$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90f07048-d07f-3ba8-aa11-409ee5710b01.roa File: 90f07048-d07f-3ba8-aa11-409ee5710b01.roa (raw, json) Hash identifier: 7T8Te2BjoJEmxhk40YZ1y6EQkA4Oh25C4jr25Izg+jE= Subject key identifier: DC:D6:F1:81:87:55:F5:7F:40:1F:73:F6:A3:12:8A:B7:7A:D2:8D:7B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B1806E913B4E9B49969BE8A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90f07048-d07f-3ba8-aa11-409ee5710b01.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 395973 IP address blocks: 104.134.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e9:13:b4:e9:b4:99:69:be:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=81b87cde-fd41-45cc-b94a-b18ebfc7ab18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:62:e2:37:9a:3d:4f:87:82:51:84:68:ea: 46:ae:e5:6a:f8:90:0e:5e:33:6c:5e:55:a4:97:c7: 51:b9:f2:c9:e6:cc:1b:54:ee:d6:9a:24:a5:6f:64: e8:ac:8a:77:18:b2:61:e9:6f:87:7d:22:a3:8a:8c: 14:57:c8:cd:39:63:bb:5d:f4:70:15:00:e0:50:94: dc:9a:1b:a4:c8:af:6f:79:5a:91:69:ac:1a:10:48: 44:e7:77:12:27:fd:ba:1c:c2:72:ae:72:2b:cb:43: 3d:90:65:a9:97:f4:84:1f:38:a9:4b:19:98:66:16: c7:75:a6:ba:c5:d9:a9:9d:92:46:35:f2:1a:d0:e4: 67:74:58:73:ff:78:bd:5a:6e:ea:c0:87:2c:d3:66: 9d:c5:5b:ea:eb:b8:57:ff:59:24:df:e3:84:e6:51: f7:31:ef:cc:8e:3f:02:42:d8:c4:6e:61:51:30:f1: 18:56:f8:92:c8:41:38:d0:4c:00:d3:59:0c:2e:1f: b3:fd:10:25:47:b9:c1:33:ff:68:b6:49:38:4a:54: 9d:df:b3:61:f7:a1:83:4c:e1:94:81:56:9f:9e:c8: 37:f7:b1:88:f1:2a:f1:a3:63:c5:73:af:fb:0a:23: 37:44:b3:65:93:cd:a6:3d:27:bd:b5:b9:36:e3:3c: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:F1:81:87:55:F5:7F:40:1F:73:F6:A3:12:8A:B7:7A:D2:8D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90f07048-d07f-3ba8-aa11-409ee5710b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c8:34:4f:13:65:2c:95:19:49:a7:50:c0:f6:4d:ca:44:08: e4:77:57:18:98:06:b8:b2:e8:fe:c9:14:f5:70:4c:29:04:63: b0:c2:ae:55:e1:3d:54:52:d4:2f:68:c8:83:85:7d:32:ae:48: c1:21:95:00:f5:b0:10:e8:30:77:01:10:b1:87:04:58:2d:bc: b0:6d:b7:4d:1a:da:04:3a:d4:5b:d1:00:87:5e:12:87:6d:28: c1:4f:a0:3e:e2:dd:e2:5a:20:15:04:98:35:fb:4c:71:af:2e: bd:b7:06:fe:d9:bb:b5:91:d8:3c:93:95:be:ab:55:31:f6:bf: d4:0d:a3:b6:7a:a3:53:49:c1:f4:56:91:53:50:7a:6b:a0:dd: bc:0f:f2:7d:f1:3b:6b:c0:fa:ab:62:da:a1:8d:7e:ad:d9:e3: e4:8b:c1:cd:ed:c6:52:f3:02:5a:0c:80:30:d4:30:f3:b9:9a: a7:20:5f:d7:4d:a4:80:76:dc:cb:6a:b6:35:00:47:e2:38:6d: d2:d1:1f:1f:4b:de:14:1a:61:27:9d:46:00:ad:db:71:cf:eb: c1:77:6a:83:4a:66:13:f0:1d:25:37:2f:a3:7c:19:ca:3d:69: 83:3c:83:11:04:d6:43:56:ee:45:0f:4a:a5:b8:a8:40:33:fc: b5:70:4b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBukTtOm0mWm+igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODFiODdjZGUtZmQ0MS00NWNjLWI5NGEtYjE4ZWJmYzdhYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl1i4jeaPU+HglGEaOpGruVq+JAOXjNsXlWk l8dRufLJ5swbVO7WmiSlb2TorIp3GLJh6W+HfSKjiowUV8jNOWO7XfRwFQDgUJTc mhukyK9veVqRaawaEEhE53cSJ/26HMJyrnIry0M9kGWpl/SEHzipSxmYZhbHdaa6 xdmpnZJGNfIa0ORndFhz/3i9Wm7qwIcs02adxVvq67hX/1kk3+OE5lH3Me/Mjj8C QtjEbmFRMPEYVviSyEE40EwA01kMLh+z/RAlR7nBM/9otkk4SlSd37Nh96GDTOGU gVafnsg397GI8Srxo2PFc6/7CiM3RLNlk82mPSe9tbk24zyMOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzW8YGHVfV/QB9z9qMSird60o17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTBmMDcwNDgtZDA3Zi0z YmE4LWFhMTEtNDA5ZWU1NzEwYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILINE8TZSyVGUmnUMD2TcpECOR3VxiYBriy6P7JFPVwTCkEY7DCrlXh PVRS1C9oyIOFfTKuSMEhlQD1sBDoMHcBELGHBFgtvLBtt00a2gQ61FvRAIdeEodt KMFPoD7i3eJaIBUEmDX7THGvLr23Bv7Zu7WR2DyTlb6rVTH2v9QNo7Z6o1NJwfRW kVNQemug3bwP8n3xO2vA+qti2qGNfq3Z4+SLwc3txlLzAloMgDDUMPO5mqcgX9dN pIB23MtqtjUAR+I4bdLRHx9L3hQaYSedRgCt23HP68F3aoNKZhPwHSU3L6N8Gco9 aYM8gxEE1kNW7kUPSqW4qEAz/LVwS1s= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:03 2025 by rpki-client