$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8851ba6-1b31-36dc-b179-5235b2720f45.roa File: d8851ba6-1b31-36dc-b179-5235b2720f45.roa (raw, json) Hash identifier: FSm8NP6iQKcYgHXwIZVxaFutXMD0lwdaVrZBJJ6Ll3c= Subject key identifier: F2:1D:6B:6D:8F:D5:84:A9:60:75:93:42:2A:A3:62:5B:11:63:C5:66 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8A432A0BB96F972844F8 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8851ba6-1b31-36dc-b179-5235b2720f45.roa Signing time: Fri 06 Mar 2026 15:38:27 +0000 ROA not before: Fri 06 Mar 2026 15:38:27 +0000 ROA not after: Thu 04 Jun 2026 14:38:27 +0000 asID: 81 IP address blocks: 128.109.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8a:43:2a:0b:b9:6f:97:28:44:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:27 2026 GMT Not After : Jun 4 14:38:27 2026 GMT Subject: CN=145f68e4-a2bf-44c8-89ba-ceb05e70ca67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:f0:dd:39:91:82:96:30:c2:2d:87:ef:b0: 44:3b:44:f5:68:7f:e2:75:66:d5:b2:e4:16:34:7a: b3:64:a8:79:d8:5e:d9:62:22:1d:b2:ba:43:a9:79: dd:a1:af:ec:2f:0f:53:1d:9b:3f:b5:5c:22:9f:50: fb:2c:6c:2f:44:47:a3:27:c5:fe:07:b7:0e:a1:8a: 38:50:f4:fd:7f:db:d9:b7:49:2a:6f:78:85:ce:73: 32:b2:4b:5a:72:00:bb:4a:6e:36:cd:e7:1f:f4:06: e2:5a:ba:98:e2:80:cd:12:b0:a6:f6:d8:83:aa:94: 00:70:ad:d2:00:29:05:92:33:31:9c:b4:8a:77:65: 14:40:60:5b:b3:4f:30:48:15:8f:28:37:43:1f:3a: 8b:b8:20:b3:14:2b:3c:2c:1a:c6:68:45:e1:a3:eb: d6:a8:89:3b:a7:2c:d3:1b:ec:c3:ef:1c:78:95:a7: 36:b2:24:57:c7:8f:af:ad:47:f8:c9:2b:d5:fd:29: 48:bc:84:5a:e7:ac:0b:f6:90:fa:77:7b:70:b6:d2: 88:4c:43:0f:c5:c7:2f:2e:be:15:95:90:65:0c:fb: dd:01:90:d4:f9:75:0f:51:ca:13:07:8d:e6:72:5c: fe:2f:76:3d:27:8b:1d:63:71:54:79:2e:91:d6:83: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1D:6B:6D:8F:D5:84:A9:60:75:93:42:2A:A3:62:5B:11:63:C5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8851ba6-1b31-36dc-b179-5235b2720f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c9:a3:13:3a:c1:3f:08:d9:db:86:cb:b3:c7:ad:f7:23:b5: 2e:ab:86:ba:dd:56:e3:dd:97:0e:99:6c:cd:53:2d:4b:fe:8b: b0:bc:03:93:3c:eb:d2:81:56:88:40:02:06:91:32:a9:fd:e8: 75:92:c8:ac:2e:33:8f:89:f9:f4:39:75:3d:2b:6a:ec:b3:6f: c1:2b:88:f4:1c:5a:3c:01:6f:c5:1f:4f:e2:41:16:6c:16:ed: 99:5c:6c:34:78:d9:e8:d7:cf:2d:1d:af:2b:98:cc:74:de:a9: 65:63:53:8c:5e:b8:24:83:f9:91:fe:e9:fa:f9:ba:f5:4a:72: ac:15:af:a3:0e:db:96:28:e8:de:8c:08:a8:03:d2:fd:6c:04: cf:6e:9a:56:71:61:44:69:02:17:01:0d:e9:6d:67:87:5d:d9: 67:b5:f0:fe:23:08:37:b2:b9:28:d9:d5:6f:11:07:4e:c3:88: 69:a6:b9:6b:24:42:bd:97:d5:fd:88:66:9f:1f:a5:01:09:11: 53:7c:4a:51:02:65:69:05:0f:f0:a2:f3:51:42:cf:0b:1e:8b: ab:cb:26:9b:77:31:75:3d:6e:98:15:41:a2:40:dd:0b:be:ec: 6e:3b:3e:81:f9:df:fd:4c:3b:54:a6:7e:88:15:35:a9:8a:8b: eb:4c:03:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYpDKgu5b5coRPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk MTQ1ZjY4ZTQtYTJiZi00NGM4LTg5YmEtY2ViMDVlNzBjYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Pw3TmRgpYwwi2H77BEO0T1aH/idWbVsuQW NHqzZKh52F7ZYiIdsrpDqXndoa/sLw9THZs/tVwin1D7LGwvREejJ8X+B7cOoYo4 UPT9f9vZt0kqb3iFznMysktacgC7Sm42zecf9AbiWrqY4oDNErCm9tiDqpQAcK3S ACkFkjMxnLSKd2UUQGBbs08wSBWPKDdDHzqLuCCzFCs8LBrGaEXho+vWqIk7pyzT G+zD7xx4lac2siRXx4+vrUf4ySvV/SlIvIRa56wL9pD6d3twttKITEMPxccvLr4V lZBlDPvdAZDU+XUPUcoTB43mclz+L3Y9J4sdY3FUeS6R1oPtQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIda22P1YSpYHWTQiqjYlsRY8VmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDg4NTFiYTYtMWIzMS0z NmRjLWIxNzktNTIzNWIyNzIwZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADJoxM6wT8I2duGy7PHrfcjtS6rhrrdVuPdlw6ZbM1TLUv+i7C8A5M8 69KBVohAAgaRMqn96HWSyKwuM4+J+fQ5dT0rauyzb8EriPQcWjwBb8UfT+JBFmwW 7ZlcbDR42ejXzy0dryuYzHTeqWVjU4xeuCSD+ZH+6fr5uvVKcqwVr6MO25Yo6N6M CKgD0v1sBM9umlZxYURpAhcBDeltZ4dd2We18P4jCDeyuSjZ1W8RB07DiGmmuWsk Qr2X1f2IZp8fpQEJEVN8SlECZWkFD/Ci81FCzwsei6vLJpt3MXU9bpgVQaJA3Qu+ 7G47PoH53/1MO1SmfogVNamKi+tMA2s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:03:36 2026 by rpki-client