$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa File: 42c12548-573e-318e-87a2-6e11bf3c9261.roa (raw, json) Hash identifier: yxR6fTvG4GWdPP35/uUXferLpjzHK6bI6T2mMS6nhtk= Subject key identifier: 78:34:00:D6:12:E0:C8:12:44:5E:C3:F8:C8:0F:77:93:16:E9:06:07 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7725C3A861FB4F3C259380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:25:c3:a8:61:fb:4f:3c:25:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=bbd0c41c-bdb9-456c-847f-a82ad9ecf284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:32:ac:90:65:1a:5a:7f:1b:f0:a9:0a:a3: 40:33:f9:2c:4e:ca:30:15:ef:b1:d2:6d:4f:a2:92: d0:d7:7a:40:86:db:37:58:31:11:f8:f2:88:9a:11: 64:99:5c:2f:09:8f:ee:24:50:ec:b1:e8:ba:0e:56: 1d:8c:7a:1e:39:d0:f8:c6:0a:ef:34:75:43:89:7c: 60:5b:e3:29:19:92:5d:6a:42:35:05:9e:b4:a0:04: 5a:c6:6d:45:56:e4:2e:c6:46:90:75:fb:a1:e4:c5: 4e:9d:4d:ab:13:ba:bd:ea:18:39:91:9d:c1:b8:cb: 9e:9a:97:5e:60:88:31:2a:84:08:42:49:f2:8a:d6: e6:dc:f6:e7:45:ee:ed:00:3e:17:3c:22:79:c4:f6: d6:dd:be:5c:b8:a8:f4:2d:d1:20:21:15:b0:77:60: e8:37:fb:f4:6f:9a:4f:bf:25:ca:2a:ae:d2:e7:5c: f7:8f:67:ee:e8:86:1e:19:98:c2:8f:08:fb:82:73: 04:92:80:96:46:1b:75:79:57:68:8d:e8:e7:2c:62: 5d:22:38:f4:40:ab:7b:87:f2:cf:1c:ea:96:76:58: e9:8a:b3:20:a8:80:b7:2d:9d:d4:9e:b0:1f:f9:fb: 8c:9a:28:1c:9e:7a:23:4c:ec:1f:39:ff:45:a7:3a: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:34:00:D6:12:E0:C8:12:44:5E:C3:F8:C8:0F:77:93:16:E9:06:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42c12548-573e-318e-87a2-6e11bf3c9261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d9:09:91:80:7d:56:1a:62:5d:1a:48:03:c4:e8:91:e0:37: 52:51:28:52:d4:f5:15:56:26:98:f7:63:a4:70:e0:99:b8:b0: c9:d1:cd:d0:8b:44:89:da:0f:49:18:a7:b5:83:ed:b8:7d:21: 0a:cb:4c:18:d6:9b:1b:75:c7:45:67:a2:5b:6a:c2:0b:92:46: 39:4d:3d:e9:b9:89:81:a5:80:e6:c7:9b:4e:81:c1:2e:4b:a6: 48:10:2d:20:f4:c0:41:8d:ba:cd:1f:d1:ef:d7:c1:13:0e:1e: 54:f3:38:97:2d:fe:89:e7:83:19:6c:55:a1:f7:33:f5:14:db: 5e:1c:18:7c:5e:da:cb:49:44:5f:60:a1:b4:25:77:f6:81:29: 54:15:55:32:50:78:ad:13:b1:6d:d8:1d:b5:d0:e9:95:66:ca: 03:2d:f3:73:ca:ac:4b:52:58:65:d1:54:4c:c6:74:22:0a:ea: 51:81:d5:7a:72:51:b0:b4:59:63:4a:16:dc:1e:2c:a6:4c:3c: 01:42:c6:9e:90:fe:ff:64:ff:74:98:3f:b5:7e:56:d1:de:f9: 85:1a:82:82:68:cb:e8:4b:b4:87:77:33:8c:c5:8d:7d:bb:3f: 51:25:0a:49:c5:46:03:62:a4:f6:22:78:72:e7:e8:84:8f:f8: c2:92:9e:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyXDqGH7Tzwlk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YmJkMGM0MWMtYmRiOS00NTZjLTg0N2YtYTgyYWQ5ZWNmMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL0yrJBlGlp/G/CpCqNAM/ksTsowFe+x0m1P opLQ13pAhts3WDER+PKImhFkmVwvCY/uJFDssei6DlYdjHoeOdD4xgrvNHVDiXxg W+MpGZJdakI1BZ60oARaxm1FVuQuxkaQdfuh5MVOnU2rE7q96hg5kZ3BuMuempde YIgxKoQIQknyitbm3PbnRe7tAD4XPCJ5xPbW3b5cuKj0LdEgIRWwd2DoN/v0b5pP vyXKKq7S51z3j2fu6IYeGZjCjwj7gnMEkoCWRht1eVdojejnLGJdIjj0QKt7h/LP HOqWdljpirMgqIC3LZ3UnrAf+fuMmigcnnojTOwfOf9FpzpDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg0ANYS4MgSRF7D+MgPd5MW6QYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDJjMTI1NDgtNTczZS0z MThlLTg3YTItNmUxMWJmM2M5MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzZCZGAfVYaYl0aSAPE6JHgN1JRKFLU9RVWJpj3Y6Rw4Jm4sMnRzdCL RInaD0kYp7WD7bh9IQrLTBjWmxt1x0VnoltqwguSRjlNPem5iYGlgObHm06BwS5L pkgQLSD0wEGNus0f0e/XwRMOHlTzOJct/onngxlsVaH3M/UU214cGHxe2stJRF9g obQld/aBKVQVVTJQeK0TsW3YHbXQ6ZVmygMt83PKrEtSWGXRVEzGdCIK6lGB1Xpy UbC0WWNKFtweLKZMPAFCxp6Q/v9k/3SYP7V+VtHe+YUagoJoy+hLtId3M4zFjX27 P1ElCknFRgNipPYieHLn6ISP+MKSnuM= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:00 2025 by rpki-client