$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa File: 4462c342-789f-32c1-87ce-a167a409d21b.roa (raw, json) Hash identifier: bKAfhM/mUypcFh4zuQewZlxfAVQf0VBGKrqa1ydxJaY= Subject key identifier: 8D:BC:06:CE:9D:E1:19:35:6D:64:55:3A:84:DC:CD:70:B2:B1:93:2F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E77433843FD0A5F9B91F240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:43:38:43:fd:0a:5f:9b:91:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=9eef8d87-45a3-4c2e-9246-fb7d441a8a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:eb:8f:18:22:fe:58:6d:8f:01:d4:61:83: 10:5a:ae:9e:eb:27:e8:15:c9:e0:2a:5c:ac:1f:bb: cf:45:80:59:3a:0e:49:fc:5e:cd:00:a9:7c:ba:b1: 75:1c:06:a6:dc:30:85:1c:74:9c:71:21:43:c4:e2: 35:0b:d5:d1:30:ee:6e:33:80:53:53:03:11:af:47: c4:3f:e8:45:8b:1c:66:2c:73:da:7a:b9:41:03:27: c9:37:36:41:6b:e1:49:61:fc:ea:04:e2:60:61:e2: f4:0d:3f:0f:5e:6c:a4:02:b5:28:1d:96:9f:1d:41: 82:3e:03:ec:43:b5:d9:9a:69:a4:d9:23:5f:a9:41: 36:8e:0b:28:7c:12:18:d9:31:f6:9a:50:f6:c1:66: 69:af:e6:bf:4c:41:d0:b7:84:43:fb:d2:3a:b0:a4: 50:bf:f5:66:f8:cf:97:e7:8d:9e:ad:e2:f0:93:14: c2:63:6c:77:39:fd:2e:fb:73:f8:69:5b:47:cc:6d: f5:f9:07:90:38:12:99:ac:af:75:03:f3:af:94:4d: ad:31:9f:2b:68:af:c1:07:cf:f1:a8:4f:89:58:82: a3:3d:c6:3d:8e:75:bf:0d:cc:78:51:4e:09:45:4d: 03:36:dd:87:0c:2c:4a:b1:5c:5e:d2:39:ce:c5:e4: 37:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BC:06:CE:9D:E1:19:35:6D:64:55:3A:84:DC:CD:70:B2:B1:93:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e1:3a:db:ff:22:ca:a1:a3:02:02:b8:8a:61:99:56:a5:f2: 87:1b:e6:61:1d:b7:43:49:9c:71:ff:f5:46:72:e3:0a:1c:77: 2e:7b:d9:4e:f9:b1:0a:eb:91:ec:ec:34:da:fc:67:4d:f6:5f: 5b:e0:86:a2:04:5d:2d:cd:92:18:ec:6c:1a:b8:3f:d2:d1:00: 24:fd:d7:8e:d6:21:91:4a:a9:bc:53:07:70:f1:f9:20:91:ea: a5:74:5b:e3:9b:88:e1:b9:cc:04:44:e3:8f:d1:f5:cc:89:5d: 5b:ad:20:49:9f:cc:f0:81:e2:6c:b2:bb:a7:ae:0d:4d:c1:88: 6f:3d:68:79:ea:86:d4:2c:35:5d:e1:6c:dc:a2:ba:b2:0e:33: d5:40:2e:ad:37:1b:58:96:e0:72:18:07:23:d7:4e:93:64:d6: 2a:66:40:7b:8c:b8:11:35:5e:a1:0c:18:4f:a6:ff:92:0d:eb: 3c:8e:39:f2:be:2d:80:ea:bd:84:fa:33:e8:dc:b2:50:b5:8c: 51:f7:7a:cc:c3:e3:62:28:34:66:85:77:7e:db:30:fc:e2:0d: ca:23:e3:a5:99:e7:65:06:fd:f9:3d:bf:b2:2f:a4:63:12:87: 50:3d:bc:57:7c:44:78:f3:25:c0:13:34:84:61:b6:01:1a:5f: 50:fc:44:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0M4Q/0KX5uR8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OWVlZjhkODctNDVhMy00YzJlLTkyNDYtZmI3ZDQ0MWE4YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3nrjxgi/lhtjwHUYYMQWq6e6yfoFcngKlys H7vPRYBZOg5J/F7NAKl8urF1HAam3DCFHHSccSFDxOI1C9XRMO5uM4BTUwMRr0fE P+hFixxmLHPaerlBAyfJNzZBa+FJYfzqBOJgYeL0DT8PXmykArUoHZafHUGCPgPs Q7XZmmmk2SNfqUE2jgsofBIY2TH2mlD2wWZpr+a/TEHQt4RD+9I6sKRQv/Vm+M+X 542ereLwkxTCY2x3Of0u+3P4aVtHzG31+QeQOBKZrK91A/OvlE2tMZ8raK/BB8/x qE+JWIKjPcY9jnW/Dcx4UU4JRU0DNt2HDCxKsVxe0jnOxeQ3OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI28Bs6d4Rk1bWRVOoTczXCysZMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDQ2MmMzNDItNzg5Zi0z MmMxLTg3Y2UtYTE2N2E0MDlkMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/hOtv/IsqhowICuIphmVal8ocb5mEdt0NJnHH/9UZy4wocdy572U75 sQrrkezsNNr8Z032X1vghqIEXS3NkhjsbBq4P9LRACT9147WIZFKqbxTB3Dx+SCR 6qV0W+ObiOG5zARE44/R9cyJXVutIEmfzPCB4myyu6euDU3BiG89aHnqhtQsNV3h bNyiurIOM9VALq03G1iW4HIYByPXTpNk1ipmQHuMuBE1XqEMGE+m/5IN6zyOOfK+ LYDqvYT6M+jcslC1jFH3eszD42IoNGaFd37bMPziDcoj46WZ52UG/fk9v7IvpGMS h1A9vFd8RHjzJcATNIRhtgEaX1D8RB0= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:20 2025 by rpki-client