$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa File: 1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa (raw, json) Hash identifier: Tb+P3rOWSsdYa0B+s0kiDHOiuOrnBTeZP+nGUvNRFaw= Subject key identifier: BB:D0:22:D4:7E:67:62:A9:AC:29:8B:F4:BC:04:90:6C:9A:21:57:70 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C76E92B46EC5F438E72C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:76:e9:2b:46:ec:5f:43:8e:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=10f2c115-abad-4390-a894-0d6327e9ac5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:55:99:15:83:35:f4:83:fd:4b:f2:11:34: fe:8f:23:d5:63:69:a9:25:07:e4:9a:ad:9c:b0:d4: 77:17:02:4b:1b:45:56:59:92:f5:dd:7b:d7:b7:ca: b7:8b:92:69:14:f0:19:20:3b:cc:21:2a:13:00:8b: 78:1c:e5:b1:fd:7f:5e:95:d0:77:0f:8c:95:10:3c: 98:8d:1a:25:1c:dd:20:cb:f6:9b:21:dd:44:c9:31: a9:9a:39:f7:d9:33:5d:6e:00:f2:b3:d3:3e:4c:b6: 15:09:ce:cd:c1:3c:a9:3c:28:5b:14:6f:d1:14:d7: 2f:52:e8:31:58:07:2a:48:e5:31:cb:89:70:a0:7e: 34:fb:d4:13:50:fb:e5:4c:ed:c3:6a:93:4b:27:2c: be:a6:40:4f:16:ce:04:ea:61:15:45:cf:ed:36:05: b2:98:a4:e9:13:7c:11:f2:79:8a:2d:da:97:15:32: e5:0c:f2:5b:08:0c:3b:b8:d9:60:ea:41:8f:4f:e4: c7:41:94:11:f8:78:9c:31:f4:f3:69:e2:00:2b:48: 6d:5f:c8:6d:6f:57:93:cf:ad:7c:ee:2b:88:8a:ad: e6:5f:c0:a2:6f:2f:44:a6:ea:3d:c4:00:53:24:c3: 85:2e:78:c8:5a:ab:fd:3c:f6:13:b1:ff:80:46:17: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:22:D4:7E:67:62:A9:AC:29:8B:F4:BC:04:90:6C:9A:21:57:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ea:b6:63:55:5f:cf:d2:b6:87:ce:9b:33:e7:81:e2:0a:24: fc:3f:73:bd:c3:92:d5:3f:45:28:40:31:92:3f:12:3f:c2:b0: 97:cb:c3:db:67:7f:f5:cb:38:93:04:7e:7e:9a:36:be:1e:f7: ea:9c:3a:5e:09:29:99:19:7f:b3:6d:85:49:96:ad:cd:3f:92: 56:46:67:50:72:18:42:2a:3b:00:87:16:57:42:f0:b1:ed:00: ca:2b:f2:a0:c9:b4:f6:e3:d1:e4:4b:39:16:73:5b:bf:31:c6: 9c:e2:13:d3:dc:7c:d2:45:b2:48:93:cc:df:87:23:da:6e:7f: 30:66:f5:fb:28:e1:8b:57:55:a8:a0:8e:a4:c4:a4:f6:ea:69: f6:38:95:b6:a3:01:cf:f9:e0:d9:9c:1f:47:57:59:6d:cf:19: bc:75:5a:6d:d0:3e:59:ba:a5:79:9d:3a:a9:91:92:ac:0b:f9: b6:02:80:69:0f:81:e3:9f:ab:a5:e3:68:1b:52:2a:7b:b7:77: 62:36:98:09:a8:bc:2b:16:70:aa:d3:e7:9b:fa:c4:7f:cc:a3: 4d:68:8b:65:d9:25:12:9f:2d:60:53:de:d2:80:77:7f:b8:f4: ab:ff:38:5d:91:f1:60:3d:5f:38:5b:12:04:05:32:ec:25:8e: d9:24:12:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHbpK0bsX0OOcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTBmMmMxMTUtYWJhZC00MzkwLWE4OTQtMGQ2MzI3ZTlhYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0FVmRWDNfSD/UvyETT+jyPVY2mpJQfkmq2c sNR3FwJLG0VWWZL13XvXt8q3i5JpFPAZIDvMISoTAIt4HOWx/X9eldB3D4yVEDyY jRolHN0gy/abId1EyTGpmjn32TNdbgDys9M+TLYVCc7NwTypPChbFG/RFNcvUugx WAcqSOUxy4lwoH40+9QTUPvlTO3DapNLJyy+pkBPFs4E6mEVRc/tNgWymKTpE3wR 8nmKLdqXFTLlDPJbCAw7uNlg6kGPT+THQZQR+HicMfTzaeIAK0htX8htb1eTz618 7iuIiq3mX8Ciby9Epuo9xABTJMOFLnjIWqv9PPYTsf+ARhdEHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvQItR+Z2KprCmL9LwEkGyaIVdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWRjYjJkZWItMDIzMS0z ZDUxLWE5OWUtMzI0MGQ2ZGRmMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDqtmNVX8/StofOmzPngeIKJPw/c73DktU/RShAMZI/Ej/CsJfLw9tn f/XLOJMEfn6aNr4e9+qcOl4JKZkZf7NthUmWrc0/klZGZ1ByGEIqOwCHFldC8LHt AMor8qDJtPbj0eRLORZzW78xxpziE9PcfNJFskiTzN+HI9pufzBm9fso4YtXVaig jqTEpPbqafY4lbajAc/54NmcH0dXWW3PGbx1Wm3QPlm6pXmdOqmRkqwL+bYCgGkP geOfq6XjaBtSKnu3d2I2mAmovCsWcKrT55v6xH/Mo01oi2XZJRKfLWBT3tKAd3+4 9Kv/OF2R8WA9XzhbEgQFMuwljtkkEh8= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:57 2025 by rpki-client