$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/665a966b-a944-3749-9ecf-e64afd213b9c.roa File: 665a966b-a944-3749-9ecf-e64afd213b9c.roa (raw, json) Hash identifier: AeJb3/LWJPU8PtAEWBpwluOutOC4RKI7nKbXKWdixyk= Subject key identifier: 28:DE:B3:81:6D:0B:AE:B7:35:42:E6:EE:64:BA:AF:DF:76:3A:C9:B5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B76F2982E8C575BFB344E6700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/665a966b-a944-3749-9ecf-e64afd213b9c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 36411 IP address blocks: 104.134.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:98:2e:8c:57:5b:fb:34:4e:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ed5b6512-0aed-42e7-90f2-112dea1d1086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9c:40:c4:93:c1:da:c4:2c:67:0b:b9:fc:dd: d1:fb:4b:95:e7:34:b3:b7:93:87:10:63:63:3d:50: 48:5c:e1:72:e1:e5:14:f4:80:0a:cc:10:3a:35:6c: 1e:ea:a7:6c:7f:ec:09:10:1b:8c:f1:61:d8:83:3e: 1c:08:1a:e8:d6:40:13:5d:d1:8a:2a:2c:8d:bc:b6: b0:3c:cf:d3:51:f6:a8:e7:9b:7b:59:60:f5:a4:45: 7e:aa:46:a6:18:ad:4b:92:cc:57:5a:1c:af:43:32: d3:7e:53:5e:8f:08:35:79:b3:ed:98:7a:3d:d7:d4: 5d:91:cf:45:95:3b:6e:79:74:69:f6:04:45:74:67: ec:00:ad:e3:1e:e2:ec:3e:db:4c:d5:ba:1f:8c:ae: f3:41:17:85:09:12:79:45:47:b9:43:6d:46:8b:22: 9e:44:69:f4:61:24:3d:cd:a4:14:bb:02:48:58:d3: 7e:65:16:92:1f:1b:64:c4:3e:68:43:86:6c:b5:9a: 1a:c0:85:12:72:ec:96:9e:ee:a2:4a:77:db:9d:6b: ee:a2:a3:71:6b:45:66:68:41:2e:5b:58:90:db:88: 60:96:c6:71:85:0f:a6:bc:70:f9:11:d6:8a:cd:b6: b6:42:9e:89:b7:e9:7f:bd:24:ef:fb:1c:d5:4f:05: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:B3:81:6D:0B:AE:B7:35:42:E6:EE:64:BA:AF:DF:76:3A:C9:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/665a966b-a944-3749-9ecf-e64afd213b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:01:e3:03:54:46:86:d1:0e:5d:0a:8b:69:58:f2:cd:cb:02: 09:6d:f0:38:e8:34:47:ba:74:a1:93:a7:e2:c1:3c:62:06:e3: 3a:f3:82:91:3b:95:7c:7f:b3:69:e6:7a:09:b4:2d:28:17:40: 7b:62:d9:ba:1a:f5:b5:74:2e:f0:69:ed:00:fe:32:1e:60:cc: d6:37:de:ec:8f:8a:de:e8:d8:86:50:f4:17:8c:7a:0d:e1:be: 0e:19:ad:d1:4c:67:cf:07:5b:52:49:68:94:cc:2e:39:77:60: d5:2c:94:d9:ac:83:94:80:69:13:12:41:c3:36:20:4c:e1:98: 12:40:a7:70:84:9c:18:e3:63:df:e4:0e:16:02:49:ff:4d:e7: 28:64:57:42:00:4c:10:df:84:a1:d5:47:04:9f:37:57:99:35: 28:02:37:44:7f:ad:e0:97:77:ec:61:f6:1e:d6:62:2f:a8:b2: 05:53:63:31:c2:34:c3:60:df:51:b9:61:9a:f0:44:3d:6e:b9: 19:2a:5c:93:3c:bd:44:d4:c6:47:51:e4:92:02:6a:96:fe:e9: fc:51:e7:12:c2:c4:3e:a8:f6:dc:a0:f2:bb:50:4a:3a:71:24: 1f:19:c8:e8:be:10:3d:e9:53:96:72:bc:d4:25:45:0a:66:8f: 5b:5f:9f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pgujFdb+zROZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZWQ1YjY1MTItMGFlZC00MmU3LTkwZjItMTEyZGVhMWQxMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5xAxJPB2sQsZwu5/N3R+0uV5zSzt5OHEGNj PVBIXOFy4eUU9IAKzBA6NWwe6qdsf+wJEBuM8WHYgz4cCBro1kATXdGKKiyNvLaw PM/TUfao55t7WWD1pEV+qkamGK1LksxXWhyvQzLTflNejwg1ebPtmHo919Rdkc9F lTtueXRp9gRFdGfsAK3jHuLsPttM1bofjK7zQReFCRJ5RUe5Q21GiyKeRGn0YSQ9 zaQUuwJIWNN+ZRaSHxtkxD5oQ4ZstZoawIUScuyWnu6iSnfbnWvuoqNxa0VmaEEu W1iQ24hglsZxhQ+mvHD5EdaKzba2Qp6Jt+l/vSTv+xzVTwUZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjes4FtC663NULm7mS6r992Osm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjY1YTk2NmItYTk0NC0z NzQ5LTllY2YtZTY0YWZkMjEzYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMB4wNURobRDl0Ki2lY8s3LAglt8DjoNEe6dKGTp+LBPGIG4zrzgpE7 lXx/s2nmegm0LSgXQHti2boa9bV0LvBp7QD+Mh5gzNY33uyPit7o2IZQ9BeMeg3h vg4ZrdFMZ88HW1JJaJTMLjl3YNUslNmsg5SAaRMSQcM2IEzhmBJAp3CEnBjjY9/k DhYCSf9N5yhkV0IATBDfhKHVRwSfN1eZNSgCN0R/reCXd+xh9h7WYi+osgVTYzHC NMNg31G5YZrwRD1uuRkqXJM8vUTUxkdR5JICapb+6fxR5xLCxD6o9tyg8rtQSjpx JB8ZyOi+ED3pU5ZyvNQlRQpmj1tfn/0= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:23 2025 by rpki-client