$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17485216-db65-3359-a000-1e97d1f730bc.roa File: 17485216-db65-3359-a000-1e97d1f730bc.roa (raw, json) Hash identifier: dKtvL8ZV6X0wcPcCecymf5HbMfPRFi6/SGEq/iLV3/E= Subject key identifier: 63:B2:C2:8A:F1:97:54:88:AE:BB:1A:33:34:81:3B:FE:E6:E4:80:E5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DB9EFDCD140B1AD41240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17485216-db65-3359-a000-1e97d1f730bc.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:db:9e:fd:cd:14:0b:1a:d4:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=65408fde-6774-4538-af2e-e06cdb142096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:d2:94:79:8a:23:13:21:92:1d:17:5a:ec: fd:2e:8e:53:5e:92:e4:64:42:1c:cc:f4:58:a1:cc: 87:a2:7c:5f:f9:08:a0:a2:09:f8:31:6f:09:94:ba: 5e:ff:bf:89:93:8b:cb:79:00:92:6d:24:50:d5:3d: 79:0c:fa:15:07:12:b7:75:98:39:f2:91:c6:15:4f: 8a:79:2f:3d:9c:68:03:05:98:6b:da:86:56:43:4a: ee:65:4c:d1:d4:aa:8e:22:04:c6:d5:3b:85:26:b8: d2:b2:c1:e1:98:e3:62:9e:39:f4:c2:c0:16:1b:24: 5c:06:d7:3d:5e:3e:dd:e0:37:67:dd:3a:1d:c4:f0: 9f:9f:35:ea:85:87:7c:83:3b:16:60:e9:f3:32:f8: 86:5e:b5:be:9c:20:b9:44:0c:ee:51:e4:98:1b:2e: 21:b3:61:e3:f4:ad:21:5e:b7:11:83:b4:43:2b:13: 2f:82:5f:f8:0a:e0:63:9e:38:47:9a:94:16:6d:96: de:ce:00:66:e1:65:a2:30:bc:ec:77:dd:c3:7d:b3: 84:ff:b5:97:07:30:35:1d:d9:da:de:c5:7a:16:86: b3:b7:67:46:18:9f:a7:76:a0:1a:e7:91:70:d9:a0: 58:2c:e0:ff:9f:d0:ef:11:fe:1a:0a:6c:ae:30:cd: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B2:C2:8A:F1:97:54:88:AE:BB:1A:33:34:81:3B:FE:E6:E4:80:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17485216-db65-3359-a000-1e97d1f730bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:38:78:98:b8:e4:55:13:0d:be:02:c7:84:21:41:3d:6d:18: d4:c2:b7:b7:2b:42:11:b8:23:3c:71:96:32:46:3b:f3:fc:59: ab:55:15:5e:76:27:53:fb:13:b3:07:48:be:08:26:1e:68:fc: a2:ad:b4:7c:0d:fc:9a:ab:ac:e6:88:55:b9:88:75:45:fd:b7: d4:c2:ec:dc:f3:14:c2:79:5d:b5:7f:1e:ac:42:eb:4a:d8:c3: a3:46:52:ec:dc:90:ed:75:14:36:73:47:4d:2d:35:87:12:cd: 25:18:b5:7f:b9:f7:6b:b3:d2:a9:8e:94:a9:f8:60:0b:31:cc: 3d:59:79:09:ae:41:4c:c3:ed:68:a9:ec:96:66:f5:2b:8c:a5: 4a:d7:9a:83:02:cd:1a:c2:81:51:9c:5a:b6:ec:e7:d8:9d:8f: a0:3d:44:15:f7:04:43:f2:10:9b:31:0f:e3:b9:bd:48:69:a5: 04:75:dd:19:ad:78:3e:7e:e0:c5:b5:4c:68:4e:6e:73:51:4e: d9:ce:ee:72:5c:e5:18:5d:d5:fe:65:6c:62:c4:41:0a:e7:fc: 3d:98:cf:06:63:d1:59:25:57:cf:84:2d:60:61:fe:ad:bc:42: 05:b1:78:30:3c:75:51:11:d3:ee:d7:c0:32:40:cf:ca:44:10: 17:ba:9a:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdue/c0UCxrUEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NjU0MDhmZGUtNjc3NC00NTM4LWFmMmUtZTA2Y2RiMTQyMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+HSlHmKIxMhkh0XWuz9Lo5TXpLkZEIczPRY ocyHonxf+Qigogn4MW8JlLpe/7+Jk4vLeQCSbSRQ1T15DPoVBxK3dZg58pHGFU+K eS89nGgDBZhr2oZWQ0ruZUzR1KqOIgTG1TuFJrjSssHhmONinjn0wsAWGyRcBtc9 Xj7d4Ddn3TodxPCfnzXqhYd8gzsWYOnzMviGXrW+nCC5RAzuUeSYGy4hs2Hj9K0h XrcRg7RDKxMvgl/4CuBjnjhHmpQWbZbezgBm4WWiMLzsd93DfbOE/7WXBzA1Hdna 3sV6Foazt2dGGJ+ndqAa55Fw2aBYLOD/n9DvEf4aCmyuMM2mJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOyworxl1SIrrsaMzSBO/7m5IDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTc0ODUyMTYtZGI2NS0z MzU5LWEwMDAtMWU5N2QxZjczMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY4eJi45FUTDb4Cx4QhQT1tGNTCt7crQhG4IzxxljJGO/P8WatVFV52 J1P7E7MHSL4IJh5o/KKttHwN/JqrrOaIVbmIdUX9t9TC7NzzFMJ5XbV/HqxC60rY w6NGUuzckO11FDZzR00tNYcSzSUYtX+592uz0qmOlKn4YAsxzD1ZeQmuQUzD7Wip 7JZm9SuMpUrXmoMCzRrCgVGcWrbs59idj6A9RBX3BEPyEJsxD+O5vUhppQR13Rmt eD5+4MW1TGhObnNRTtnO7nJc5Rhd1f5lbGLEQQrn/D2YzwZj0VklV8+ELWBh/q28 QgWxeDA8dVER0+7XwDJAz8pEEBe6mq0= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:00 2025 by rpki-client