$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2ece926-3e8a-3c09-9517-1ece18c09c22.roa File: e2ece926-3e8a-3c09-9517-1ece18c09c22.roa (raw, json) Hash identifier: 0N7oiJa26CaXjr0pq3bk2hvtHuO7iVWO2OUteIjAr8c= Subject key identifier: 0E:D3:30:DA:32:8E:4A:A9:DC:6A:18:C9:6C:E0:41:17:04:B6:5A:50 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6863421F2952D4BA00C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2ece926-3e8a-3c09-9517-1ece18c09c22.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 128.109.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:68:63:42:1f:29:52:d4:ba:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=7c2e57a4-2337-484a-92e8-d6a611dd8d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:d9:ce:45:c5:22:43:1e:4f:c7:8d:a4:2b: 66:3f:5f:ed:44:75:7a:84:b6:e3:dc:da:40:21:c8: 09:71:4d:b8:c6:fd:f4:84:b5:4e:29:4b:67:57:cb: f4:e1:da:eb:21:4e:6f:3d:f0:c0:70:6f:0b:b6:19: eb:11:28:53:f5:67:db:a1:85:fb:3c:2b:e6:96:a5: 71:e4:c8:5c:31:34:5f:d4:a2:24:2c:48:f0:d7:f7: 9f:b9:89:56:10:47:e1:a9:50:1a:c5:3e:a9:5a:1f: 58:bf:b8:60:d3:49:06:35:d4:8f:32:79:3c:d7:2d: a8:de:7e:a9:f8:f2:98:c0:bd:5b:d1:ee:1a:01:29: 8d:c7:dc:84:74:99:b8:66:69:79:ac:a1:3d:7b:8e: fe:01:65:4d:25:8f:6c:9c:1c:73:87:70:d3:22:0b: 55:20:65:fa:34:8b:fc:18:f8:01:01:48:19:04:ea: 9b:5a:37:b5:63:72:9d:c3:06:f2:5c:2e:15:33:1a: f0:9c:f2:ee:ce:67:28:9d:3d:c1:2e:f8:c0:3e:25: 43:63:62:79:58:37:75:d5:f9:31:30:80:ae:fa:6d: 56:65:13:ad:8e:f6:ed:cb:ee:89:73:77:b6:1e:d8: 32:9c:92:34:8c:41:02:2f:ce:46:80:79:c0:32:61: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D3:30:DA:32:8E:4A:A9:DC:6A:18:C9:6C:E0:41:17:04:B6:5A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2ece926-3e8a-3c09-9517-1ece18c09c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bd:91:a8:f0:10:3c:b7:da:a3:6e:9d:db:2b:49:6d:b2:8b: 7f:1c:2b:ca:84:8f:d6:d2:3d:7a:70:2f:92:76:43:c2:03:b2: cd:f3:be:89:00:21:a1:2f:f6:42:bc:88:73:8a:1c:0d:6f:48: 83:76:c2:a2:1e:03:c2:f4:9c:c0:0a:3c:60:83:43:25:c0:a9: 06:51:34:ef:57:38:5c:41:87:6b:16:b4:cf:15:43:bf:b2:80: 57:0b:51:a7:ee:88:63:ae:d2:07:40:b3:a6:24:51:78:87:e5: 30:e2:8b:cc:12:b1:e3:f7:a6:47:b9:63:1b:85:fe:19:f6:dd: a1:78:83:69:f2:e0:5a:3f:37:38:84:fb:57:8e:b8:a8:59:5c: 56:d7:ea:eb:3b:42:02:d3:48:76:86:3a:53:c7:cb:47:cc:7d: a8:50:f9:44:49:9c:91:f0:6c:84:b0:73:e3:7c:cd:16:6f:51: 2f:5e:f4:55:8c:93:cd:2d:75:a7:37:03:3b:76:4a:25:df:c4: 93:2c:2c:66:20:57:d4:80:40:39:c3:dd:72:46:35:aa:77:65: 05:a7:80:8f:ce:f7:e6:c9:3d:85:80:e9:df:96:fa:49:04:09: 56:f5:7b:b9:1a:28:1d:53:ed:e0:51:71:99:7b:73:51:f1:77: 60:ff:e4:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGhjQh8pUtS6AMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk N2MyZTU3YTQtMjMzNy00ODRhLTkyZTgtZDZhNjExZGQ4ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJfZzkXFIkMeT8eNpCtmP1/tRHV6hLbj3NpA IcgJcU24xv30hLVOKUtnV8v04drrIU5vPfDAcG8LthnrEShT9WfboYX7PCvmlqVx 5MhcMTRf1KIkLEjw1/efuYlWEEfhqVAaxT6pWh9Yv7hg00kGNdSPMnk81y2o3n6p +PKYwL1b0e4aASmNx9yEdJm4Zml5rKE9e47+AWVNJY9snBxzh3DTIgtVIGX6NIv8 GPgBAUgZBOqbWje1Y3KdwwbyXC4VMxrwnPLuzmconT3BLvjAPiVDY2J5WDd11fkx MICu+m1WZROtjvbty+6Jc3e2HtgynJI0jEECL85GgHnAMmFUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7TMNoyjkqp3GoYyWzgQRcEtlpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTJlY2U5MjYtM2U4YS0z YzA5LTk1MTctMWVjZTE4YzA5YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe9kajwEDy32qNundsrSW2yi38cK8qEj9bSPXpwL5J2Q8IDss3zvokA IaEv9kK8iHOKHA1vSIN2wqIeA8L0nMAKPGCDQyXAqQZRNO9XOFxBh2sWtM8VQ7+y gFcLUafuiGOu0gdAs6YkUXiH5TDii8wSseP3pke5YxuF/hn23aF4g2ny4Fo/NziE +1eOuKhZXFbX6us7QgLTSHaGOlPHy0fMfahQ+URJnJHwbISwc+N8zRZvUS9e9FWM k80tdac3Azt2SiXfxJMsLGYgV9SAQDnD3XJGNap3ZQWngI/O9+bJPYWA6d+W+kkE CVb1e7kaKB1T7eBRcZl7c1Hxd2D/5AU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:30 2025 by rpki-client