$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/14aec09e-02d1-3843-9e8f-a2b96f8f0e5b.roa File: 14aec09e-02d1-3843-9e8f-a2b96f8f0e5b.roa (raw, json) Hash identifier: xVXZlAJJfgwX/LpRq2TNgVjfXUj9iqvFqu3LVZIcCyY= Subject key identifier: A1:9E:6D:30:B7:23:59:16:C1:98:9F:81:08:7D:F4:78:8B:3A:BD:B9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E77293CADC48317FAA39060 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/14aec09e-02d1-3843-9e8f-a2b96f8f0e5b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:29:3c:ad:c4:83:17:fa:a3:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=a0e6775e-025f-4680-a389-15014b98127b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:b8:3f:86:e0:00:6e:fe:6b:70:90:33:76: 55:e7:d4:6c:2f:7c:18:1f:fa:fd:49:cd:fe:cf:7c: a2:b6:7d:ee:c9:73:5a:ee:4d:23:68:91:80:0b:87: 48:5a:af:14:14:30:e5:94:05:c9:68:9a:6c:70:82: df:ee:8f:af:3f:75:4b:4f:88:05:cb:e1:05:e2:24: e9:1d:f9:ff:26:da:77:10:4b:9c:16:f6:85:65:fb: a3:f2:34:70:2b:36:ac:0f:ea:56:c1:47:15:00:b0: 75:e8:27:54:a2:33:1e:31:f2:a8:0b:54:da:3b:f9: 82:c4:51:54:15:cc:97:4f:bd:7d:5c:f3:70:46:99: ef:3f:0e:0f:a1:5a:ef:43:93:af:55:28:ec:ce:27: 8f:b3:bf:b0:cd:83:a8:d1:5d:68:be:0b:9b:16:4f: a2:3c:69:6d:a2:7b:36:7c:29:00:af:02:6a:4c:d7: d8:4d:83:87:cb:f4:fe:99:a6:47:77:b7:70:6a:eb: e3:70:52:ab:e3:09:d4:b4:ef:3c:10:97:38:55:3d: 43:ed:a3:a3:d4:74:29:8a:00:e5:ea:35:5c:bd:61: 4b:45:9c:9f:d1:64:3a:5d:90:77:e5:5b:c7:67:03: 17:97:db:18:4f:2c:85:c4:a0:fb:b9:61:d1:84:e8: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:6D:30:B7:23:59:16:C1:98:9F:81:08:7D:F4:78:8B:3A:BD:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/14aec09e-02d1-3843-9e8f-a2b96f8f0e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b4:28:9a:ab:b1:81:fd:07:b8:60:8a:56:19:49:2b:05:d9: c9:93:ad:b8:37:58:b3:ee:9c:43:b5:47:a5:0b:77:9a:5a:51: 85:fc:2a:f2:46:21:f9:83:23:35:1b:19:ce:22:fa:4a:77:bc: b1:93:7e:b1:31:67:59:a6:b8:c3:24:c9:04:96:f6:2a:15:cb: 03:e0:af:a7:68:85:c0:2d:ab:18:f5:87:06:dd:8f:42:2b:d2: a7:66:0c:9f:10:51:5a:d6:b0:2c:a3:63:7a:92:24:74:52:cc: b9:4e:96:86:73:21:ea:26:b1:c2:2c:05:cd:4f:ae:6f:87:de: 6b:ce:3e:4b:41:ba:07:45:de:5d:db:3e:70:c8:96:d8:8e:0f: d1:f5:8a:1d:1f:16:fc:74:b4:18:92:06:60:30:77:81:53:81: 9e:88:ea:2d:ae:5f:a1:b9:a8:4f:ca:55:07:b5:c4:18:da:0a: a5:a3:cc:fd:d7:d1:a6:53:c4:da:6e:1a:90:98:6c:fc:31:82: 24:03:91:86:ee:31:e3:62:ce:9f:7f:74:a3:5d:95:72:78:6e: 42:97:f4:6d:ea:38:a8:da:b2:b9:e7:5e:b2:e5:dd:95:9e:ec: 10:c6:19:96:0c:6c:ca:7b:47:13:b4:a4:a0:36:6f:43:3d:56: 88:f0:34:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyk8rcSDF/qjkGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YTBlNjc3NWUtMDI1Zi00NjgwLWEzODktMTUwMTRiOTgxMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghi4P4bgAG7+a3CQM3ZV59RsL3wYH/r9Sc3+ z3yitn3uyXNa7k0jaJGAC4dIWq8UFDDllAXJaJpscILf7o+vP3VLT4gFy+EF4iTp Hfn/Jtp3EEucFvaFZfuj8jRwKzasD+pWwUcVALB16CdUojMeMfKoC1TaO/mCxFFU FcyXT719XPNwRpnvPw4PoVrvQ5OvVSjsziePs7+wzYOo0V1ovgubFk+iPGltons2 fCkArwJqTNfYTYOHy/T+maZHd7dwauvjcFKr4wnUtO88EJc4VT1D7aOj1HQpigDl 6jVcvWFLRZyf0WQ6XZB35VvHZwMXl9sYTyyFxKD7uWHRhOjvFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGebTC3I1kWwZifgQh99HiLOr25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTRhZWMwOWUtMDJkMS0z ODQzLTllOGYtYTJiOTZmOGYwZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK0KJqrsYH9B7hgilYZSSsF2cmTrbg3WLPunEO1R6ULd5paUYX8KvJG IfmDIzUbGc4i+kp3vLGTfrExZ1mmuMMkyQSW9ioVywPgr6dohcAtqxj1hwbdj0Ir 0qdmDJ8QUVrWsCyjY3qSJHRSzLlOloZzIeomscIsBc1Prm+H3mvOPktBugdF3l3b PnDIltiOD9H1ih0fFvx0tBiSBmAwd4FTgZ6I6i2uX6G5qE/KVQe1xBjaCqWjzP3X 0aZTxNpuGpCYbPwxgiQDkYbuMeNizp9/dKNdlXJ4bkKX9G3qOKjasrnnXrLl3ZWe 7BDGGZYMbMp7RxO0pKA2b0M9VojwNDA= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:09 2025 by rpki-client