$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa File: 7549fd74-b059-390e-9c3f-ead7ad43784f.roa (raw, json) Hash identifier: KnrrxQ4y8OLl/T4MO8ZasEMw95oz+UeF8dC3UjCiZoU= Subject key identifier: 16:DD:08:07:2D:30:31:25:7E:43:D5:50:86:DB:63:17:24:B5:49:CF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DCE5E5FA551D3A7B5FC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:dc:e5:e5:fa:55:1d:3a:7b:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=693bf6fe-c34c-4f9e-b2d8-c4b8ac5c3371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:21:23:64:72:1b:4e:bb:f1:d1:3f:5a:e6: a7:58:05:2b:39:ee:7e:cf:27:85:23:53:c0:c8:32: 9b:c6:40:08:26:9c:25:24:87:36:72:c8:ef:85:3d: 98:a0:f6:95:6c:e0:2a:1b:48:c6:ea:92:8d:68:1f: 6e:58:b0:46:e2:aa:d4:fc:90:3a:36:fb:2c:be:b7: 14:ea:63:92:83:9e:89:04:67:19:37:17:a4:76:0b: 77:c1:9b:19:9d:b9:80:52:f1:7d:e2:6c:07:9a:d6: 59:e8:18:e5:a5:f1:7f:b8:e8:05:a2:61:89:cd:59: fa:f7:b5:0e:61:cd:0f:9d:b0:96:0c:b8:a9:b6:a5: 9d:54:c1:1a:42:36:0c:46:b6:88:25:cd:35:27:7c: 1a:a8:fd:56:0e:71:94:47:04:b3:c7:65:5a:0e:69: be:2d:94:40:d0:64:12:ed:df:2b:33:f1:1a:81:19: 04:8c:f7:77:90:35:2f:aa:45:5b:69:4a:4e:c5:26: 26:01:6c:cd:4e:b4:72:37:ba:20:a8:98:2f:0d:5d: 43:65:0f:b9:df:2c:e1:66:86:5e:1d:1c:3a:3e:31: 76:ab:4d:cc:03:e8:a6:a0:b1:50:19:5d:2c:59:83: 88:0b:0d:99:50:be:c4:84:83:33:39:67:5a:ad:33: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DD:08:07:2D:30:31:25:7E:43:D5:50:86:DB:63:17:24:B5:49:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2f:5b:22:b2:d6:c8:24:f3:62:30:ce:a5:1e:28:1c:ce:ec: 56:90:d8:b2:c2:c7:3f:61:d5:ff:76:9e:16:f0:0d:06:81:c3: af:a6:2c:5f:a0:b9:be:f3:ab:42:f5:b4:eb:38:3b:8a:0a:9f: df:f1:8c:0e:0a:a8:a3:29:37:f8:39:62:d5:f6:ce:e0:56:0d: ed:1d:44:4f:77:1d:0b:43:aa:75:73:31:c9:04:55:13:78:85: 71:08:22:7b:aa:54:e6:dd:a1:27:71:dd:0c:b5:f1:fa:6e:6f: e4:1e:00:b5:97:5d:f3:00:8a:38:7e:9c:a5:a1:29:8e:f4:ea: 85:97:7e:d7:c9:b6:bb:21:fa:f2:8f:d7:5b:d7:d2:4a:ff:02: 7b:a7:ba:3f:44:98:c9:4e:e0:ce:d9:79:59:f5:00:04:41:e2: 3b:eb:71:1f:a2:7e:0c:ae:94:04:6f:cb:89:81:23:a5:99:60: 43:ed:58:e9:91:cc:20:67:95:3f:f5:21:02:60:e9:bf:72:e3: 5b:cb:3c:ce:86:85:d5:8a:3d:f2:02:48:bb:79:1c:c6:52:07: ad:a1:5e:4b:63:93:84:3f:f5:75:9c:2a:ac:82:8b:d0:5f:b9: d8:9b:44:2a:85:b2:e7:20:03:6f:ca:3a:04:cc:71:46:eb:02: 46:35:56:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdzl5fpVHTp7X8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NjkzYmY2ZmUtYzM0Yy00ZjllLWIyZDgtYzRiOGFjNWMzMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMhI2RyG0678dE/WuanWAUrOe5+zyeFI1PA yDKbxkAIJpwlJIc2csjvhT2YoPaVbOAqG0jG6pKNaB9uWLBG4qrU/JA6NvssvrcU 6mOSg56JBGcZNxekdgt3wZsZnbmAUvF94mwHmtZZ6BjlpfF/uOgFomGJzVn697UO Yc0PnbCWDLiptqWdVMEaQjYMRraIJc01J3waqP1WDnGURwSzx2VaDmm+LZRA0GQS 7d8rM/EagRkEjPd3kDUvqkVbaUpOxSYmAWzNTrRyN7ogqJgvDV1DZQ+53yzhZoZe HRw6PjF2q03MA+imoLFQGV0sWYOICw2ZUL7EhIMzOWdarTNtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbdCActMDElfkPVUIbbYxcktUnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzU0OWZkNzQtYjA1OS0z OTBlLTljM2YtZWFkN2FkNDM3ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAovWyKy1sgk82IwzqUeKBzO7FaQ2LLCxz9h1f92nhbwDQaBw6+mLF+g ub7zq0L1tOs4O4oKn9/xjA4KqKMpN/g5YtX2zuBWDe0dRE93HQtDqnVzMckEVRN4 hXEIInuqVObdoSdx3Qy18fpub+QeALWXXfMAijh+nKWhKY706oWXftfJtrsh+vKP 11vX0kr/Anunuj9EmMlO4M7ZeVn1AARB4jvrcR+ifgyulARvy4mBI6WZYEPtWOmR zCBnlT/1IQJg6b9y41vLPM6GhdWKPfICSLt5HMZSB62hXktjk4Q/9XWcKqyCi9Bf udibRCqFsucgA2/KOgTMcUbrAkY1VkY= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:20 2025 by rpki-client