$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7db87dd9-5012-30b6-8e70-21077dad8989.roa File: 7db87dd9-5012-30b6-8e70-21077dad8989.roa (raw, json) Hash identifier: o4QlsI4pcN29FZ3t4WIdbC9gFBoFw8sedGpoHxF6PG0= Subject key identifier: EE:AA:9C:C2:CF:30:5C:2F:D6:29:60:FA:6B:A9:F3:15:2A:1C:BD:03 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DC78F231C5D4726AC700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7db87dd9-5012-30b6-8e70-21077dad8989.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:dc:78:f2:31:c5:d4:72:6a:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=41d909f1-30ff-4ac8-9bc6-379c725dc8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a6:6b:9c:f2:3d:5c:52:89:e1:c8:f2:e5:48: 42:f7:fe:f5:e6:81:e4:19:fd:13:09:76:96:b1:4f: 7a:de:63:ba:30:c2:83:e1:ed:08:fc:56:26:0e:be: 34:4b:19:31:b1:1c:1d:64:03:db:bf:29:28:8d:03: b7:cd:07:23:66:e8:3e:45:38:01:8b:1f:fe:19:be: 70:2b:42:1e:61:cb:ca:1f:eb:cd:c3:b4:cf:0e:2c: 4b:57:87:80:2d:c2:4a:6b:67:6e:23:02:77:55:5e: ce:f2:2d:14:55:42:2e:9e:da:d1:82:82:1b:16:02: b3:32:c5:8b:7c:43:79:26:a5:c6:8d:84:e0:6d:fe: bd:85:90:57:14:62:66:1e:13:f0:78:26:46:b5:f6: 9b:66:68:a0:97:43:cc:d6:2d:9b:46:71:ae:6b:12: 30:81:c2:8d:e6:c2:7c:7c:c5:44:c0:88:18:01:2d: cf:db:13:2b:42:73:27:5f:0c:a6:22:86:f0:c1:3a: 34:ad:8b:58:4e:0e:3a:c9:01:98:00:5c:53:2d:ec: 84:92:f5:cc:18:e4:5c:df:13:7c:e6:19:9f:ef:f9: 78:f9:31:af:4f:34:cb:fe:68:1d:fa:45:df:e0:0d: 79:7a:ea:4f:03:be:53:e8:58:60:8b:f9:7c:f2:53: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AA:9C:C2:CF:30:5C:2F:D6:29:60:FA:6B:A9:F3:15:2A:1C:BD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7db87dd9-5012-30b6-8e70-21077dad8989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:fb:82:e3:82:8b:2e:6f:a8:c8:85:67:9e:ce:b1:62:72:96: f2:f2:33:06:77:11:e1:fa:f8:e4:5f:3a:10:fd:55:29:68:a8: de:bb:76:76:9a:60:20:67:87:f6:c0:0c:97:b7:28:39:ef:a9: 8f:af:de:17:d9:e0:17:25:f1:53:2f:e2:b6:15:5a:d4:84:d7: 37:04:66:f0:5b:10:11:72:fb:90:e7:92:b1:6f:d1:d6:63:e9: b1:4c:9d:f6:49:0d:02:dc:39:2c:f4:51:7a:7d:a8:a9:e4:74: 0b:25:37:76:00:af:d8:b5:6f:3e:7f:9f:e1:6e:73:e1:ab:c2: 96:e0:dc:05:61:ce:f8:fe:f7:21:65:7b:97:1a:97:aa:4f:71: 27:76:0c:ba:db:a3:c6:d4:1d:eb:5a:04:27:ba:d7:fa:df:83: 04:d1:65:65:0b:6d:39:3c:0d:f9:3b:29:fd:54:9c:64:b3:c5: f8:64:25:57:7f:8b:0c:ca:43:b1:b0:7a:f5:8d:ba:d6:25:09: fb:f7:6d:98:98:44:45:1f:0a:90:18:05:35:dc:4c:ab:97:04: 35:80:78:61:6d:d1:64:13:e7:d5:45:04:46:19:3d:bc:90:6a: 0d:4b:99:ff:ea:f9:e5:bf:b0:4d:d9:69:5e:21:35:9f:ef:a3: ec:51:9b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdx48jHF1HJqxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NDFkOTA5ZjEtMzBmZi00YWM4LTliYzYtMzc5YzcyNWRjOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6ZrnPI9XFKJ4cjy5UhC9/715oHkGf0TCXaW sU963mO6MMKD4e0I/FYmDr40SxkxsRwdZAPbvykojQO3zQcjZug+RTgBix/+Gb5w K0IeYcvKH+vNw7TPDixLV4eALcJKa2duIwJ3VV7O8i0UVUIuntrRgoIbFgKzMsWL fEN5JqXGjYTgbf69hZBXFGJmHhPweCZGtfabZmigl0PM1i2bRnGuaxIwgcKN5sJ8 fMVEwIgYAS3P2xMrQnMnXwymIobwwTo0rYtYTg46yQGYAFxTLeyEkvXMGORc3xN8 5hmf7/l4+TGvTzTL/mgd+kXf4A15eupPA75T6Fhgi/l88lPokQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6qnMLPMFwv1ilg+mup8xUqHL0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2RiODdkZDktNTAxMi0z MGI2LThlNzAtMjEwNzdkYWQ4OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf7guOCiy5vqMiFZ57OsWJylvLyMwZ3EeH6+ORfOhD9VSloqN67dnaa YCBnh/bADJe3KDnvqY+v3hfZ4Bcl8VMv4rYVWtSE1zcEZvBbEBFy+5DnkrFv0dZj 6bFMnfZJDQLcOSz0UXp9qKnkdAslN3YAr9i1bz5/n+Fuc+Grwpbg3AVhzvj+9yFl e5cal6pPcSd2DLrbo8bUHetaBCe61/rfgwTRZWULbTk8Dfk7Kf1UnGSzxfhkJVd/ iwzKQ7GwevWNutYlCfv3bZiYREUfCpAYBTXcTKuXBDWAeGFt0WQT59VFBEYZPbyQ ag1Lmf/q+eW/sE3ZaV4hNZ/vo+xRm6o= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:48 2025 by rpki-client