$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa File: 89cbf199-d065-3e52-85c6-721088fc29c4.roa (raw, json) Hash identifier: m0vUqObSJ9l+nPhFwCBUvc0yCflHZSd2WvHfQCUG3bo= Subject key identifier: A4:0E:6E:4E:2A:E3:50:02:B5:D7:7E:78:2B:B1:83:72:99:68:83:59 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DB3F15D33D65E5700900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:db:3f:15:d3:3d:65:e5:70:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=588068fa-2ec9-4fa7-a77f-85762641fd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:9b:cb:51:f4:ae:75:da:54:af:69:db:55: 31:ab:ba:8e:33:cf:a3:e7:54:b2:41:50:61:5d:0c: d9:f7:29:25:a6:8b:b9:4b:9c:ab:e3:25:f5:f4:b2: 7b:f9:74:d8:63:e2:b6:f2:a9:31:26:85:db:28:f2: 33:4c:87:e3:97:f6:db:be:d8:af:80:e5:28:34:fd: 30:7f:fb:4b:1e:0e:92:15:6c:04:31:7c:81:10:00: e4:74:7d:5c:04:42:6a:f8:07:9d:05:7b:b0:ce:3e: 1b:08:29:70:34:33:49:36:cb:59:82:39:26:7c:03: 56:80:e2:63:5c:e9:3d:ca:e5:92:8c:60:9c:77:9f: ed:71:8a:7c:fa:0c:63:a6:c6:74:7b:05:ed:e1:34: 37:4a:b7:97:d7:c1:4b:23:a5:e7:9a:17:18:4e:fe: 21:9b:53:46:28:61:88:f5:14:51:be:40:26:65:96: 35:e4:9f:8d:90:c6:82:79:cd:3b:1a:0c:b0:d6:d1: 28:6a:1c:97:0e:9b:bc:26:09:95:50:8a:b4:cc:38: f6:e2:62:82:65:4c:02:e8:2d:a0:04:f9:6e:ad:20: 5a:ca:b3:88:d9:77:d7:a8:13:c9:1d:04:9d:e4:f9: 1e:f2:81:2b:4c:f3:70:4c:64:c7:02:7c:e6:da:1f: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:6E:4E:2A:E3:50:02:B5:D7:7E:78:2B:B1:83:72:99:68:83:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:7c:75:06:fa:3e:68:16:fa:ec:56:73:5c:6d:18:4e:cc:4d: ce:ad:57:bd:48:15:03:04:d6:e0:f1:24:02:6f:44:43:5b:fa: 1f:bc:67:2e:e2:56:a1:68:8f:6f:b2:d2:8b:99:a1:d5:58:55: 82:ee:86:c6:2c:91:5d:b6:99:e3:59:ae:4e:49:86:e0:88:25: 2d:c4:2b:9a:7b:f2:ce:b0:49:e7:9a:d5:60:09:ae:36:e6:9e: ba:2d:70:53:59:bb:5e:81:fc:5d:32:67:32:dc:7a:d9:b6:b5: 55:da:21:7e:70:b8:72:85:45:f0:fd:f2:e5:68:ce:34:e3:2c: d7:5e:d0:ff:1b:05:99:f3:c6:f9:32:ac:f7:87:31:b1:78:77: b1:00:32:6a:77:5f:61:26:4e:c2:56:c8:21:c7:1b:87:4c:c1: 1a:ba:8b:4b:c5:b5:b3:b2:a0:bc:16:05:44:59:56:68:a7:26: e8:21:ec:09:02:ca:5c:bd:40:25:d5:07:5d:5d:50:6a:a3:d9: 85:ec:61:36:75:ed:21:cd:59:7a:41:fa:c5:c3:dd:04:f1:9c: cd:06:76:73:92:18:9c:76:50:82:63:ba:79:cd:37:5b:36:8f: cf:de:96:bf:c2:1d:36:2e:00:96:f8:81:21:0c:dc:0a:a5:fd: b4:ef:87:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQds/FdM9ZeVwCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NTg4MDY4ZmEtMmVjOS00ZmE3LWE3N2YtODU3NjI2NDFmZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshCby1H0rnXaVK9p21Uxq7qOM8+j51SyQVBh XQzZ9yklpou5S5yr4yX19LJ7+XTYY+K28qkxJoXbKPIzTIfjl/bbvtivgOUoNP0w f/tLHg6SFWwEMXyBEADkdH1cBEJq+AedBXuwzj4bCClwNDNJNstZgjkmfANWgOJj XOk9yuWSjGCcd5/tcYp8+gxjpsZ0ewXt4TQ3SreX18FLI6XnmhcYTv4hm1NGKGGI 9RRRvkAmZZY15J+NkMaCec07Ggyw1tEoahyXDpu8JgmVUIq0zDj24mKCZUwC6C2g BPlurSBayrOI2XfXqBPJHQSd5Pke8oErTPNwTGTHAnzm2h/EZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQObk4q41ACtdd+eCuxg3KZaINZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODljYmYxOTktZDA2NS0z ZTUyLTg1YzYtNzIxMDg4ZmMyOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMB8dQb6PmgW+uxWc1xtGE7MTc6tV71IFQME1uDxJAJvRENb+h+8Zy7i VqFoj2+y0ouZodVYVYLuhsYskV22meNZrk5JhuCIJS3EK5p78s6wSeea1WAJrjbm nrotcFNZu16B/F0yZzLcetm2tVXaIX5wuHKFRfD98uVozjTjLNde0P8bBZnzxvky rPeHMbF4d7EAMmp3X2EmTsJWyCHHG4dMwRq6i0vFtbOyoLwWBURZVminJugh7AkC yly9QCXVB11dUGqj2YXsYTZ17SHNWXpB+sXD3QTxnM0GdnOSGJx2UIJjunnNN1s2 j8/elr/CHTYuAJb4gSEM3Aql/bTvh0k= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:53 2025 by rpki-client