$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86315bc0-e17e-3585-a589-c134fdd71ff2.roa File: 86315bc0-e17e-3585-a589-c134fdd71ff2.roa (raw, json) Hash identifier: g3nrO6/L+hbjhdWLDeLL5XHqsGDrmkdrK2Ln+/mtK0A= Subject key identifier: F1:91:B2:63:00:8C:54:E4:9E:8E:A2:DE:30:2F:01:4F:3F:13:C9:94 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B76F29046DD77C029BC7999C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86315bc0-e17e-3585-a589-c134fdd71ff2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 36383 IP address blocks: 104.135.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:90:46:dd:77:c0:29:bc:79:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7ab7762b-7e07-4448-9933-fc4c93bf5508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fd:6e:42:26:82:bd:37:37:f3:af:ca:27:09: 9e:b0:26:2b:6f:df:62:82:ec:a6:e8:72:71:40:d4: da:14:05:ee:34:2b:9e:28:72:6f:4c:45:67:d7:ab: d8:24:c6:83:a3:53:6a:62:3d:6a:7b:c9:3b:a7:1d: 89:fd:17:18:9b:be:29:a1:95:70:38:7b:c1:32:7e: 61:31:81:64:01:a1:40:f6:93:10:3b:b4:a3:41:fd: cb:1f:e5:67:44:84:c6:d5:58:13:73:9a:c7:54:00: cc:1c:c5:af:60:d2:e7:1f:d8:b1:7c:a3:60:2f:33: 0e:27:3c:f9:38:42:64:54:9b:28:e1:bf:a9:24:50: 24:3b:1d:77:00:f8:b8:2f:f3:33:e9:a8:04:6f:26: a0:f4:1d:91:95:d3:16:c5:5e:4d:e2:4f:c0:cb:c3: c0:ea:44:d9:cb:0d:76:c0:2d:7c:e8:84:85:1e:85: ce:fc:a8:b8:d1:ee:af:6b:c0:ac:b7:ba:87:03:90: 95:78:a2:b3:e0:f6:91:0a:5d:de:55:fe:a0:19:e1: b7:61:3a:3c:83:40:79:b7:15:64:15:e9:a2:b3:33: 1f:ef:97:48:21:48:3f:55:ed:f6:c6:93:87:c8:c9: d7:eb:88:c0:d5:91:d0:c3:cc:63:e9:b6:03:be:e6: 26:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:B2:63:00:8C:54:E4:9E:8E:A2:DE:30:2F:01:4F:3F:13:C9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86315bc0-e17e-3585-a589-c134fdd71ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c6:64:15:0f:ac:e2:42:22:6f:4e:6b:95:05:2a:b1:89:b0: de:75:e3:f3:65:48:46:7a:d5:81:2c:4b:80:0d:42:e5:29:c9: 27:39:6a:70:5e:a8:89:95:86:5f:89:2c:0b:41:26:44:92:e3: 0a:f0:92:1b:a1:04:3d:56:69:3c:ed:9d:79:e9:0b:e3:86:62: 9d:b6:d2:a1:2a:bc:f2:04:d9:c8:cb:aa:48:56:ed:ac:d8:bb: 02:01:8e:7d:23:f7:1e:a7:6f:95:cc:39:e2:ee:e8:30:57:d0: 85:8f:eb:ac:52:9c:d6:c0:42:57:4c:01:57:64:df:9f:c3:d1: 65:1f:c2:27:69:88:ae:6a:a8:09:33:be:62:1c:6c:34:99:92: b9:41:1e:d1:7a:5e:22:de:49:53:dd:45:e5:cd:e4:b3:db:76: df:05:03:b0:f8:2b:f0:dd:cb:bf:56:09:63:e3:38:35:ac:0f: 39:a9:d3:9a:e8:ed:e3:b2:42:23:e0:15:74:18:2a:dc:6f:56: 0d:68:98:63:2d:77:45:de:a8:71:9c:ed:6a:b3:49:2b:a7:c9: e4:e1:00:31:92:dd:09:74:62:3c:2a:27:1c:f8:d2:c5:e9:b1: 0c:c4:c5:b4:b7:b6:13:a4:87:b5:db:ac:2e:c8:ed:df:6c:42: 7b:9f:1d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28pBG3XfAKbx5mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2FiNzc2MmItN2UwNy00NDQ4LTk5MzMtZmM0YzkzYmY1NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f1uQiaCvTc386/KJwmesCYrb99iguym6HJx QNTaFAXuNCueKHJvTEVn16vYJMaDo1NqYj1qe8k7px2J/RcYm74poZVwOHvBMn5h MYFkAaFA9pMQO7SjQf3LH+VnRITG1VgTc5rHVADMHMWvYNLnH9ixfKNgLzMOJzz5 OEJkVJso4b+pJFAkOx13APi4L/Mz6agEbyag9B2RldMWxV5N4k/Ay8PA6kTZyw12 wC186ISFHoXO/Ki40e6va8Cst7qHA5CVeKKz4PaRCl3eVf6gGeG3YTo8g0B5txVk FemiszMf75dIIUg/Ve32xpOHyMnX64jA1ZHQw8xj6bYDvuYmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGRsmMAjFTkno6i3jAvAU8/E8mUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODYzMTViYzAtZTE3ZS0z NTg1LWE1ODktYzEzNGZkZDcxZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPGZBUPrOJCIm9Oa5UFKrGJsN514/NlSEZ61YEsS4ANQuUpySc5anBe qImVhl+JLAtBJkSS4wrwkhuhBD1WaTztnXnpC+OGYp220qEqvPIE2cjLqkhW7azY uwIBjn0j9x6nb5XMOeLu6DBX0IWP66xSnNbAQldMAVdk35/D0WUfwidpiK5qqAkz vmIcbDSZkrlBHtF6XiLeSVPdReXN5LPbdt8FA7D4K/Ddy79WCWPjODWsDzmp05ro 7eOyQiPgFXQYKtxvVg1omGMtd0XeqHGc7WqzSSunyeThADGS3Ql0YjwqJxz40sXp sQzExbS3thOkh7XbrC7I7d9sQnufHQo= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:06 2025 by rpki-client