$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20b67ed7-f893-3d7b-8696-1561df6e22f1.roa File: 20b67ed7-f893-3d7b-8696-1561df6e22f1.roa (raw, json) Hash identifier: ZyDP07XXj80x0TsaW4ndEc8YPv/rp+Z0p9H2dMkyCls= Subject key identifier: F2:C0:DE:67:57:14:97:55:0A:C5:7D:D3:AC:D1:FC:D4:D1:15:48:70 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B1806EC86C42066789F740200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20b67ed7-f893-3d7b-8696-1561df6e22f1.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 395973 IP address blocks: 104.134.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ec:86:c4:20:66:78:9f:74:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=85ac4f57-e91b-4f03-b1ab-adb3e4d2b99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:2e:d8:09:77:3e:a8:7d:bf:75:b4:86:bf: c5:28:30:c2:f3:55:9d:09:d8:f9:ed:07:41:8d:e6: cf:9b:54:14:5b:ec:0d:9b:de:a5:2e:da:95:12:30: 43:69:96:e3:82:07:f5:97:57:ca:7d:45:4f:ee:52: 11:bb:8b:ac:be:e0:58:49:67:a2:e0:89:01:a6:d4: 2c:fd:6e:84:ee:81:b1:2a:19:ec:66:3f:fd:1a:2c: e2:bd:cb:06:07:ed:96:8b:26:5e:23:a2:1d:af:9e: 8c:21:18:cd:0f:9b:08:87:45:98:4e:a9:b4:fb:b7: d0:f0:81:a4:72:b4:37:f2:48:89:fd:32:14:ba:62: ef:f3:b7:4f:a7:4f:ce:06:fb:f0:d5:3c:99:ed:eb: ca:aa:7e:5a:7e:51:87:18:3d:40:62:f8:e8:b5:3b: a5:d2:fc:00:9f:ae:42:6e:29:34:d7:c1:8f:23:7a: 39:05:36:ea:46:8c:49:d6:b7:2d:13:6a:31:4e:82: e1:b0:a0:a0:7d:18:80:46:af:b1:df:2f:9b:0f:33: 49:de:42:e1:ec:90:a2:be:1c:75:58:70:44:08:b2: a4:8f:50:45:25:7d:de:83:a0:aa:8d:69:ac:af:a6: 54:de:57:49:3f:f3:63:b0:76:5e:79:dd:1c:bb:60: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C0:DE:67:57:14:97:55:0A:C5:7D:D3:AC:D1:FC:D4:D1:15:48:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20b67ed7-f893-3d7b-8696-1561df6e22f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4f:c8:04:88:22:a3:b0:95:34:47:7f:41:ea:6e:93:31:7d: 21:62:d8:ab:7d:90:62:53:2d:59:9a:d2:26:e8:a9:a2:cd:ff: 46:44:6a:54:8e:f9:ef:06:58:58:b5:5f:9f:71:05:43:00:1b: 0d:a5:dc:ed:72:2d:d2:c1:01:f8:b6:58:a8:39:73:49:72:b4: b6:6b:74:26:46:41:01:ed:f8:5d:b1:58:c6:2c:88:e0:aa:8e: d2:a4:94:80:fe:24:a7:65:6d:6d:ad:ea:40:be:a8:5e:a9:94: e0:2e:02:14:75:11:10:2f:29:db:5a:47:d4:25:df:6f:cb:db: 07:b8:1b:35:a4:f8:49:b8:45:bd:22:a1:95:58:12:78:bc:c0: c0:a2:10:da:0b:67:37:39:f0:e6:2a:07:53:1d:27:71:da:40: c2:2f:a5:e8:11:59:cd:93:63:7a:af:db:af:83:38:eb:97:70: 63:b0:af:68:24:59:be:ee:f6:36:33:9d:72:35:7f:6f:54:77: aa:01:a7:72:85:d0:c0:82:e6:3d:22:bf:ec:0d:f2:55:22:c8: 1b:ec:4a:43:21:d3:9a:f3:08:49:78:0a:a7:e9:f2:99:be:85: b0:6f:da:85:8a:8a:b6:7a:d3:e8:34:ba:01:c3:23:a6:7b:e5: f0:79:34:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuyGxCBmeJ90AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODVhYzRmNTctZTkxYi00ZjAzLWIxYWItYWRiM2U0ZDJiOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifcu2Al3Pqh9v3W0hr/FKDDC81WdCdj57QdB jebPm1QUW+wNm96lLtqVEjBDaZbjggf1l1fKfUVP7lIRu4usvuBYSWei4IkBptQs /W6E7oGxKhnsZj/9GizivcsGB+2WiyZeI6Idr56MIRjND5sIh0WYTqm0+7fQ8IGk crQ38kiJ/TIUumLv87dPp0/OBvvw1TyZ7evKqn5aflGHGD1AYvjotTul0vwAn65C bik018GPI3o5BTbqRoxJ1rctE2oxToLhsKCgfRiARq+x3y+bDzNJ3kLh7JCivhx1 WHBECLKkj1BFJX3eg6CqjWmsr6ZU3ldJP/NjsHZeed0cu2Bv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLA3mdXFJdVCsV906zR/NTRFUhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjBiNjdlZDctZjg5My0z ZDdiLTg2OTYtMTU2MWRmNmUyMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5PyASIIqOwlTRHf0HqbpMxfSFi2Kt9kGJTLVma0iboqaLN/0ZEalSO +e8GWFi1X59xBUMAGw2l3O1yLdLBAfi2WKg5c0lytLZrdCZGQQHt+F2xWMYsiOCq jtKklID+JKdlbW2t6kC+qF6plOAuAhR1ERAvKdtaR9Ql32/L2we4GzWk+Em4Rb0i oZVYEni8wMCiENoLZzc58OYqB1MdJ3HaQMIvpegRWc2TY3qv26+DOOuXcGOwr2gk Wb7u9jYznXI1f29Ud6oBp3KF0MCC5j0iv+wN8lUiyBvsSkMh05rzCEl4Cqfp8pm+ hbBv2oWKirZ60+g0ugHDI6Z75fB5NBg= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:26 2025 by rpki-client