$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/90e8c564-9594-3838-8dd8-11e60cd82ac5.roa File: 90e8c564-9594-3838-8dd8-11e60cd82ac5.roa (raw, json) Hash identifier: BJAQbTJqJ2R4RNUOnLPKGuPfFT029hl4brMGWxTEXpE= Subject key identifier: 42:CB:61:D2:ED:E6:80:FA:65:B2:4C:64:C5:C5:D5:00:E1:CB:72:5B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8A26742899A74F2E1640 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/90e8c564-9594-3838-8dd8-11e60cd82ac5.roa Signing time: Fri 06 Mar 2026 15:38:27 +0000 ROA not before: Fri 06 Mar 2026 15:38:27 +0000 ROA not after: Thu 04 Jun 2026 14:38:27 +0000 asID: 81 IP address blocks: 128.109.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8a:26:74:28:99:a7:4f:2e:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:27 2026 GMT Not After : Jun 4 14:38:27 2026 GMT Subject: CN=cac7eea0-3006-47f6-92aa-8246e728b931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:bd:86:e8:6f:62:97:33:99:96:d5:f6:2d: ef:9d:6f:6b:34:18:8c:43:76:24:de:ed:9c:1c:00: 8d:98:cf:bf:dc:93:aa:66:8e:9d:18:70:26:94:1b: 8e:42:34:da:15:67:55:cb:42:49:48:ec:e6:5d:57: b7:d7:14:b5:9a:3b:5b:b9:06:29:99:f7:cd:25:e9: 46:6f:dc:89:21:fe:77:99:3e:6e:73:af:c2:33:ca: 1f:f6:90:33:b0:e1:26:4f:9d:40:a9:02:29:8b:ef: a2:7b:2a:cb:d7:05:a0:ba:2c:3d:05:3e:a1:27:9a: 64:13:0f:99:65:19:03:2d:51:65:b6:4a:fc:ac:64: ef:33:21:1f:29:f1:31:5e:a0:1e:a5:89:ab:98:dc: 16:07:0a:85:2e:11:53:e7:60:ed:3f:63:d6:08:f8: 95:23:33:44:07:09:0b:63:9f:56:c3:9a:5e:b6:5c: 25:58:78:e4:17:63:5f:66:ea:5d:a3:11:1a:83:b7: 61:d9:84:70:be:f1:ae:84:f7:42:14:d4:94:54:5e: 73:42:c5:f8:bc:b1:cf:0f:40:09:ef:f1:6f:38:9d: 10:c7:50:3f:fb:a6:24:99:38:f3:5e:8f:90:31:c4: 34:a8:fd:4a:05:c9:11:96:9c:24:38:bb:c3:fa:4b: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:61:D2:ED:E6:80:FA:65:B2:4C:64:C5:C5:D5:00:E1:CB:72:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/90e8c564-9594-3838-8dd8-11e60cd82ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d2:41:5e:cd:d3:57:1b:a0:d6:a7:b2:53:34:65:1d:cb:8e: 2f:06:cd:cf:05:20:74:24:d3:05:cf:f1:10:3b:01:6c:a7:5b: d5:fb:39:95:98:bf:ec:ed:f3:e8:5a:c3:a1:f7:90:1e:a1:31: f0:93:2d:ec:a6:6f:e3:0f:be:57:7d:30:2f:17:b8:b4:df:ba: 21:22:f8:49:34:d1:3d:b2:fb:66:a9:83:b0:c9:16:0c:00:db: 32:75:f3:5d:a9:bc:0a:72:63:35:fe:01:3f:b1:f0:33:7b:98: ce:1e:30:b5:9f:65:a0:34:cc:5e:58:52:74:19:e3:80:a4:30: 6e:82:83:59:2d:d1:79:1f:c4:33:06:f7:03:13:b1:39:47:4a: 8d:4b:2f:98:40:34:06:23:7e:aa:26:89:0e:0e:93:7b:9f:d4: 7c:37:54:44:c0:fb:45:be:f6:3d:7f:8f:79:38:30:63:75:80: 8f:40:b5:1c:e7:46:ca:32:3e:b0:c5:b3:45:1b:9f:35:87:8c: 82:9e:df:78:24:f1:25:9c:b9:9d:ed:27:fd:e7:5a:50:16:f8: 72:5c:4c:e3:25:a4:4a:66:21:b0:61:8f:0a:cd:b5:f3:f9:98: 44:87:39:31:28:9a:99:af:ce:b0:0b:e3:7a:80:0d:69:7c:0c: 51:fb:4e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYomdCiZp08uFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk Y2FjN2VlYTAtMzAwNi00N2Y2LTkyYWEtODI0NmU3MjhiOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK+9huhvYpczmZbV9i3vnW9rNBiMQ3Yk3u2c HACNmM+/3JOqZo6dGHAmlBuOQjTaFWdVy0JJSOzmXVe31xS1mjtbuQYpmffNJelG b9yJIf53mT5uc6/CM8of9pAzsOEmT51AqQIpi++ieyrL1wWguiw9BT6hJ5pkEw+Z ZRkDLVFltkr8rGTvMyEfKfExXqAepYmrmNwWBwqFLhFT52DtP2PWCPiVIzNEBwkL Y59Ww5petlwlWHjkF2NfZupdoxEag7dh2YRwvvGuhPdCFNSUVF5zQsX4vLHPD0AJ 7/FvOJ0Qx1A/+6YkmTjzXo+QMcQ0qP1KBckRlpwkOLvD+ks6dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELLYdLt5oD6ZbJMZMXF1QDhy3JbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTBlOGM1NjQtOTU5NC0z ODM4LThkZDgtMTFlNjBjZDgyYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzSQV7N01cboNanslM0ZR3Lji8Gzc8FIHQk0wXP8RA7AWynW9X7OZWY v+zt8+haw6H3kB6hMfCTLeymb+MPvld9MC8XuLTfuiEi+Ek00T2y+2apg7DJFgwA 2zJ1812pvApyYzX+AT+x8DN7mM4eMLWfZaA0zF5YUnQZ44CkMG6Cg1kt0XkfxDMG 9wMTsTlHSo1LL5hANAYjfqomiQ4Ok3uf1Hw3VETA+0W+9j1/j3k4MGN1gI9AtRzn RsoyPrDFs0UbnzWHjIKe33gk8SWcuZ3tJ/3nWlAW+HJcTOMlpEpmIbBhjwrNtfP5 mESHOTEompmvzrAL43qADWl8DFH7TsY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:59 2026 by rpki-client