$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ec1aa97-7f08-3746-baaf-089c0424ed88.roa File: 2ec1aa97-7f08-3746-baaf-089c0424ed88.roa (raw, json) Hash identifier: d4CTzfbBqfOxl4Sz1NNehJwgh+5WUxq7jUyEzjD6mqU= Subject key identifier: 99:D3:A5:83:5B:AD:F0:DE:8A:3A:EA:E6:91:E1:DB:73:53:85:36:CB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7728094F89AF54B0B1AA60 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ec1aa97-7f08-3746-baaf-089c0424ed88.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:28:09:4f:89:af:54:b0:b1:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=dc54f17f-437a-40bd-8c70-e5bc38747da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:70:12:46:d9:e1:64:c0:57:47:ec:9b:f2: f4:f8:40:62:24:75:07:3b:e8:dd:f4:34:39:37:38: 88:67:eb:42:dd:87:7b:28:70:33:2e:2f:da:29:c3: 7a:0a:42:c0:ba:35:9d:88:3f:ea:50:c4:07:4a:cc: aa:8a:66:b7:3d:2d:58:32:d8:c0:f8:9b:1a:65:cb: 0e:9f:10:f2:26:be:48:cd:04:35:dd:26:6e:57:81: d8:cb:5a:97:47:29:53:ca:71:69:67:ad:35:db:7f: eb:f3:fa:54:05:ef:63:9c:ab:5f:54:9e:0e:4b:1d: ea:98:6a:51:82:fc:51:c9:76:8d:b0:d3:4a:74:cc: bf:27:0e:70:38:e4:fe:53:04:40:2b:82:b6:84:37: 08:69:ac:93:52:dd:70:6a:73:87:09:25:b8:64:a4: e3:b9:12:b2:79:8e:70:5d:76:cc:66:7b:f9:08:04: ac:d3:e8:43:2b:85:dd:3d:71:21:0c:5c:f3:67:b9: cf:b8:6b:ad:e6:56:8b:9e:6d:66:6c:75:00:20:47: de:27:11:89:d3:d8:1c:48:c1:02:6c:f9:2d:a8:d9: 00:d6:18:32:bc:7a:cb:3d:a0:68:9f:f6:ef:10:eb: d3:97:de:95:c9:6b:7e:1c:2f:f5:32:d5:98:7a:e5: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:A5:83:5B:AD:F0:DE:8A:3A:EA:E6:91:E1:DB:73:53:85:36:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ec1aa97-7f08-3746-baaf-089c0424ed88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0c:77:f0:b5:3d:0d:2e:77:44:5f:20:ae:3a:1e:7e:fa:f8: 46:22:03:42:fe:e8:5e:c3:11:98:0e:c7:57:1d:19:7e:f6:dd: 27:da:21:10:9e:80:7a:48:f3:a6:1c:10:6c:1b:2a:84:f6:ef: ff:1f:ce:ea:17:e6:28:20:64:2e:cd:bc:d6:66:47:0f:61:e0: ce:98:c8:43:71:20:a1:1c:00:2c:8a:b1:8a:7b:24:bf:66:90: 9c:c8:52:2d:d7:f1:5e:39:64:56:65:2d:44:d1:39:11:40:2c: 75:0f:33:6b:d4:84:08:38:cb:42:ea:3e:7a:58:bc:41:b7:52: ca:00:67:f8:e3:be:71:f4:57:4d:41:97:1e:fa:b2:b5:74:e6: ba:d7:a2:e5:14:60:ca:dd:e6:e0:7a:f6:73:a7:b6:5d:bd:82: a1:77:46:f6:74:95:6f:b4:60:1a:10:9c:15:f1:2e:4f:87:2f: d4:fc:91:fe:73:e5:e7:9d:25:90:9b:a9:8f:63:fb:29:81:65: 2c:b6:52:b4:0c:cb:20:70:65:97:7b:a2:4a:90:95:10:29:af: b5:e1:2a:0a:d3:91:8c:83:07:c9:a7:f3:92:64:2a:35:32:47: ae:63:e1:d9:c1:04:a3:4d:5a:6a:07:38:af:79:46:4f:f4:a0: fc:5e:f8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdygJT4mvVLCxqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGM1NGYxN2YtNDM3YS00MGJkLThjNzAtZTViYzM4NzQ3ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbtwEkbZ4WTAV0fsm/L0+EBiJHUHO+jd9DQ5 NziIZ+tC3Yd7KHAzLi/aKcN6CkLAujWdiD/qUMQHSsyqima3PS1YMtjA+JsaZcsO nxDyJr5IzQQ13SZuV4HYy1qXRylTynFpZ60123/r8/pUBe9jnKtfVJ4OSx3qmGpR gvxRyXaNsNNKdMy/Jw5wOOT+UwRAK4K2hDcIaayTUt1wanOHCSW4ZKTjuRKyeY5w XXbMZnv5CASs0+hDK4XdPXEhDFzzZ7nPuGut5laLnm1mbHUAIEfeJxGJ09gcSMEC bPktqNkA1hgyvHrLPaBon/bvEOvTl96VyWt+HC/1MtWYeuXUmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnTpYNbrfDeijrq5pHh23NThTbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmVjMWFhOTctN2YwOC0z NzQ2LWJhYWYtMDg5YzA0MjRlZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcMd/C1PQ0ud0RfIK46Hn76+EYiA0L+6F7DEZgOx1cdGX723SfaIRCe gHpI86YcEGwbKoT27/8fzuoX5iggZC7NvNZmRw9h4M6YyENxIKEcACyKsYp7JL9m kJzIUi3X8V45ZFZlLUTRORFALHUPM2vUhAg4y0LqPnpYvEG3UsoAZ/jjvnH0V01B lx76srV05rrXouUUYMrd5uB69nOntl29gqF3RvZ0lW+0YBoQnBXxLk+HL9T8kf5z 5eedJZCbqY9j+ymBZSy2UrQMyyBwZZd7okqQlRApr7XhKgrTkYyDB8mn85JkKjUy R65j4dnBBKNNWmoHOK95Rk/0oPxe+Hc= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:42 2025 by rpki-client