$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa File: 136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa (raw, json) Hash identifier: QWUKLwq70xpxTqSRRjA5rSanyc5JUm02SRkMOehoBtQ= Subject key identifier: 93:AC:34:EA:35:BC:FE:12:7E:F5:A0:7F:CC:AF:63:FD:30:8E:FD:4A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D99728B4291503CCCB00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d9:97:28:b4:29:15:03:cc:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=45fbb3ad-3d82-4433-a462-ca26b99910fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:7c:8b:c9:6e:bd:1e:c7:08:26:0c:92:f6: 92:1b:1c:4e:95:03:d4:09:9c:68:50:4c:e2:ae:d9: 30:33:da:75:bd:ff:49:f7:09:20:b7:88:18:cd:4e: 40:5b:45:07:66:ed:2e:29:4b:fb:d5:04:f8:0c:3d: db:64:17:19:77:99:8b:88:10:bc:a2:4e:08:e0:e3: 63:de:3b:70:9e:e6:f7:0f:16:b9:09:52:73:69:5c: 00:92:8e:48:ec:84:13:3e:1d:10:13:91:6a:5b:fd: fd:b5:24:e2:9a:5f:41:4b:ea:63:e1:e0:98:15:18: c1:14:a1:2c:ad:48:1d:06:d9:8c:b9:d5:3c:47:1b: cb:19:06:75:ec:ce:11:e0:dd:19:46:f7:45:d6:88: e5:41:fa:30:10:48:82:52:50:2c:47:dd:d8:01:39: 78:28:83:f6:72:3c:06:d5:fa:0c:57:4d:ab:b4:a7: b6:5c:4b:fe:ff:46:11:19:ac:9c:cf:82:ea:b8:82: 73:32:5c:54:87:50:35:66:77:a2:d9:a1:81:87:89: a4:3e:40:cf:9a:a3:24:08:bd:c9:39:0b:fd:ce:de: a7:2f:3a:87:c4:a5:e2:d6:58:e5:a0:5b:16:c7:b8: 6d:b7:8e:47:e9:0a:2e:cc:78:3a:18:f2:cc:6c:1e: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AC:34:EA:35:BC:FE:12:7E:F5:A0:7F:CC:AF:63:FD:30:8E:FD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2b:ca:ab:ca:93:75:fe:4e:e0:24:47:2a:b9:ba:d6:9b:89: 8d:0f:a9:cc:df:0d:84:8a:c9:2b:c4:6b:65:78:fc:76:66:e3: 3b:09:33:69:8c:11:35:d7:34:1e:22:95:c2:f8:8d:95:9b:97: 1f:36:a7:db:d6:1c:7d:4c:58:eb:12:bb:0e:a1:36:fc:9a:4d: dd:92:37:87:93:93:23:fc:42:1a:e9:70:18:a7:a0:c8:cf:31: 67:65:08:69:5c:b2:6f:c9:59:f5:a7:3e:1f:91:7a:30:50:d3: 12:59:4b:38:88:e3:c1:5b:4b:62:55:84:52:7f:78:9c:26:4a: d3:60:82:42:18:ef:0c:f4:43:0f:05:ba:4e:6b:32:d9:30:a8: e0:aa:31:31:05:26:44:80:f1:ea:9b:44:c5:1f:42:25:e1:59: 07:44:d5:f7:3d:20:22:ae:d2:70:58:ab:5a:1a:5a:f4:b6:ea: 30:8d:6a:68:e6:60:ff:4d:24:a2:37:dc:78:85:d2:2b:1b:a1: 6d:e1:7f:df:4f:51:6b:bb:ad:4e:78:77:3e:15:01:d0:dc:5c: b3:04:7b:86:97:ea:b2:c7:2d:9d:22:2f:1f:df:dc:d9:03:f1: bb:05:da:43:ec:76:ce:5e:42:39:6e:dc:bc:6d:80:f1:ef:8f: a1:14:5c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdmXKLQpFQPMywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NDVmYmIzYWQtM2Q4Mi00NDMzLWE0NjItY2EyNmI5OTkxMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIB8i8luvR7HCCYMkvaSGxxOlQPUCZxoUEzi rtkwM9p1vf9J9wkgt4gYzU5AW0UHZu0uKUv71QT4DD3bZBcZd5mLiBC8ok4I4ONj 3jtwnub3Dxa5CVJzaVwAko5I7IQTPh0QE5FqW/39tSTiml9BS+pj4eCYFRjBFKEs rUgdBtmMudU8RxvLGQZ17M4R4N0ZRvdF1ojlQfowEEiCUlAsR93YATl4KIP2cjwG 1foMV02rtKe2XEv+/0YRGaycz4LquIJzMlxUh1A1Znei2aGBh4mkPkDPmqMkCL3J OQv9zt6nLzqHxKXi1ljloFsWx7htt45H6QouzHg6GPLMbB66cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOsNOo1vP4SfvWgf8yvY/0wjv1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTM2ZTFlNTgtZTRiYi0z NWM2LTlmMGYtNDc4MjA5YjU0YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQryqvKk3X+TuAkRyq5utabiY0PqczfDYSKySvEa2V4/HZm4zsJM2mM ETXXNB4ilcL4jZWblx82p9vWHH1MWOsSuw6hNvyaTd2SN4eTkyP8QhrpcBinoMjP MWdlCGlcsm/JWfWnPh+RejBQ0xJZSziI48FbS2JVhFJ/eJwmStNggkIY7wz0Qw8F uk5rMtkwqOCqMTEFJkSA8eqbRMUfQiXhWQdE1fc9ICKu0nBYq1oaWvS26jCNamjm YP9NJKI33HiF0isboW3hf99PUWu7rU54dz4VAdDcXLMEe4aX6rLHLZ0iLx/f3NkD 8bsF2kPsds5eQjlu3LxtgPHvj6EUXNU= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:23 2025 by rpki-client