$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27163fdf-23cd-380f-8b48-bfad4e048d2b.roa File: 27163fdf-23cd-380f-8b48-bfad4e048d2b.roa (raw, json) Hash identifier: WePacV9eQWEpF1bF57JIFomd/7I+ufPgsDJMfgaAqY4= Subject key identifier: 27:6B:19:59:5E:83:50:77:F2:D5:C2:0A:BA:5A:4E:F4:CF:0F:EC:29 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7726D3C2CD85CDA5B4D628 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27163fdf-23cd-380f-8b48-bfad4e048d2b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:26:d3:c2:cd:85:cd:a5:b4:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=238d4f95-a464-4aff-afce-2e370a406b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ed:7d:7a:ba:06:c1:f1:3a:fd:c4:8b:f4:27: 3b:61:e5:07:81:a8:30:85:b6:4e:81:33:47:cf:63: 43:ae:2a:f6:62:50:40:ea:b8:14:ee:e4:9d:1c:22: cc:94:cd:df:17:c2:a2:3d:ce:07:47:f6:0b:91:55: 5a:48:34:8d:99:07:a7:50:4a:fe:55:58:f6:c2:2d: 6c:6a:a0:63:52:48:0d:3d:7b:8e:45:55:84:2f:13: 69:31:d7:d5:28:33:29:5a:51:f8:c6:04:fd:9c:d4: e5:9d:0a:73:cc:0c:23:cb:36:f7:02:09:50:4c:24: 3f:e6:49:45:65:a8:5c:ca:fa:8c:2d:2a:5a:92:e2: 5d:be:f5:8d:c8:5c:ab:33:c9:ab:b0:6d:e0:71:67: 6c:fb:f5:73:d4:01:1d:db:aa:23:8f:01:5d:1b:26: 1e:3c:18:ff:41:34:91:83:98:86:8b:e6:12:cd:1b: d1:d0:fa:e9:19:55:7d:a5:bb:06:0f:50:5d:cf:a4: 70:33:7c:a1:7a:27:c0:59:df:eb:4e:26:d8:ac:a2: 91:f8:65:86:a0:a8:61:8c:4f:aa:eb:79:df:c0:d1: 82:27:a1:59:f3:de:c9:60:30:e6:ae:29:a6:0e:1f: 37:48:9d:f0:8e:9d:30:f9:88:1b:e8:e1:d3:20:cc: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6B:19:59:5E:83:50:77:F2:D5:C2:0A:BA:5A:4E:F4:CF:0F:EC:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27163fdf-23cd-380f-8b48-bfad4e048d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e2:e9:98:9f:fc:69:47:8e:17:d7:cf:a2:a7:e7:da:ae:9d: 27:c6:93:1b:bc:7b:f8:b0:e4:3d:34:79:83:26:2b:91:ef:fa: df:26:b3:04:6e:dc:1a:db:2f:41:da:5a:59:96:cf:c2:fc:3b: 77:94:5d:9f:9a:50:c6:56:8b:a4:f2:ee:32:d0:d8:98:5e:d0: 4d:8a:31:f3:a6:5d:35:89:fb:9a:5a:32:e6:c6:28:3d:65:a4: 43:19:67:16:54:b0:6d:35:0f:5f:1c:4b:8f:09:aa:4e:83:fd: 32:07:39:28:dd:d0:2c:bc:5c:cc:20:ff:bc:78:ca:a5:f7:21: 54:03:39:e8:4d:df:72:7c:e5:64:3e:c9:6a:d1:bf:55:df:b3: bc:60:f8:50:6d:eb:7b:13:96:40:fa:1b:5b:ef:20:a4:45:50: e9:af:a5:ad:c5:f3:4b:53:a8:31:63:99:02:e8:5a:37:43:12: 2d:88:90:97:ff:16:0f:00:51:24:80:40:c1:50:02:2b:f4:96: dd:66:70:0d:9d:1b:ea:44:fe:4f:81:6c:da:cf:43:10:d0:d6: 9a:be:3b:d3:3a:83:3c:bc:9e:6c:0c:1b:b1:d8:3f:bb:26:0e: 0a:88:47:61:b8:b4:ec:ab:dd:27:54:cb:b5:58:54:be:4d:1b: 0b:65:7c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdybTws2FzaW01igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MjM4ZDRmOTUtYTQ2NC00YWZmLWFmY2UtMmUzNzBhNDA2YjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO19eroGwfE6/cSL9Cc7YeUHgagwhbZOgTNH z2NDrir2YlBA6rgU7uSdHCLMlM3fF8KiPc4HR/YLkVVaSDSNmQenUEr+VVj2wi1s aqBjUkgNPXuORVWELxNpMdfVKDMpWlH4xgT9nNTlnQpzzAwjyzb3AglQTCQ/5klF ZahcyvqMLSpakuJdvvWNyFyrM8mrsG3gcWds+/Vz1AEd26ojjwFdGyYePBj/QTSR g5iGi+YSzRvR0PrpGVV9pbsGD1Bdz6RwM3yheifAWd/rTibYrKKR+GWGoKhhjE+q 63nfwNGCJ6FZ897JYDDmrimmDh83SJ3wjp0w+Ygb6OHTIMwkEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdrGVleg1B38tXCCrpaTvTPD+wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjcxNjNmZGYtMjNjZC0z ODBmLThiNDgtYmZhZDRlMDQ4ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADni6Zif/GlHjhfXz6Kn59qunSfGkxu8e/iw5D00eYMmK5Hv+t8mswRu 3BrbL0HaWlmWz8L8O3eUXZ+aUMZWi6Ty7jLQ2Jhe0E2KMfOmXTWJ+5paMubGKD1l pEMZZxZUsG01D18cS48Jqk6D/TIHOSjd0Cy8XMwg/7x4yqX3IVQDOehN33J85WQ+ yWrRv1Xfs7xg+FBt63sTlkD6G1vvIKRFUOmvpa3F80tTqDFjmQLoWjdDEi2IkJf/ Fg8AUSSAQMFQAiv0lt1mcA2dG+pE/k+BbNrPQxDQ1pq+O9M6gzy8nmwMG7HYP7sm DgqIR2G4tOyr3SdUy7VYVL5NGwtlfPw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:28 2025 by rpki-client