$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27e624fa-928b-3b68-9fc3-d1f9464a2227.roa File: 27e624fa-928b-3b68-9fc3-d1f9464a2227.roa (raw, json) Hash identifier: Toj6wcEJnuv2b1D8/18RBxxTNSTzIk8R7ynqQmGlwBo= Subject key identifier: E9:D4:3E:62:36:8F:B1:50:85:F0:19:F9:9F:EE:16:D8:4D:86:3F:72 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DD3485B06D60C0787880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27e624fa-928b-3b68-9fc3-d1f9464a2227.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:dd:34:85:b0:6d:60:c0:78:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=cf9cb3bd-4da1-4267-a758-49cd7fa67afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:12:f5:0a:8b:dc:f8:6a:8f:6e:dd:0b:a2: 2a:30:c9:b7:c8:b1:06:2c:3b:52:15:f4:d9:f4:02: 12:4f:1b:d0:bf:01:fa:e2:8f:00:5c:44:fa:13:82: 69:33:1b:60:1e:f3:6d:db:7f:ee:9c:a4:fb:09:ee: e5:9b:e3:5f:da:0a:ba:67:0d:3b:15:c7:f7:7e:f5: 89:c8:83:30:29:9b:b0:c2:b0:70:04:6f:ca:8d:b5: ea:a4:95:bd:f1:3e:08:22:3d:55:3a:bf:8d:8f:9e: d0:b1:a3:72:af:5e:5a:8b:4d:91:31:20:a1:03:65: d5:55:59:71:07:0e:8c:65:c3:2e:ac:59:e2:a2:6d: be:9c:78:53:61:d9:5f:a7:49:08:13:13:08:1e:96: d6:9f:d8:fa:6f:34:1a:a9:c8:88:50:b4:0e:1c:25: ca:18:a9:7b:86:44:55:6c:50:6c:06:d7:4e:6a:80: 6c:50:22:70:3d:ce:cc:d1:e3:09:f8:8d:8d:69:a1: 1f:05:7c:8d:89:af:51:31:85:fb:3a:f5:78:4f:04: 5f:75:ac:ce:0c:67:be:89:67:1e:a1:0f:74:10:37: 92:95:9d:18:ab:35:84:e7:12:7f:10:f2:57:c5:74: aa:83:a5:c3:0f:48:d1:06:f1:0b:fc:a6:3a:a2:1f: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D4:3E:62:36:8F:B1:50:85:F0:19:F9:9F:EE:16:D8:4D:86:3F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27e624fa-928b-3b68-9fc3-d1f9464a2227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:15:c9:c6:2e:93:0f:22:74:fb:99:eb:62:67:6f:74:17:b0: 21:2a:bb:d9:19:5e:48:36:8e:4a:2f:0b:43:ce:2f:2d:32:03: b9:b4:52:e4:47:6a:81:e9:bc:ca:18:cc:f3:d8:30:28:2b:aa: 3a:fd:64:aa:a9:5c:15:20:ae:31:64:53:5d:88:b6:eb:eb:50: f8:ad:62:2a:72:3d:dc:63:80:18:8f:8e:fc:86:d5:be:4a:ac: fe:3a:a5:4c:ac:b0:d7:8d:98:91:5c:77:a9:55:32:50:ca:c0: 89:c5:8e:87:0e:52:99:b2:71:fd:7f:a1:40:48:9c:98:85:50: d0:71:ac:0d:30:81:80:58:b2:e8:15:7c:c0:2f:29:2d:26:76: 23:5a:ab:b7:10:40:7a:ff:b8:f4:33:3f:9e:a1:63:0c:2f:21: 1d:72:e1:d6:67:32:63:3b:17:60:35:77:9d:f0:67:67:54:88: 55:45:17:22:6c:61:c4:55:d5:a8:df:23:c0:bf:24:12:f0:d8: 47:07:c2:1c:cc:0e:fb:ee:e0:5c:3c:a4:bd:bc:80:b3:15:bb: c6:30:bc:b3:ed:06:8a:9f:1d:de:c2:ce:67:00:3d:8f:8c:38: 0d:24:1b:66:2f:c1:52:ad:4f:56:ce:6a:97:14:65:47:c7:9e: 2f:06:97:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQd00hbBtYMB4eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y5Y2IzYmQtNGRhMS00MjY3LWE3NTgtNDljZDdmYTY3YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouIS9QqL3Phqj27dC6IqMMm3yLEGLDtSFfTZ 9AISTxvQvwH64o8AXET6E4JpMxtgHvNt23/unKT7Ce7lm+Nf2gq6Zw07Fcf3fvWJ yIMwKZuwwrBwBG/KjbXqpJW98T4IIj1VOr+Nj57QsaNyr15ai02RMSChA2XVVVlx Bw6MZcMurFniom2+nHhTYdlfp0kIExMIHpbWn9j6bzQaqciIULQOHCXKGKl7hkRV bFBsBtdOaoBsUCJwPc7M0eMJ+I2NaaEfBXyNia9RMYX7OvV4TwRfdazODGe+iWce oQ90EDeSlZ0YqzWE5xJ/EPJXxXSqg6XDD0jRBvEL/KY6oh9vUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnUPmI2j7FQhfAZ+Z/uFthNhj9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjdlNjI0ZmEtOTI4Yi0z YjY4LTlmYzMtZDFmOTQ2NGEyMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4VycYukw8idPuZ62Jnb3QXsCEqu9kZXkg2jkovC0POLy0yA7m0UuRH aoHpvMoYzPPYMCgrqjr9ZKqpXBUgrjFkU12ItuvrUPitYipyPdxjgBiPjvyG1b5K rP46pUyssNeNmJFcd6lVMlDKwInFjocOUpmycf1/oUBInJiFUNBxrA0wgYBYsugV fMAvKS0mdiNaq7cQQHr/uPQzP56hYwwvIR1y4dZnMmM7F2A1d53wZ2dUiFVFFyJs YcRV1ajfI8C/JBLw2EcHwhzMDvvu4Fw8pL28gLMVu8YwvLPtBoqfHd7CzmcAPY+M OA0kG2YvwVKtT1bOapcUZUfHni8Gl5A= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:31 2025 by rpki-client