$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa File: d5f30706-6678-3210-83e0-1f1f74338577.roa (raw, json) Hash identifier: Zdxd+oEMu3y02/wduFicOy9dm0oJCynBo8feTPGJkm8= Subject key identifier: 50:48:D0:2C:89:D6:54:B8:54:68:54:24:16:A6:37:DE:67:3E:3C:96 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8A17D1D59BD7FA9E8BC0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa Signing time: Fri 06 Mar 2026 15:38:27 +0000 ROA not before: Fri 06 Mar 2026 15:38:27 +0000 ROA not after: Thu 04 Jun 2026 14:38:27 +0000 asID: 81 IP address blocks: 128.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8a:17:d1:d5:9b:d7:fa:9e:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:27 2026 GMT Not After : Jun 4 14:38:27 2026 GMT Subject: CN=d80dbfbf-d5e0-4050-9a9e-1fec75ec7140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:70:14:3a:55:89:4a:51:49:73:b4:91:0f: 05:04:1d:8d:b7:cf:20:5e:03:79:28:b2:2a:c9:8d: 54:e2:23:d7:9c:ea:1e:72:ba:14:d1:02:8e:ea:4f: 3e:53:2d:44:68:f1:50:0f:95:89:e8:2d:a7:96:7e: 7a:25:1f:b8:be:b5:bd:54:d1:ee:29:49:9d:01:e7: 82:fb:73:9a:74:9e:34:57:6e:80:6d:9f:4d:48:54: 98:0f:65:ae:ce:73:63:93:58:1b:9f:80:50:86:5a: 2d:04:71:07:2d:1e:fe:a3:c4:76:e2:7a:06:17:2d: c3:be:d4:bf:b6:a4:03:ab:80:69:f3:2c:1a:25:13: c3:c5:49:2b:32:c4:88:6e:08:80:6c:0d:36:1f:a7: 05:16:98:ef:f9:96:15:f9:e6:8f:80:a4:3f:3d:7f: e3:0a:5c:8a:ff:b0:7a:0a:c0:3e:e6:48:eb:01:ca: 36:99:06:bf:bf:81:e7:99:39:62:21:37:6b:37:b5: 53:06:60:6a:f8:96:18:31:dd:28:91:43:95:4b:d4: 0a:11:10:6d:93:79:da:39:64:eb:ac:dc:70:34:c1: e5:1e:0b:11:47:c3:a5:5f:18:5a:62:55:7a:87:af: 7e:d4:5c:ad:d1:75:52:65:bd:8d:76:04:34:ec:3e: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:48:D0:2C:89:D6:54:B8:54:68:54:24:16:A6:37:DE:67:3E:3C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:82:b1:26:75:0e:49:7a:21:8d:6b:8c:7e:59:ca:7e:5f:16: 07:67:56:d2:07:47:13:89:12:c3:39:ea:c7:21:48:e2:33:67: fe:2f:ab:23:fc:87:2b:2f:1a:6a:32:32:23:d8:be:69:0a:ac: 8b:52:6d:b8:68:77:63:c1:d0:e8:3c:f3:46:38:72:fb:58:14: 81:b3:87:61:88:87:78:0f:15:f3:4d:10:03:9f:ed:d5:22:3e: da:b0:0a:ef:f5:1c:ad:09:82:e9:9e:10:d4:59:f1:71:95:33: b0:e7:ce:62:5e:bf:07:9e:cc:13:f8:d7:60:02:f3:16:06:73: ad:43:5a:1e:bb:19:8e:78:96:3b:45:47:47:07:70:f2:1b:3b: 11:dc:27:f8:9f:2f:bb:1a:ed:ed:48:73:5f:a7:5e:08:91:a8: 3b:80:e4:8b:bb:f4:ce:36:cc:02:c2:cb:25:00:ef:25:ab:ad: 4d:4b:d6:a6:c0:82:bc:a3:a5:cb:5b:ba:84:3f:59:ca:b8:aa: f9:00:d6:71:a0:34:eb:94:81:15:5d:2a:30:12:17:6a:44:f4: b8:42:23:62:54:ce:1b:33:91:5f:f8:73:9d:2d:b6:53:09:16: 5b:06:77:b0:a5:83:14:0c:0e:a5:f3:38:9c:ff:d5:1f:c3:ab: e5:cd:aa:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYoX0dWb1/qei8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk ZDgwZGJmYmYtZDVlMC00MDUwLTlhOWUtMWZlYzc1ZWM3MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm25wFDpViUpRSXO0kQ8FBB2Nt88gXgN5KLIq yY1U4iPXnOoecroU0QKO6k8+Uy1EaPFQD5WJ6C2nln56JR+4vrW9VNHuKUmdAeeC +3OadJ40V26AbZ9NSFSYD2WuznNjk1gbn4BQhlotBHEHLR7+o8R24noGFy3DvtS/ tqQDq4Bp8ywaJRPDxUkrMsSIbgiAbA02H6cFFpjv+ZYV+eaPgKQ/PX/jClyK/7B6 CsA+5kjrAco2mQa/v4HnmTliITdrN7VTBmBq+JYYMd0okUOVS9QKERBtk3naOWTr rNxwNMHlHgsRR8OlXxhaYlV6h69+1Fyt0XVSZb2NdgQ07D7d5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBI0CyJ1lS4VGhUJBamN95nPjyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDVmMzA3MDYtNjY3OC0z MjEwLTgzZTAtMWYxZjc0MzM4NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOCsSZ1Dkl6IY1rjH5Zyn5fFgdnVtIHRxOJEsM56schSOIzZ/4vqyP8 hysvGmoyMiPYvmkKrItSbbhod2PB0Og880Y4cvtYFIGzh2GIh3gPFfNNEAOf7dUi PtqwCu/1HK0JgumeENRZ8XGVM7DnzmJevweezBP412AC8xYGc61DWh67GY54ljtF R0cHcPIbOxHcJ/ifL7sa7e1Ic1+nXgiRqDuA5Iu79M42zALCyyUA7yWrrU1L1qbA gryjpctbuoQ/Wcq4qvkA1nGgNOuUgRVdKjASF2pE9LhCI2JUzhszkV/4c50ttlMJ FlsGd7ClgxQMDqXzOJz/1R/Dq+XNqtI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:42:39 2026 by rpki-client