:10:e6:4a:8e:ad:10:5a:ce:f1:81: 95:73:03:1a:7d:b5:aa:6d:0f:dc:ab:de:6d:fb:34: e6:26:41:6c:47:c1:50:ef:53:b5:63:00:c1:c5:fc: 3f:94:4f:e0:9a:d1:cb:23:54:ff:92:28:c0:6c:d8: 6c:b9:97:cb:32:42:47:d4:64:bb:34:b7:cd:0d:40: f7:48:3a:d2:ba:18:b1:34:27:fb:89:7e:68:66:bc: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5C:93:89:1C:06:47:96:28:68:B5:CA:33:B3:79:E9:DA:7E:E4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/31d2d530-efbc-3178-b1f0-4e10c19a2efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f2:a2:61:02:4b:1a:87:2b:8b:8b:e6:13:07:61:a3:f1:95: 52:57:9e:21:58:07:92:fc:48:86:4c:75:7f:06:dc:ac:bb:5c: 5b:30:1b:6a:7c:ff:b9:dd:d4:2a:24:c2:37:3e:7a:53:75:fd: 4f:e9:c0:46:5f:3e:f2:77:8f:2f:d6:ab:6a:8e:55:5d:07:1b: 61:49:c1:f4:56:16:98:5a:b3:28:74:c6:91:61:63:bf:40:55: 20:5d:eb:c0:ef:fa:8f:5f:78:90:31:2e:c3:56:bc:18:45:81: 06:46:a7:2e:1d:f1:94:24:fc:4a:5b:15:3d:26:7f:4f:8c:0f: 5d:d7:0f:a5:04:70:37:6a:40:42:39:2c:ba:5b:74:7e:79:ff: d2:43:70:f7:2b:22:e8:b4:fb:b0:d2:64:12:88:48:fe:bd:7e: 2e:fd:ea:29:77:49:46:9a:63:2d:24:d7:74:d5:9e:75:40:9b: aa:64:1b:40:dd:55:2b:69:06:b2:22:7d:58:f7:42:1e:6f:41: 7e:b0:34:fe:0a:bf:b7:69:44:a0:99:e8:ea:37:2f:ed:1c:3d: 38:8f:fb:ff:a3:71:4d:3b:2f:cd:16:2b:86:04:57:80:80:63: 7b:60:41:5e:31:de:49:e3:f2:92:45:45:3e:d9:ba:82:8c:85: 19:67:61:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGh//nkWQxEfOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk YjBmOGM2NDctOGI5ZC00MmI3LTk1MmYtZGE4OTNlNDllNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3QDmC/ERI0177RK+8Vr5QmL2lJlNxxQBfAC 53grWmzxrbv9rG3IcvsVf8w83WqEqGkOwiA5S912DJj/vXSIY6C6wMHcmgrtWBr5 nXRoIWTvuaOismsRVjZKg3uM74Z7Jo6EQMDN6p2HPJgbMnWsrFVM9Sfsnw2mNGq3 SOHYAohM2SMFKFSbsyvlted18C+oYcUGuDZLOeKXnuSvav3gYoQhTCyFBBsMvBDm So6tEFrO8YGVcwMafbWqbQ/cq95t+zTmJkFsR8FQ71O1YwDBxfw/lE/gmtHLI1T/ kijAbNhsuZfLMkJH1GS7NLfNDUD3SDrSuhixNCf7iX5oZrwn2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9ck4kcBkeWKGi1yjOzeenafuQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzFkMmQ1MzAtZWZiYy0z MTc4LWIxZjAtNGUxMGMxOWEyZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/yomECSxqHK4uL5hMHYaPxlVJXniFYB5L8SIZMdX8G3Ky7XFswG2p8 /7nd1Cokwjc+elN1/U/pwEZfPvJ3jy/Wq2qOVV0HG2FJwfRWFphasyh0xpFhY79A VSBd68Dv+o9feJAxLsNWvBhFgQZGpy4d8ZQk/EpbFT0mf0+MD13XD6UEcDdqQEI5 LLpbdH55/9JDcPcrIui0+7DSZBKISP69fi796il3SUaaYy0k13TVnnVAm6pkG0Dd VStpBrIifVj3Qh5vQX6wNP4Kv7dpRKCZ6Oo3L+0cPTiP+/+jcU07L80WK4YEV4CA Y3tgQV4x3knj8pJFRT7ZuoKMhRlnYWE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:56 2025 by rpki-client