$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa File: 104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa (raw, json) Hash identifier: jQ5NAvUe2pEmpdzzcvlNmZ0Uhii+BQlDSlCvoUIen5U= Subject key identifier: AE:64:FA:DD:06:F9:66:48:2B:D1:E7:BB:BD:70:E8:A7:D9:6A:26:35 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7729618BD03D08DDC42F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:29:61:8b:d0:3d:08:dd:c4:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=782a1c40-987b-4e13-af79-0176a753e6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ae:4a:a3:fd:4b:df:bc:82:62:b9:81:e9:f7: a8:1a:a8:93:61:8e:94:24:96:81:6a:90:c9:66:f7: 19:8e:1d:65:3b:50:8f:2d:95:48:ef:bb:68:bc:06: cf:79:c5:24:e4:fc:34:c9:ae:09:eb:26:fd:e4:f7: 55:e1:74:c0:50:d8:a3:9a:40:6b:78:a7:3f:4e:54: 14:67:a7:5f:cb:f6:c0:1c:55:82:f7:19:ad:dd:64: e7:ee:b7:95:4e:30:17:f9:0d:c6:57:56:6d:bc:20: fb:5d:10:97:2b:e1:b6:8e:34:18:50:55:f1:0f:e7: 19:2c:97:c2:cb:f4:1b:e2:b4:33:06:55:9f:7c:fa: 45:32:ae:33:3b:8f:ee:e0:2e:2c:d9:26:66:f7:ed: f3:fa:ca:59:19:fa:ca:72:4f:ee:d9:a0:bc:7f:ba: 8d:b2:98:07:1c:d5:69:84:a6:28:d3:42:7e:c1:23: 86:18:ad:4f:dd:bc:f9:5b:0f:43:28:7a:64:da:4c: 37:83:89:ac:4e:4e:34:4d:04:23:b9:d2:ee:6c:ed: cd:e8:12:ca:6e:ae:fd:ff:da:4d:78:1e:60:66:14: 91:08:16:71:c6:ce:fd:aa:07:82:62:fe:4b:2f:03: e8:f2:51:1a:b6:49:eb:6f:61:1c:df:9e:7c:54:64: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:64:FA:DD:06:F9:66:48:2B:D1:E7:BB:BD:70:E8:A7:D9:6A:26:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/104cbd4a-65d7-35eb-bfe2-dde4a24d3160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2c:bf:f9:1d:f1:25:6e:66:1e:10:d9:17:63:e5:fe:90:a6: 64:04:24:de:80:80:4d:a3:4d:fd:a7:01:44:20:2e:fe:84:56: b7:d9:91:46:3d:6d:f8:f3:7c:e2:34:0a:99:27:4b:3b:f5:1c: 50:e3:97:21:35:1c:af:c8:1c:24:ad:88:1d:56:e7:14:06:11: dd:f5:b0:a4:a1:f7:53:ad:fa:da:8d:5b:63:1c:d5:ae:71:8b: 98:c1:b2:6a:3b:d4:69:2c:b1:cf:08:b4:14:36:a4:1c:cd:78: 7d:6d:ed:a0:b9:ef:5a:5b:9d:35:f1:db:83:2a:08:39:ab:e6: 31:f8:50:53:48:9d:4c:bd:8f:4a:bb:73:6b:38:92:dc:d5:31: 53:bd:6b:91:24:1f:71:41:98:b6:18:af:ca:f1:8c:a0:fb:78: a8:e1:89:c8:b6:fa:33:ba:39:0b:6c:e6:38:95:f3:1c:61:e1: a1:fe:a1:fa:3a:84:41:eb:d4:0e:e4:1b:b0:29:42:cd:30:1f: f9:c3:39:11:e4:e6:25:7f:a0:95:f5:7d:29:2d:37:64:ab:68: a5:b2:00:23:6f:1a:5f:cc:04:5b:d5:2d:03:9f:1c:06:d5:8e: eb:dc:2b:4a:70:e2:08:46:5b:5a:42:22:9e:dc:43:a9:f4:19: 5c:e9:52:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdylhi9A9CN3ELwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NzgyYTFjNDAtOTg3Yi00ZTEzLWFmNzktMDE3NmE3NTNlNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq5Ko/1L37yCYrmB6feoGqiTYY6UJJaBapDJ ZvcZjh1lO1CPLZVI77tovAbPecUk5Pw0ya4J6yb95PdV4XTAUNijmkBreKc/TlQU Z6dfy/bAHFWC9xmt3WTn7reVTjAX+Q3GV1ZtvCD7XRCXK+G2jjQYUFXxD+cZLJfC y/Qb4rQzBlWffPpFMq4zO4/u4C4s2SZm9+3z+spZGfrKck/u2aC8f7qNspgHHNVp hKYo00J+wSOGGK1P3bz5Ww9DKHpk2kw3g4msTk40TQQjudLubO3N6BLKbq79/9pN eB5gZhSRCBZxxs79qgeCYv5LLwPo8lEatknrb2Ec3558VGTcFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5k+t0G+WZIK9Hnu71w6KfZaiY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTA0Y2JkNGEtNjVkNy0z NWViLWJmZTItZGRlNGEyNGQzMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIsv/kd8SVuZh4Q2Rdj5f6QpmQEJN6AgE2jTf2nAUQgLv6EVrfZkUY9 bfjzfOI0CpknSzv1HFDjlyE1HK/IHCStiB1W5xQGEd31sKSh91Ot+tqNW2Mc1a5x i5jBsmo71Gkssc8ItBQ2pBzNeH1t7aC571pbnTXx24MqCDmr5jH4UFNInUy9j0q7 c2s4ktzVMVO9a5EkH3FBmLYYr8rxjKD7eKjhici2+jO6OQts5jiV8xxh4aH+ofo6 hEHr1A7kG7ApQs0wH/nDORHk5iV/oJX1fSktN2SraKWyACNvGl/MBFvVLQOfHAbV juvcK0pw4ghGW1pCIp7cQ6n0GVzpUh8= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:33 2025 by rpki-client