$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40c7d4ba-5eed-364b-b214-e924513aa37b.roa File: 40c7d4ba-5eed-364b-b214-e924513aa37b.roa (raw, json) Hash identifier: 6vEuwjsweIxaMS2nYM8E4Y2e1BQCTCJ01sUAVP2+iL4= Subject key identifier: 5C:72:B6:0F:2D:B3:F7:1F:D8:F8:4C:B0:43:3D:7B:09:6B:B2:B9:3F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EE3482754EB887D0FE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40c7d4ba-5eed-364b-b214-e924513aa37b.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ee:34:82:75:4e:b8:87:d0:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=4a2ce4ef-815e-49e2-976c-b01f45515ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:a6:c5:7c:57:0d:70:de:a3:dd:a8:cc:e8: 78:f2:b2:a2:24:f6:75:10:d3:47:ca:5b:bd:89:64: 7d:92:f0:45:f8:a0:02:11:cc:fe:0b:44:6a:ef:c7: 93:3b:54:09:0d:d0:04:e8:9d:4d:5f:4d:d0:62:69: 10:2c:17:0d:70:ad:de:11:11:9b:44:61:f8:6d:44: 98:39:d3:ec:dd:ea:27:aa:64:cf:27:2a:20:14:27: 89:0b:a1:9f:55:db:9f:5b:6a:b5:99:e5:7e:ef:7a: 94:24:bc:8e:27:42:93:c1:2b:98:05:c9:63:05:0b: c7:7e:cf:53:49:6c:f5:2c:a2:71:90:ab:af:18:64: 96:6a:4f:cf:ab:e3:70:af:1f:ec:01:7d:9d:48:cc: 88:74:be:c6:45:50:47:2a:dd:15:bb:85:21:3e:5e: e7:26:97:e9:c7:ae:c8:ee:7c:38:60:e7:05:a6:6b: 71:63:2a:a1:60:41:8d:1d:18:ff:bf:33:a4:b0:88: f2:ba:48:92:e6:d3:54:7d:3d:79:dc:23:5f:c5:de: 93:3c:89:5c:3b:68:36:96:c5:32:a5:bb:7a:44:06: 39:3d:e0:30:5c:32:49:6a:31:2d:20:e4:8a:b9:0a: 34:ad:7a:30:17:e4:aa:fb:9d:28:92:e5:48:45:b8: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:B6:0F:2D:B3:F7:1F:D8:F8:4C:B0:43:3D:7B:09:6B:B2:B9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40c7d4ba-5eed-364b-b214-e924513aa37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:32:23:ac:22:06:ae:57:66:e6:8a:69:4b:53:79:5b:50:9e: a3:c3:8c:2d:5d:49:aa:e9:15:41:5b:7b:0a:7e:07:36:7b:68: 15:56:72:1b:03:9e:35:3b:d7:aa:b4:19:79:54:80:90:98:de: cf:34:44:08:f5:c5:d8:18:b3:91:56:be:55:a4:59:47:4e:e3: 24:26:44:6f:9e:f1:46:6c:ac:55:15:c3:b2:58:98:a0:e1:83: 11:bc:b0:de:12:e2:30:eb:84:b2:31:49:e5:40:36:bc:a5:ba: fa:41:d1:66:af:c7:cb:16:50:09:c0:f3:24:35:fe:26:ca:30: 38:9c:19:3d:74:09:cc:1b:57:1f:5a:f9:ae:b1:19:31:ba:94: 77:d6:2f:98:c3:35:bd:75:72:ef:96:b2:6b:a5:a6:17:b2:8a: 84:7a:25:5b:c8:87:93:0b:e9:f2:4b:9d:43:c8:cc:a5:08:de: 0f:36:32:b7:3f:1e:ae:da:51:9e:b2:25:45:f8:0b:41:cd:7b: 63:63:0a:48:c8:fb:43:b7:a5:11:6d:87:b9:27:69:e9:a7:ae: a8:e1:aa:2f:17:86:e2:90:b1:48:0d:1c:bc:e4:14:b5:08:51: d0:58:24:02:12:1b:c7:08:0a:1d:31:17:4c:7a:c0:23:80:07: a2:4b:93:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe40gnVOuIfQ/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NGEyY2U0ZWYtODE1ZS00OWUyLTk3NmMtYjAxZjQ1NTE1ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwCmxXxXDXDeo92ozOh48rKiJPZ1ENNHylu9 iWR9kvBF+KACEcz+C0Rq78eTO1QJDdAE6J1NX03QYmkQLBcNcK3eERGbRGH4bUSY OdPs3eonqmTPJyogFCeJC6GfVdufW2q1meV+73qUJLyOJ0KTwSuYBcljBQvHfs9T SWz1LKJxkKuvGGSWak/Pq+Nwrx/sAX2dSMyIdL7GRVBHKt0Vu4UhPl7nJpfpx67I 7nw4YOcFpmtxYyqhYEGNHRj/vzOksIjyukiS5tNUfT153CNfxd6TPIlcO2g2lsUy pbt6RAY5PeAwXDJJajEtIOSKuQo0rXowF+Sq+50okuVIRbiaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxytg8ts/cf2PhMsEM9ewlrsrk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDBjN2Q0YmEtNWVlZC0z NjRiLWIyMTQtZTkyNDUxM2FhMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsyI6wiBq5XZuaKaUtTeVtQnqPDjC1dSarpFUFbewp+BzZ7aBVWchsD njU716q0GXlUgJCY3s80RAj1xdgYs5FWvlWkWUdO4yQmRG+e8UZsrFUVw7JYmKDh gxG8sN4S4jDrhLIxSeVANryluvpB0Wavx8sWUAnA8yQ1/ibKMDicGT10CcwbVx9a +a6xGTG6lHfWL5jDNb11cu+WsmulpheyioR6JVvIh5ML6fJLnUPIzKUI3g82Mrc/ Hq7aUZ6yJUX4C0HNe2NjCkjI+0O3pRFth7knaemnrqjhqi8XhuKQsUgNHLzkFLUI UdBYJAISG8cICh0xF0x6wCOAB6JLk/4= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:45 2025 by rpki-client