$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fd8eff3-3334-3717-84f8-e558f2c0775f.roa File: 8fd8eff3-3334-3717-84f8-e558f2c0775f.roa (raw, json) Hash identifier: qbp379mCyiOkcuZbC7gnTLX3zfzwJsdxfDCmXCh6lGQ= Subject key identifier: E4:91:33:02:75:AD:5D:59:A8:70:66:18:6F:2F:B8:7C:01:E1:BD:75 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EE465FEF508D5E59EB00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fd8eff3-3334-3717-84f8-e558f2c0775f.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ee:46:5f:ef:50:8d:5e:59:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=bd53fc18-3b4f-4cc1-98ab-7e166feb2359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:08:de:6f:44:f5:c6:75:a3:ba:18:ad:5d: 1e:f3:6c:d3:b1:b1:51:f9:2d:42:07:f4:de:5e:77: 40:3b:6b:af:d1:22:63:cb:f0:5b:a2:d9:7f:4b:88: 63:eb:a7:45:e0:a4:e5:2b:3c:cb:f4:55:92:12:a1: 20:a3:c7:7b:7a:16:7e:73:4d:24:0a:74:84:6c:21: 72:9f:09:cc:a9:13:ad:6d:4e:42:fd:c3:48:36:46: 8b:c9:aa:f3:fc:79:60:17:84:6c:74:e2:1a:0c:f0: e2:35:b3:93:2a:44:c4:82:17:84:83:f0:9c:81:c1: eb:80:85:39:d8:c1:3d:26:b7:22:54:72:30:9e:79: c7:13:c7:90:21:ae:0a:83:55:bc:24:c0:fb:6c:88: b8:2c:c1:02:77:b1:1c:8e:01:d8:d5:71:1d:aa:26: a8:7c:4e:93:09:cb:8f:c5:ec:c5:1c:7c:1c:0b:31: b5:48:92:5b:d1:45:80:99:9a:73:6b:5f:db:9e:fd: 02:93:61:86:bd:de:ce:34:21:24:88:54:2b:27:08: 0a:81:63:42:ce:41:06:e3:e0:48:33:55:07:80:de: 7e:1f:ab:31:b9:3d:47:b4:32:39:5a:5a:97:28:48: cc:5d:d6:c6:62:3c:2a:45:c8:9c:26:3d:e0:47:11: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:91:33:02:75:AD:5D:59:A8:70:66:18:6F:2F:B8:7C:01:E1:BD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fd8eff3-3334-3717-84f8-e558f2c0775f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:43:a0:fe:3f:f1:14:f0:f6:f0:27:0c:2a:db:8a:4f:4c:b4: 13:90:7a:8c:4d:90:d9:0a:75:da:bd:c8:47:3b:6e:e5:df:f6: fd:57:06:e6:ab:23:f7:a8:1f:09:98:40:f6:9d:06:64:33:24: ab:b3:c7:0a:b4:96:58:fa:7b:df:32:e4:b8:e7:55:25:5a:27: 37:39:8c:ab:6f:42:1d:c6:c5:63:57:3f:d1:63:ff:fe:0c:ee: 15:36:fd:65:32:ad:b1:03:49:d5:83:bb:7a:50:90:ce:0a:be: ec:a0:2e:52:93:c5:7f:0e:a7:3c:24:ad:39:92:03:24:af:83: 60:ca:9e:c1:39:10:7d:a5:e9:ee:ac:15:90:c5:86:3b:17:94: aa:4e:50:a7:59:8f:0d:88:f5:1b:15:b5:1c:8a:f0:1a:93:a3: e3:d9:e6:03:5b:8b:c1:07:14:00:ef:13:fe:a4:7b:b6:e2:89: f2:50:ec:19:57:16:81:a3:0b:82:77:d9:d8:fe:f7:2e:09:c6: 6e:1a:0a:3f:4c:bd:bf:e3:4f:ae:76:83:75:9d:db:9c:c0:57: 13:0f:7d:08:1f:a0:6e:34:88:96:8e:8c:4d:26:3a:0f:b1:96: 6d:e4:2f:55:88:03:ec:cf:71:b8:f7:02:44:44:ed:07:47:4d: d3:18:1b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe5GX+9QjV5Z6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YmQ1M2ZjMTgtM2I0Zi00Y2MxLTk4YWItN2UxNjZmZWIyMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt0I3m9E9cZ1o7oYrV0e82zTsbFR+S1CB/Te XndAO2uv0SJjy/Bbotl/S4hj66dF4KTlKzzL9FWSEqEgo8d7ehZ+c00kCnSEbCFy nwnMqROtbU5C/cNINkaLyarz/HlgF4RsdOIaDPDiNbOTKkTEgheEg/CcgcHrgIU5 2ME9JrciVHIwnnnHE8eQIa4Kg1W8JMD7bIi4LMECd7EcjgHY1XEdqiaofE6TCcuP xezFHHwcCzG1SJJb0UWAmZpza1/bnv0Ck2GGvd7ONCEkiFQrJwgKgWNCzkEG4+BI M1UHgN5+H6sxuT1HtDI5WlqXKEjMXdbGYjwqRcicJj3gRxGacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSRMwJ1rV1ZqHBmGG8vuHwB4b11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGZkOGVmZjMtMzMzNC0z NzE3LTg0ZjgtZTU1OGYyYzA3NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdDoP4/8RTw9vAnDCrbik9MtBOQeoxNkNkKddq9yEc7buXf9v1XBuar I/eoHwmYQPadBmQzJKuzxwq0llj6e98y5LjnVSVaJzc5jKtvQh3GxWNXP9Fj//4M 7hU2/WUyrbEDSdWDu3pQkM4KvuygLlKTxX8OpzwkrTmSAySvg2DKnsE5EH2l6e6s FZDFhjsXlKpOUKdZjw2I9RsVtRyK8BqTo+PZ5gNbi8EHFADvE/6ke7biifJQ7BlX FoGjC4J32dj+9y4Jxm4aCj9Mvb/jT652g3Wd25zAVxMPfQgfoG40iJaOjE0mOg+x lm3kL1WIA+zPcbj3AkRE7QdHTdMYGx8= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:22 2025 by rpki-client