$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa File: d5f30706-6678-3210-83e0-1f1f74338577.roa (raw, json) Hash identifier: kzzS/xcNd6mfZKnT/0fIUhoUknbjUpQx915+98CDb+Y= Subject key identifier: 97:AF:6F:59:4B:77:7A:15:C3:A3:B8:5B:46:83:15:03:F4:E5:B9:DB Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584DF4DB9F4BE3FD1C58EEDA7F00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 81 IP address blocks: 128.109.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:9f:4b:e3:fd:1c:58:ee:da:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=2c225526-d0d8-4ba7-8447-d01d346a2db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:aa:c5:1b:ae:91:a6:5a:44:0a:13:f6:44: af:76:5f:9a:58:34:24:b5:b5:2c:8c:5b:45:40:ef: 7d:d6:36:a8:5f:b3:5c:5f:77:31:4f:c6:b7:60:fb: d4:35:d3:00:53:96:8f:24:fe:17:df:6d:c0:9d:2a: 9a:ac:c0:f9:09:f9:3b:49:ab:35:04:62:7e:18:1e: d5:51:96:b3:03:db:f3:81:a9:62:8d:da:32:15:3e: 05:47:ad:88:95:fc:15:55:a3:60:0a:91:e4:9e:0b: f4:b2:88:f1:82:90:b1:02:00:ef:db:60:fb:e3:31: 53:1c:3b:b7:86:b9:22:f0:ac:2a:3a:d8:6c:43:e8: 62:1f:6c:22:ce:84:cf:1f:6d:b9:d9:a0:53:53:b6: 0b:c2:05:f9:83:e7:00:4c:03:17:2b:94:12:9b:e6: a3:82:07:d4:ff:bf:71:d5:94:59:16:b1:e6:1d:2d: 98:46:aa:7f:e7:a0:55:d8:b5:6d:21:7f:b3:73:30: c6:59:af:42:2b:4e:55:03:51:28:23:b7:6e:4e:54: 88:bf:8a:24:4d:4c:1c:25:aa:9f:87:00:51:d0:39: b9:38:44:f2:8c:e6:ab:b3:b9:a8:23:24:06:e1:dc: 25:95:0d:6c:ec:ac:f4:18:c6:37:43:a8:c7:0b:10: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AF:6F:59:4B:77:7A:15:C3:A3:B8:5B:46:83:15:03:F4:E5:B9:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c1:f2:d1:bd:b6:19:86:ef:5b:54:c2:ca:6b:df:24:e2:1a: 5c:36:56:c4:cc:5d:2e:65:84:e0:5a:a8:3a:c6:01:f4:10:57: 9b:e6:7b:7e:d3:ca:fa:b5:f4:48:c4:9d:87:be:b5:55:24:1e: b9:c0:dc:46:67:bc:e2:bb:93:98:b3:7b:5b:ff:2c:f6:f3:79: 4e:95:eb:cb:75:d8:be:25:65:6c:6d:7c:52:c6:12:e4:f9:87: 6d:a6:fa:61:19:7a:3d:65:cb:da:b2:92:a6:20:30:0f:98:4c: 41:bf:09:37:c6:63:27:b8:45:84:ab:aa:be:cc:e6:b8:dc:65: 9d:c0:3d:6a:03:45:e6:be:fd:16:c0:90:e2:e0:0d:9e:96:95: b4:a1:95:be:72:72:ce:76:b4:e4:a3:31:65:a1:b7:ad:32:73: 0c:0c:46:65:1d:1f:06:d2:66:68:c7:de:eb:bc:7e:46:20:32: 6a:d5:b9:9b:6b:5c:32:5c:bc:9c:d8:66:20:f2:74:26:df:8a: 65:a4:cb:4a:9d:d8:7d:6f:8f:1a:7f:64:3e:6e:02:3e:c5:90: 1f:cd:97:1d:25:5d:26:2c:48:bc:36:c1:79:00:49:71:99:2e: 06:57:8d:e2:f5:d3:6c:57:98:e8:f2:9e:e0:9d:c8:27:ca:46: d9:76:f5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30259L4/0cWO7afwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MmMyMjU1MjYtZDBkOC00YmE3LTg0NDctZDAxZDM0NmEyZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvuqxRuukaZaRAoT9kSvdl+aWDQktbUsjFtF QO991jaoX7NcX3cxT8a3YPvUNdMAU5aPJP4X323AnSqarMD5Cfk7Sas1BGJ+GB7V UZazA9vzgalijdoyFT4FR62IlfwVVaNgCpHkngv0sojxgpCxAgDv22D74zFTHDu3 hrki8KwqOthsQ+hiH2wizoTPH2252aBTU7YLwgX5g+cATAMXK5QSm+ajggfU/79x 1ZRZFrHmHS2YRqp/56BV2LVtIX+zczDGWa9CK05VA1EoI7duTlSIv4okTUwcJaqf hwBR0Dm5OETyjOars7moIyQG4dwllQ1s7Kz0GMY3Q6jHCxDZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJevb1lLd3oVw6O4W0aDFQP05bnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDVmMzA3MDYtNjY3OC0z MjEwLTgzZTAtMWYxZjc0MzM4NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvB8tG9thmG71tUwspr3yTiGlw2VsTMXS5lhOBaqDrGAfQQV5vme37T yvq19EjEnYe+tVUkHrnA3EZnvOK7k5ize1v/LPbzeU6V68t12L4lZWxtfFLGEuT5 h22m+mEZej1ly9qykqYgMA+YTEG/CTfGYye4RYSrqr7M5rjcZZ3APWoDRea+/RbA kOLgDZ6WlbShlb5ycs52tOSjMWWht60ycwwMRmUdHwbSZmjH3uu8fkYgMmrVuZtr XDJcvJzYZiDydCbfimWky0qd2H1vjxp/ZD5uAj7FkB/Nlx0lXSYsSLw2wXkASXGZ LgZXjeL102xXmOjynuCdyCfKRtl29ZY= -----END CERTIFICATE-----Generated at Sat Jun 13 21:31:50 2026 by rpki-client