$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/994b85ed-cfd6-3a7e-a889-875bb0558a07.roa File: 994b85ed-cfd6-3a7e-a889-875bb0558a07.roa (raw, json) Hash identifier: nQ8XsWpPSKaEBMh1osACWXyTFJ0Ac1Znb0fVcrl0RJU= Subject key identifier: 21:BD:7E:FB:66:B5:12:80:6F:2B:3D:75:70:C9:7A:FB:B4:09:E9:8D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7743DE2385C70F406C3820 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/994b85ed-cfd6-3a7e-a889-875bb0558a07.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:43:de:23:85:c7:0f:40:6c:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=e75e386b-24f1-4a90-98fb-efa45faa4cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:bb:0d:27:6d:61:10:8d:5d:0d:2b:88:5b: 52:f8:71:9e:96:2a:3b:24:d3:8e:40:01:92:a0:9a: 17:b1:9f:55:2e:d9:67:c7:f3:5d:3f:bf:48:d7:82: d0:27:ad:c8:b1:7b:91:cc:f8:af:98:a2:57:ae:6a: bb:d5:37:17:7e:fb:e0:8f:99:64:a2:b5:1b:f4:14: fe:3a:85:d0:8c:36:bc:b2:dc:8f:de:bc:20:a7:17: 5a:02:d0:76:8a:c3:31:0d:8b:a1:a5:fb:6b:d0:bf: 7b:19:83:65:6d:e8:a9:5d:ad:22:98:fc:88:b9:d1: d9:a4:ce:1d:81:dd:49:d0:ec:9c:9d:fc:13:21:38: e3:50:52:db:d3:5f:c6:bf:e3:d5:af:38:54:b6:4d: 39:f9:95:8e:99:ad:45:42:35:b6:85:e3:18:41:16: 92:80:a9:a9:a4:17:73:96:a1:a0:67:e0:3a:04:4e: 91:74:92:d3:1c:60:c6:fc:09:1d:89:2f:94:37:3c: f4:a5:17:60:00:f9:56:42:c4:a6:59:59:12:17:89: 29:0a:58:62:47:bc:89:66:47:d2:b9:45:61:c3:ee: 03:a5:e0:1c:5d:68:40:db:dc:4f:98:6a:c6:84:93: bf:c7:0b:e6:41:90:58:4f:3c:07:d4:25:5d:46:22: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:7E:FB:66:B5:12:80:6F:2B:3D:75:70:C9:7A:FB:B4:09:E9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/994b85ed-cfd6-3a7e-a889-875bb0558a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:51:3b:7e:70:d3:14:32:b4:18:5b:f5:75:34:2c:e6:2f:17: ef:b2:9c:fa:4f:1a:66:c0:75:30:e0:66:19:99:08:d1:0b:e0: 1d:4e:c7:1b:fa:3a:b2:03:e8:8d:d6:0b:4c:ca:5e:7e:c8:1b: 46:88:91:d0:4e:28:52:c2:4f:84:d3:86:c5:5f:b2:d3:a2:a0: 3e:f6:c1:e3:b2:f6:e2:da:c4:71:58:43:3d:d5:82:39:f5:9e: 3d:7b:20:2d:f7:ce:0f:40:02:5a:f9:d7:ab:53:4c:1f:44:40: bb:19:68:eb:14:1b:b1:ed:8c:85:e1:dc:b5:cb:d2:ce:ec:ce: 5d:63:a5:0e:20:f2:95:6c:af:97:89:d1:27:b9:63:ae:9d:61: 8f:5e:55:b1:d1:d7:0f:4c:c9:09:8c:b3:c3:cc:8f:62:04:01: ff:f9:39:69:d7:f9:ce:b2:4f:21:57:24:15:0e:2b:3e:d7:c5: d7:8f:9a:a8:3e:49:57:30:e4:66:55:9a:99:03:4b:6e:1f:e3: 1d:31:cc:c3:b6:3a:d7:70:4a:6f:c2:3e:0d:cb:75:09:f8:b0: 82:a0:20:cc:78:25:31:91:dc:a5:b3:40:34:bd:64:f7:60:25: 0c:fe:ec:f4:58:76:c4:2b:87:85:68:ec:3b:2e:48:a3:92:19: 86:84:8e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0PeI4XHD0BsOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTc1ZTM4NmItMjRmMS00YTkwLTk4ZmItZWZhNDVmYWE0Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKK7DSdtYRCNXQ0riFtS+HGelio7JNOOQAGS oJoXsZ9VLtlnx/NdP79I14LQJ63IsXuRzPivmKJXrmq71TcXfvvgj5lkorUb9BT+ OoXQjDa8styP3rwgpxdaAtB2isMxDYuhpftr0L97GYNlbeipXa0imPyIudHZpM4d gd1J0OycnfwTITjjUFLb01/Gv+PVrzhUtk05+ZWOma1FQjW2heMYQRaSgKmppBdz lqGgZ+A6BE6RdJLTHGDG/AkdiS+UNzz0pRdgAPlWQsSmWVkSF4kpClhiR7yJZkfS uUVhw+4DpeAcXWhA29xPmGrGhJO/xwvmQZBYTzwH1CVdRiJdlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG9fvtmtRKAbys9dXDJevu0CemNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk0Yjg1ZWQtY2ZkNi0z YTdlLWE4ODktODc1YmIwNTU4YTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9RO35w0xQytBhb9XU0LOYvF++ynPpPGmbAdTDgZhmZCNEL4B1Oxxv6 OrID6I3WC0zKXn7IG0aIkdBOKFLCT4TThsVfstOioD72weOy9uLaxHFYQz3Vgjn1 nj17IC33zg9AAlr516tTTB9EQLsZaOsUG7HtjIXh3LXL0s7szl1jpQ4g8pVsr5eJ 0Se5Y66dYY9eVbHR1w9MyQmMs8PMj2IEAf/5OWnX+c6yTyFXJBUOKz7XxdePmqg+ SVcw5GZVmpkDS24f4x0xzMO2OtdwSm/CPg3LdQn4sIKgIMx4JTGR3KWzQDS9ZPdg JQz+7PRYdsQrh4Vo7DsuSKOSGYaEjr8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:19 2025 by rpki-client