$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa File: 12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa (raw, json) Hash identifier: dptUPOdWhBGSTwWEo5eunvBXBzK6gnDr9L74774v3R4= Subject key identifier: 06:8A:90:58:1D:C2:82:DE:B9:A6:2E:7B:09:84:2A:4E:E6:44:1A:6E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FF80CC9CA225F05B1D680 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa Signing time: Mon 16 Jun 2025 16:03:18 +0000 ROA not before: Mon 16 Jun 2025 16:03:18 +0000 ROA not after: Sun 14 Sep 2025 16:03:18 +0000 asID: 81 IP address blocks: 128.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:f8:0c:c9:ca:22:5f:05:b1:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:18 2025 GMT Not After : Sep 14 16:03:18 2025 GMT Subject: CN=540c7d40-57b9-4d11-958d-877eaa2641ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:0e:f5:d0:de:2e:32:7e:e4:60:57:97:8e: 3c:18:08:dc:0a:08:79:5c:4a:44:f0:c0:a8:27:63: 7f:36:e0:46:dc:5c:5b:8f:ba:64:61:c2:9a:2b:38: d3:bd:ee:ff:e7:aa:f5:ae:23:d6:90:3c:7e:fc:e6: 3c:72:ff:b2:e6:5e:d8:df:cf:37:58:c1:6c:97:d5: 20:db:ae:5c:99:de:64:e6:b1:f3:fa:a9:e5:8e:67: 33:17:f1:9e:85:09:59:a5:bc:24:07:96:ef:29:cb: 14:0f:dc:40:f1:a3:09:fb:05:05:83:08:80:67:10: 40:bd:65:33:38:73:36:3a:8e:f2:47:26:ac:c1:b7: 83:b3:e8:80:79:46:87:e8:fb:b6:5e:70:3a:00:9b: 21:f9:db:69:a7:f0:da:07:24:79:ca:5d:f8:50:02: c0:15:9d:26:7a:92:fb:da:53:7b:e2:dd:f3:bb:da: e2:28:e3:f7:0d:9a:c8:97:b9:3d:08:ae:9e:bd:85: e4:17:f5:23:98:9f:9d:58:07:7f:f2:58:e1:c6:5b: ef:83:ee:59:1d:2c:fa:19:ae:16:1c:68:b7:c4:a0: b8:1c:71:2b:9e:b0:6e:47:bf:f6:35:19:46:0a:79: 41:e4:44:f8:e9:40:56:87:55:04:d9:bc:bd:87:7c: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8A:90:58:1D:C2:82:DE:B9:A6:2E:7B:09:84:2A:4E:E6:44:1A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/12ca0f4c-4fdc-38d2-8b12-ce23f079dc7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a6:b1:00:f9:fe:59:be:41:25:b2:1e:c3:fd:6f:93:ae:ae: 16:59:99:ea:6a:b7:ab:7a:7e:9b:e5:00:91:6c:d0:96:41:14: 64:15:cd:e5:85:01:92:f3:12:1e:73:56:9c:2f:4c:9f:eb:9e: 48:1b:3c:69:dc:82:e7:e8:ac:94:5b:d4:e8:4b:45:30:dc:dc: 06:2c:67:30:9a:6c:c4:4c:0b:a3:15:ef:d2:ef:aa:dd:54:e7: 1f:72:2c:7a:df:01:1d:24:1f:a3:8a:9a:05:1b:25:7e:a7:2b: 40:6e:cc:52:38:02:f1:3c:bd:94:95:3e:33:31:99:b8:72:32: e8:80:fa:ab:f0:01:ba:ee:a4:a3:e3:5a:5a:ea:1d:ae:9c:76: ab:b1:47:d1:39:b3:a7:8b:68:2b:c3:15:f9:e4:8d:03:af:ef: b7:af:ea:6e:75:4c:05:88:9a:8c:7e:2d:c7:49:ee:4a:79:04: ac:94:b4:08:40:39:0b:49:3a:22:00:3c:07:3b:7e:ec:12:a7: 0a:79:0b:9a:d7:e2:17:75:0f:cd:5e:e4:ef:2a:7d:d1:2a:2d: 0f:9f:6d:05:53:a3:89:d4:8e:6e:57:69:c5:c1:35:30:a6:13: 67:a7:2e:23:48:82:cb:74:28:87:00:f8:20:55:10:15:1e:64: fb:0e:48:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/gMycoiXwWx1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMxOFoXDTI1MDkxNDE2MDMxOFowLzEtMCsGA1UEAxMk NTQwYzdkNDAtNTdiOS00ZDExLTk1OGQtODc3ZWFhMjY0MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCYO9dDeLjJ+5GBXl448GAjcCgh5XEpE8MCo J2N/NuBG3Fxbj7pkYcKaKzjTve7/56r1riPWkDx+/OY8cv+y5l7Y3883WMFsl9Ug 265cmd5k5rHz+qnljmczF/GehQlZpbwkB5bvKcsUD9xA8aMJ+wUFgwiAZxBAvWUz OHM2Oo7yRyaswbeDs+iAeUaH6Pu2XnA6AJsh+dtpp/DaByR5yl34UALAFZ0mepL7 2lN74t3zu9riKOP3DZrIl7k9CK6evYXkF/UjmJ+dWAd/8ljhxlvvg+5ZHSz6Ga4W HGi3xKC4HHErnrBuR7/2NRlGCnlB5ET46UBWh1UE2by9h3yDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaKkFgdwoLeuaYuewmEKk7mRBpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTJjYTBmNGMtNGZkYy0z OGQyLThiMTItY2UyM2YwNzlkYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADumsQD5/lm+QSWyHsP9b5OurhZZmepqt6t6fpvlAJFs0JZBFGQVzeWF AZLzEh5zVpwvTJ/rnkgbPGncguforJRb1OhLRTDc3AYsZzCabMRMC6MV79Lvqt1U 5x9yLHrfAR0kH6OKmgUbJX6nK0BuzFI4AvE8vZSVPjMxmbhyMuiA+qvwAbrupKPj WlrqHa6cdquxR9E5s6eLaCvDFfnkjQOv77ev6m51TAWImox+LcdJ7kp5BKyUtAhA OQtJOiIAPAc7fuwSpwp5C5rX4hd1D81e5O8qfdEqLQ+fbQVTo4nUjm5XacXBNTCm E2enLiNIgst0KIcA+CBVEBUeZPsOSEk= -----END CERTIFICATE-----Generated at Tue Jun 17 08:31:36 2025 by rpki-client