$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e93dd784-dd8c-3788-9cb3-87366ec60477.roa File: e93dd784-dd8c-3788-9cb3-87366ec60477.roa (raw, json) Hash identifier: k4bHM7qBMfnTk/oBaARjl+udVgy1znpzCIYLhsEn94Q= Subject key identifier: C6:03:C5:43:05:40:BF:09:DA:5F:08:CC:14:CF:7C:F9:85:C0:BA:B4 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C68715D67760E10811C00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e93dd784-dd8c-3788-9cb3-87366ec60477.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 128.109.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:68:71:5d:67:76:0e:10:81:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=4c5f3017-c3f7-453d-8f45-545fd26a2038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:89:61:99:20:ab:13:49:35:c5:b5:c8:61: 51:7d:0e:bf:06:45:89:8e:65:45:be:c3:5e:15:cb: cb:14:43:8a:8d:e8:3c:f5:ff:f3:19:65:04:f6:e3: fc:08:f7:a8:74:4a:31:51:1e:05:3a:5e:1b:f9:19: 19:78:9c:f9:e5:ee:42:f6:15:61:da:2b:05:f8:23: 4a:2d:51:f1:ee:ea:d3:5e:da:60:9b:19:a9:56:34: f4:ae:a7:6e:e9:b8:3d:a2:47:c6:14:c0:2d:46:3f: 93:68:ff:7b:90:5a:a7:e8:48:15:14:86:28:7f:84: e0:3a:7e:38:ec:f2:88:36:d1:0c:5b:a3:04:21:b2: 27:88:3f:c8:48:2c:bd:54:3a:11:4a:e7:6c:81:56: 29:df:3e:ae:67:0a:9d:cd:49:b0:4a:36:95:f8:af: 62:de:fa:f5:88:75:83:83:67:03:49:42:95:88:b0: 36:4b:5a:a7:c0:8b:1f:5f:1a:5b:a4:be:ff:dd:c9: 10:95:e1:b3:85:dc:91:d4:dc:ec:e7:e9:f5:d0:ce: a2:c0:d6:00:c9:c6:22:98:4c:12:47:50:45:25:dd: e9:a0:ee:c0:41:45:49:05:c4:6b:53:a8:e5:57:42: 11:a4:7c:80:36:0b:ba:ca:4c:6e:a8:33:5f:e1:a1: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:03:C5:43:05:40:BF:09:DA:5F:08:CC:14:CF:7C:F9:85:C0:BA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e93dd784-dd8c-3788-9cb3-87366ec60477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:72:2a:aa:0a:6d:d3:7b:f9:d1:b3:fa:b7:cf:d2:49:97:ce: b7:9f:96:8f:cb:2e:1b:11:6e:6d:52:11:75:56:86:db:6a:2a: d4:25:0a:22:0d:9c:8f:75:72:43:be:de:ad:79:f5:4d:f8:8a: b1:14:43:04:b5:de:6b:7a:c0:ad:aa:c4:7c:a6:e6:08:cf:47: b1:45:ef:15:b4:99:b4:ef:a9:c5:cb:96:a0:6c:ab:16:07:58: 20:c2:5f:56:21:fd:b0:7b:e5:66:a7:2e:1c:f0:01:09:91:2b: 6d:71:7d:ed:2f:2f:a1:6d:ef:f5:fc:74:26:97:07:0f:b5:2f: b0:dc:19:05:10:24:38:28:d2:6f:43:c4:6f:00:fb:f2:ec:b6: 9e:35:e6:94:ac:54:1c:74:fc:87:b8:62:88:4e:64:ad:63:0a: fd:15:cc:b9:74:57:d1:27:ac:3f:cf:49:4f:7a:08:10:b0:c1: bf:e9:ee:c3:d8:9c:2a:56:e0:9c:5a:c4:d7:51:73:17:8d:20: c1:a6:8c:cd:ed:fb:fa:82:29:97:72:98:6b:20:16:f1:11:f2: 42:b0:3c:9f:4e:66:26:70:56:f5:ad:4a:4a:2c:ea:96:50:c1: 69:ed:5b:b8:c6:6b:bc:bc:ae:0a:00:4b:f6:66:07:b1:0f:87: 24:d7:76:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGhxXWd2DhCBHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk NGM1ZjMwMTctYzNmNy00NTNkLThmNDUtNTQ1ZmQyNmEyMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6aJYZkgqxNJNcW1yGFRfQ6/BkWJjmVFvsNe FcvLFEOKjeg89f/zGWUE9uP8CPeodEoxUR4FOl4b+RkZeJz55e5C9hVh2isF+CNK LVHx7urTXtpgmxmpVjT0rqdu6bg9okfGFMAtRj+TaP97kFqn6EgVFIYof4TgOn44 7PKINtEMW6MEIbIniD/ISCy9VDoRSudsgVYp3z6uZwqdzUmwSjaV+K9i3vr1iHWD g2cDSUKViLA2S1qnwIsfXxpbpL7/3ckQleGzhdyR1Nzs5+n10M6iwNYAycYimEwS R1BFJd3poO7AQUVJBcRrU6jlV0IRpHyANgu6ykxuqDNf4aH8mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYDxUMFQL8J2l8IzBTPfPmFwLq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTkzZGQ3ODQtZGQ4Yy0z Nzg4LTljYjMtODczNjZlYzYwNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpyKqoKbdN7+dGz+rfP0kmXzreflo/LLhsRbm1SEXVWhttqKtQlCiIN nI91ckO+3q159U34irEUQwS13mt6wK2qxHym5gjPR7FF7xW0mbTvqcXLlqBsqxYH WCDCX1Yh/bB75WanLhzwAQmRK21xfe0vL6Ft7/X8dCaXBw+1L7DcGQUQJDgo0m9D xG8A+/Lstp415pSsVBx0/Ie4YohOZK1jCv0VzLl0V9EnrD/PSU96CBCwwb/p7sPY nCpW4JxaxNdRcxeNIMGmjM3t+/qCKZdymGsgFvER8kKwPJ9OZiZwVvWtSkos6pZQ wWntW7jGa7y8rgoAS/ZmB7EPhyTXdt8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:11 2025 by rpki-client