$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/860df19e-930b-379f-98f0-7806ece0a96a.roa File: 860df19e-930b-379f-98f0-7806ece0a96a.roa (raw, json) Hash identifier: /fY4oyf817Gz9v1qmzUfksAgJotNwDrezWJ32/4D4Qw= Subject key identifier: 87:A9:73:99:76:F3:9F:25:CB:C6:24:AD:C5:53:03:8D:2C:1C:DD:D2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D86EA1A909EA242C0500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/860df19e-930b-379f-98f0-7806ece0a96a.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 104.133.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d8:6e:a1:a9:09:ea:24:2c:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=321e5aa5-ba04-438f-ae54-cfafbdd56095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:86:81:1b:5b:a3:a6:85:d1:37:8e:21:f2: f1:50:3a:f6:73:7a:9e:6d:0a:e9:76:98:98:07:7d: 26:c0:c7:d0:c1:45:a6:33:2a:34:f2:8d:d5:e7:5b: d5:1c:7f:7a:aa:bd:12:f7:5f:09:c7:98:76:f2:14: 38:6b:c0:c7:d3:40:e7:9c:97:27:43:15:d2:e9:db: 26:44:7a:9e:5c:02:e2:df:0e:ae:32:b4:2f:f8:54: 56:91:39:81:4f:26:8f:76:d3:bf:7d:e5:fc:90:0b: 2c:96:f2:49:b9:42:d2:89:1a:c0:91:80:2e:97:48: 6f:74:9b:fa:6f:c4:e2:55:ee:7b:ab:76:75:65:1d: 74:49:68:df:c1:d8:f1:9a:4a:9a:66:a0:a6:78:c6: 44:44:1e:86:4c:9e:ca:5e:0c:b7:78:32:89:24:e6: c9:8e:4c:e9:6d:a6:14:3c:2b:fe:33:ae:a2:dd:da: 7b:ac:10:91:4b:2c:12:45:c2:5b:a3:7f:60:f5:73: 66:07:45:3d:57:d1:96:5a:dc:ed:6e:35:7f:13:46: 84:18:a8:f2:96:c8:06:c9:52:07:7d:61:83:ef:63: e3:11:20:ce:6c:84:f7:52:28:6e:14:12:33:a9:42: 46:47:fb:2a:92:8c:86:c4:7a:0c:a6:64:18:96:f5: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A9:73:99:76:F3:9F:25:CB:C6:24:AD:C5:53:03:8D:2C:1C:DD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/860df19e-930b-379f-98f0-7806ece0a96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ae:f7:21:95:48:6b:75:d3:62:b8:d0:af:75:a9:7c:20:de: 32:9e:4e:70:8e:22:0a:68:da:20:d3:70:73:00:f5:4d:fe:c0: b4:2d:ea:22:2b:16:35:b3:b9:39:95:4a:33:4b:27:a3:24:49: 50:e3:3e:cb:c4:38:8e:08:37:0c:a2:4b:db:f2:3b:81:8d:a3: 3d:5b:e7:43:3b:04:0e:df:12:f9:f8:19:e3:9f:8b:72:28:8c: 60:66:4c:fd:89:9c:95:2d:6b:79:8d:f1:06:53:b4:ab:da:0c: 10:53:a2:6b:5a:6b:6f:97:af:67:91:cc:f0:db:8d:7f:f4:12: 33:be:d1:7a:ec:0a:98:4f:25:17:55:0e:b9:fd:43:08:66:ed: 04:a6:eb:78:0f:65:17:61:b6:a0:2c:ee:a6:a1:e4:a4:90:71: b9:ce:b2:b0:e6:18:00:fe:4d:76:44:63:a8:f0:f6:93:80:ca: cb:75:01:60:2f:3f:6d:9f:78:10:c0:a2:b1:d8:aa:78:4b:d0: 25:52:6c:8c:bb:fc:03:c6:92:98:82:08:92:97:90:94:c1:cb: 82:0b:b5:83:e3:60:c6:ce:66:2e:5c:34:30:32:7d:18:3a:44: 4d:ac:fe:8c:39:48:54:e0:45:27:cb:b6:46:ef:8c:6a:07:19: af:1b:19:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdhuoakJ6iQsBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MzIxZTVhYTUtYmEwNC00MzhmLWFlNTQtY2ZhZmJkZDU2MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jyGgRtbo6aF0TeOIfLxUDr2c3qebQrpdpiY B30mwMfQwUWmMyo08o3V51vVHH96qr0S918Jx5h28hQ4a8DH00DnnJcnQxXS6dsm RHqeXALi3w6uMrQv+FRWkTmBTyaPdtO/feX8kAsslvJJuULSiRrAkYAul0hvdJv6 b8TiVe57q3Z1ZR10SWjfwdjxmkqaZqCmeMZERB6GTJ7KXgy3eDKJJObJjkzpbaYU PCv+M66i3dp7rBCRSywSRcJbo39g9XNmB0U9V9GWWtztbjV/E0aEGKjylsgGyVIH fWGD72PjESDObIT3UihuFBIzqUJGR/sqkoyGxHoMpmQYlvWhZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIepc5l2858ly8YkrcVTA40sHN3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODYwZGYxOWUtOTMwYi0z NzlmLTk4ZjAtNzgwNmVjZTBhOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6u9yGVSGt102K40K91qXwg3jKeTnCOIgpo2iDTcHMA9U3+wLQt6iIr FjWzuTmVSjNLJ6MkSVDjPsvEOI4INwyiS9vyO4GNoz1b50M7BA7fEvn4GeOfi3Io jGBmTP2JnJUta3mN8QZTtKvaDBBTomtaa2+Xr2eRzPDbjX/0EjO+0XrsCphPJRdV Drn9Qwhm7QSm63gPZRdhtqAs7qah5KSQcbnOsrDmGAD+TXZEY6jw9pOAyst1AWAv P22feBDAorHYqnhL0CVSbIy7/APGkpiCCJKXkJTBy4ILtYPjYMbOZi5cNDAyfRg6 RE2s/ow5SFTgRSfLtkbvjGoHGa8bGSU= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:05 2025 by rpki-client