$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/523ba9dc-30e3-3de5-a735-e4909f4e987e.roa File: 523ba9dc-30e3-3de5-a735-e4909f4e987e.roa (raw, json) Hash identifier: 0aEWkhxYj3O6GnQV1w6Wa1qb1jMdbSho/xJ7L66FV40= Subject key identifier: 02:E0:B1:6F:94:56:66:F0:B1:07:A0:DD:D3:56:F8:3D:99:C8:15:48 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C688E16ABAF032E9C8480 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/523ba9dc-30e3-3de5-a735-e4909f4e987e.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 128.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:68:8e:16:ab:af:03:2e:9c:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=3d2292fb-83b3-46cd-b32f-95b57312a7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:03:90:0b:fc:03:74:1a:93:a5:c9:cb:81: db:9f:40:23:e7:6a:13:06:e1:e9:bb:e6:7b:ca:fe: 9b:33:5b:aa:ff:c4:a8:0d:e1:8b:08:36:b7:22:b7: 39:55:02:d7:d9:dd:b6:46:23:c0:0e:18:71:3d:b1: 85:7a:71:76:e3:33:05:af:69:3e:d3:48:52:ca:05: 0b:26:1c:40:53:56:a1:0a:d0:0b:8a:37:2d:1e:63: c0:f2:bc:eb:77:67:ca:20:61:f1:2f:f9:3e:20:57: 1f:21:57:94:35:2b:2b:74:a5:6d:11:5e:05:f5:07: a0:98:59:78:a9:90:4e:37:73:62:9a:7e:26:dc:da: bd:b9:32:45:42:d7:53:be:e9:a0:59:30:ed:f4:6d: 02:72:ec:8d:83:f6:34:55:37:a4:2e:62:15:bb:19: 35:05:a9:fa:ec:73:71:4b:fc:3c:50:3e:30:7f:d4: 78:83:c4:07:6b:48:b7:5f:48:a5:85:b0:b3:09:ef: 43:ae:4f:c4:fa:48:c3:dd:2d:d6:0a:80:6c:1c:1a: f6:15:54:df:78:d9:cb:5d:6c:60:6f:00:81:22:f2: 8e:b7:ab:51:59:26:db:39:5c:b1:6a:a4:82:fe:31: 53:40:4c:f8:05:d8:ac:79:19:3a:1f:93:43:20:0f: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:B1:6F:94:56:66:F0:B1:07:A0:DD:D3:56:F8:3D:99:C8:15:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/523ba9dc-30e3-3de5-a735-e4909f4e987e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:70:3d:8f:e4:1f:e1:4e:6e:55:b3:b6:17:dd:6a:46:30:70: 27:0a:f9:26:c6:6e:77:2d:f1:8e:a6:76:16:f7:8b:58:2d:cc: d9:09:2c:6d:49:53:c4:26:22:7e:26:4e:0c:a6:14:16:d1:69: d7:44:86:a9:26:38:69:ad:f6:2d:aa:92:6f:54:a3:17:c8:f4: a1:ed:ea:d1:11:7a:12:42:c9:c0:e1:da:40:66:3e:77:52:1a: f1:ae:9e:50:0d:72:e1:85:42:94:4c:79:ed:7e:62:39:c7:08: 25:a2:af:ae:a7:ef:a2:0f:5c:96:12:e6:c7:5a:4f:18:3f:90: e2:f1:bd:03:13:dc:f7:ec:f5:1a:11:18:70:dc:91:ff:0a:41: 70:c2:15:76:93:e1:59:88:26:b7:f7:9d:24:3d:ac:2f:2a:90: f3:50:8d:30:5f:72:c0:8d:ba:53:3d:e1:a5:7b:82:db:88:c9: 01:ce:67:76:28:f3:72:25:6d:d3:4c:32:9b:dc:7a:91:83:f7: e7:ea:ea:6c:15:66:6c:02:bb:89:f9:06:6c:12:7c:11:24:c2: 2f:74:0a:60:dc:2f:7f:40:0a:da:1e:40:9c:7c:d3:23:cc:88: 83:1f:80:ef:a2:cb:0b:77:11:dd:6d:39:50:4b:17:7c:23:ae: 2e:6f:1e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGiOFquvAy6chIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk M2QyMjkyZmItODNiMy00NmNkLWIzMmYtOTViNTczMTJhN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRMDkAv8A3Qak6XJy4Hbn0Aj52oTBuHpu+Z7 yv6bM1uq/8SoDeGLCDa3Irc5VQLX2d22RiPADhhxPbGFenF24zMFr2k+00hSygUL JhxAU1ahCtALijctHmPA8rzrd2fKIGHxL/k+IFcfIVeUNSsrdKVtEV4F9QegmFl4 qZBON3Nimn4m3Nq9uTJFQtdTvumgWTDt9G0CcuyNg/Y0VTekLmIVuxk1Ban67HNx S/w8UD4wf9R4g8QHa0i3X0ilhbCzCe9Drk/E+kjD3S3WCoBsHBr2FVTfeNnLXWxg bwCBIvKOt6tRWSbbOVyxaqSC/jFTQEz4BdiseRk6H5NDIA8aJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALgsW+UVmbwsQeg3dNW+D2ZyBVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTIzYmE5ZGMtMzBlMy0z ZGU1LWE3MzUtZTQ5MDlmNGU5ODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9wPY/kH+FOblWzthfdakYwcCcK+SbGbnct8Y6mdhb3i1gtzNkJLG1J U8QmIn4mTgymFBbRaddEhqkmOGmt9i2qkm9UoxfI9KHt6tERehJCycDh2kBmPndS GvGunlANcuGFQpRMee1+YjnHCCWir66n76IPXJYS5sdaTxg/kOLxvQMT3Pfs9RoR GHDckf8KQXDCFXaT4VmIJrf3nSQ9rC8qkPNQjTBfcsCNulM94aV7gtuIyQHOZ3Yo 83IlbdNMMpvcepGD9+fq6mwVZmwCu4n5BmwSfBEkwi90CmDcL39ACtoeQJx80yPM iIMfgO+iywt3Ed1tOVBLF3wjri5vHv4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:58 2025 by rpki-client