$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa File: 998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa (raw, json) Hash identifier: Elhh/mvRA9ofXQ535T787nC52VDhmN6qeKK8eRrFV0U= Subject key identifier: C2:BC:F3:4D:87:14:E7:5D:DB:C1:E7:00:48:A4:EC:7B:B0:5D:42:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D6E7C688D7642E756700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d6:e7:c6:88:d7:64:2e:75:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=0b011731-33c5-419e-8689-b16fde67033a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:60:ff:9c:72:30:18:c0:6a:b0:b6:b7:4b: 4e:45:4e:f2:3f:25:5e:75:d9:17:e2:e1:e9:6b:43: c0:b3:ff:2f:d5:8d:cc:8e:f9:2c:33:4f:51:79:5d: 70:c2:c3:66:73:45:cf:6b:39:ab:72:38:40:d4:af: c8:f0:18:d3:34:7b:f2:7b:c3:f1:89:90:e7:d5:4f: 0e:65:7c:bb:86:38:4b:84:e8:f3:50:c2:de:bf:51: 06:27:9d:55:7a:51:7c:ee:00:9e:7f:ab:14:8e:4f: 1e:27:d4:97:13:05:9e:6f:5a:85:4c:4e:85:70:d2: 2b:a7:fb:4b:07:ef:5b:22:53:57:b5:7f:95:e8:53: 66:3f:1a:af:f2:04:27:cc:6d:c1:80:55:f7:77:46: a7:33:65:27:73:b7:fc:e7:94:b1:ab:58:7b:52:56: 16:f1:bd:cc:5b:89:31:e5:74:55:88:4a:9f:44:38: fa:6e:80:eb:8d:b7:f7:4d:2a:c2:eb:c3:e3:78:01: fa:65:14:c6:c9:de:31:77:db:46:6e:9a:d2:42:8f: c7:72:9b:17:8c:3c:c2:cc:18:20:40:96:73:28:2e: 7a:b8:7a:13:79:6c:92:c1:19:96:d6:d4:3e:01:d6: 99:40:52:14:17:e1:1d:7a:10:9a:d3:43:b8:76:fc: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BC:F3:4D:87:14:E7:5D:DB:C1:E7:00:48:A4:EC:7B:B0:5D:42:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f1:8b:32:8b:71:bd:86:95:95:76:21:9e:30:91:34:23:2d: 53:37:2a:58:c6:df:31:c7:f2:ae:94:37:84:84:7b:0e:59:98: 76:e6:67:a3:b8:18:8f:fd:0e:22:a2:14:30:e8:da:fc:2c:ea: 6c:0d:c4:ec:90:68:ce:ae:4c:6a:68:04:70:10:ae:b2:80:c9: b9:d5:df:0a:03:15:74:06:e9:06:81:94:45:3d:e4:9c:13:8c: 77:6a:d1:b4:74:d8:6b:5c:10:9d:96:12:60:42:fe:a7:1b:41: 8d:66:68:a9:7d:0e:a9:7b:01:6f:b8:9d:b6:e4:57:fe:50:c4: aa:5c:4f:cf:b9:b2:79:69:4e:f5:34:88:f5:dc:1a:50:60:f1: 2c:ee:11:be:12:12:a2:14:23:9e:ab:82:d1:11:74:fd:60:e7: 11:00:1b:a8:fd:79:b0:a6:17:ed:f4:ce:a8:3b:c1:a7:68:9e: 6a:1b:3d:a6:bb:c8:20:39:b1:ef:ef:50:cb:62:15:1e:f6:f6: dc:68:2d:34:e8:20:5e:28:03:34:24:70:43:4d:66:86:c0:1b: 9a:fe:40:98:90:ba:f4:f3:f9:60:ff:e9:75:ad:b0:20:5c:f4: 26:7a:86:70:68:48:69:02:c3:40:69:e8:e9:aa:f2:8f:30:9e: 5b:a3:18:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdbnxojXZC51ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MGIwMTE3MzEtMzNjNS00MTllLTg2ODktYjE2ZmRlNjcwMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTBg/5xyMBjAarC2t0tORU7yPyVeddkX4uHp a0PAs/8v1Y3MjvksM09ReV1wwsNmc0XPazmrcjhA1K/I8BjTNHvye8PxiZDn1U8O ZXy7hjhLhOjzUMLev1EGJ51VelF87gCef6sUjk8eJ9SXEwWeb1qFTE6FcNIrp/tL B+9bIlNXtX+V6FNmPxqv8gQnzG3BgFX3d0anM2Unc7f855Sxq1h7UlYW8b3MW4kx 5XRViEqfRDj6boDrjbf3TSrC68PjeAH6ZRTGyd4xd9tGbprSQo/HcpsXjDzCzBgg QJZzKC56uHoTeWySwRmW1tQ+AdaZQFIUF+EdehCa00O4dvz3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK8802HFOdd28HnAEik7HuwXUImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk4ZjUxYTktMWE2ZC0z N2UzLTg1NDgtMTExOWU2ZWYzYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7xizKLcb2GlZV2IZ4wkTQjLVM3KljG3zHH8q6UN4SEew5ZmHbmZ6O4 GI/9DiKiFDDo2vws6mwNxOyQaM6uTGpoBHAQrrKAybnV3woDFXQG6QaBlEU95JwT jHdq0bR02GtcEJ2WEmBC/qcbQY1maKl9Dql7AW+4nbbkV/5QxKpcT8+5snlpTvU0 iPXcGlBg8SzuEb4SEqIUI56rgtERdP1g5xEAG6j9ebCmF+30zqg7wadonmobPaa7 yCA5se/vUMtiFR729txoLTToIF4oAzQkcENNZobAG5r+QJiQuvTz+WD/6XWtsCBc 9CZ6hnBoSGkCw0Bp6Omq8o8wnlujGEw= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:18 2025 by rpki-client