$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa File: 4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa (raw, json) Hash identifier: ckFfvFxpTa0C04edSp2GC925kj+/lBu1SYvpnd+AkzQ= Subject key identifier: E9:D7:64:E2:C9:E7:52:BF:B0:3B:75:A7:D1:72:E6:51:28:E3:50:80 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7F98D8413D09DC0C1DA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7f:98:d8:41:3d:09:dc:0c:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=524da394-0169-45ce-abe1-602d113e64ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:6a:ca:10:7f:f8:fa:63:49:25:62:6d:fc: 78:3a:11:52:0f:c2:c2:42:1d:ae:59:dc:5d:98:96: 4a:75:d8:ed:f1:9e:1e:34:60:b6:48:e4:85:03:a5: db:b1:c1:4a:42:dd:b6:75:f8:41:ea:07:c8:9a:58: 63:e0:5d:b0:85:d7:5a:5d:56:4a:19:0f:66:9a:09: 10:25:cf:32:59:c0:79:22:0f:28:47:b5:58:eb:d5: 3a:23:b2:7e:1d:df:a7:c6:ec:a2:01:2d:28:b0:0e: 66:c6:55:3e:e7:8d:52:b6:64:5e:77:f5:b1:d5:46: 3b:ef:f9:df:41:f8:b5:a5:ee:16:6f:8b:92:2f:05: b3:48:6c:9f:60:5a:7e:24:c1:71:cf:4e:09:86:4d: ce:1e:6d:cd:97:c9:1b:ec:46:be:ad:7b:70:10:3b: 1a:c8:d3:a9:1d:e1:e5:73:d5:4a:af:58:e6:86:95: 6a:ee:b8:c8:cd:92:2b:f1:8b:d1:ec:62:68:20:ec: 96:15:00:1b:db:cb:b1:9f:b5:b7:a8:d8:22:d0:02: 70:b0:e9:0b:93:3a:fd:54:b6:58:cf:fc:48:ff:7f: 5d:4c:bd:29:f9:e3:1f:85:fd:c8:ed:a1:42:5a:31: 3c:00:d6:bb:c5:6f:40:06:f0:50:b1:03:dd:df:ae: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D7:64:E2:C9:E7:52:BF:B0:3B:75:A7:D1:72:E6:51:28:E3:50:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bbe06be-8c9c-3f62-bdb8-f0fc765c86fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:dd:d3:7a:59:b0:da:ae:1e:47:1b:bd:2a:3c:70:7f:2a:cd: 07:f0:ee:c0:f5:25:b6:e6:c6:a6:a6:62:ae:72:69:3c:ac:d0: ac:8d:3c:59:f0:27:ed:1d:58:05:4e:08:8c:18:c8:1a:ba:ad: 6a:fb:0d:8e:ad:53:3e:e4:4a:b0:a3:84:9f:14:e3:d5:c5:4d: 08:0f:09:e8:12:f9:f2:82:56:f0:4f:c9:dc:01:e3:e1:09:ba: 0f:f7:3f:05:19:fa:c8:ba:34:e7:19:7c:77:bd:15:23:35:7a: de:01:5a:91:e2:8f:5f:90:f0:71:3a:11:3b:02:b0:d6:5a:1e: b3:be:88:a3:e9:e9:00:01:72:80:45:d6:df:5f:84:2b:cd:e3: ab:e3:d3:4d:7c:98:2c:74:b3:9c:1e:1b:c0:dd:5a:e4:7e:ce: ee:14:6b:8b:52:11:84:3f:a0:32:7b:d9:bf:df:1e:18:9d:df: a2:b0:90:f6:00:2f:e7:d1:4b:1d:70:0c:6c:0b:20:12:68:8c: 5d:7d:dc:7e:22:5a:72:22:d5:bd:6b:b5:d2:3a:5a:9e:ba:b3: c5:f0:dc:f2:65:9c:16:4b:0d:f0:1f:a1:fb:be:00:d7:ab:9f: 56:f4:de:ca:94:9b:e4:1e:bc:51:52:06:c2:2c:ed:96:60:8e: c1:e9:7f:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDH+Y2EE9CdwMHaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NTI0ZGEzOTQtMDE2OS00NWNlLWFiZTEtNjAyZDExM2U2NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDtqyhB/+PpjSSVibfx4OhFSD8LCQh2uWdxd mJZKddjt8Z4eNGC2SOSFA6XbscFKQt22dfhB6gfImlhj4F2whddaXVZKGQ9mmgkQ Jc8yWcB5Ig8oR7VY69U6I7J+Hd+nxuyiAS0osA5mxlU+541StmRed/Wx1UY77/nf Qfi1pe4Wb4uSLwWzSGyfYFp+JMFxz04Jhk3OHm3Nl8kb7Ea+rXtwEDsayNOpHeHl c9VKr1jmhpVq7rjIzZIr8YvR7GJoIOyWFQAb28uxn7W3qNgi0AJwsOkLkzr9VLZY z/xI/39dTL0p+eMfhf3I7aFCWjE8ANa7xW9ABvBQsQPd3678VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnXZOLJ51K/sDt1p9Fy5lEo41CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGJiZTA2YmUtOGM5Yy0z ZjYyLWJkYjgtZjBmYzc2NWM4NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3d03pZsNquHkcbvSo8cH8qzQfw7sD1JbbmxqamYq5yaTys0KyNPFnw J+0dWAVOCIwYyBq6rWr7DY6tUz7kSrCjhJ8U49XFTQgPCegS+fKCVvBPydwB4+EJ ug/3PwUZ+si6NOcZfHe9FSM1et4BWpHij1+Q8HE6ETsCsNZaHrO+iKPp6QABcoBF 1t9fhCvN46vj0018mCx0s5weG8DdWuR+zu4Ua4tSEYQ/oDJ72b/fHhid36KwkPYA L+fRSx1wDGwLIBJojF193H4iWnIi1b1rtdI6Wp66s8Xw3PJlnBZLDfAfofu+ANer n1b03sqUm+QevFFSBsIs7ZZgjsHpf7U= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:04 2025 by rpki-client