$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa File: a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa (raw, json) Hash identifier: Tg574P9qJDQLGfO4NFxIDZ5HATBbeC0b134Z+fhSCeQ= Subject key identifier: 32:FD:6B:8C:08:64:3A:B9:F0:5D:EE:D5:00:3F:78:D6:6A:EA:24:67 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F373438E2277DEEEE6B7700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36411 IP address blocks: 104.135.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:34:38:e2:27:7d:ee:ee:6b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=d12b584c-6dcc-478d-acdd-3710b8105135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:52:fb:59:7d:1d:bf:d6:ad:d3:3f:d2:f5:34: 65:79:66:2e:69:48:79:11:42:1b:d9:98:52:4f:1e: 2f:c4:81:4e:95:14:15:02:a1:58:12:91:40:b5:a6: 5d:a4:74:53:8a:0c:51:a4:14:ba:d8:cd:44:b1:47: bc:fc:06:3c:05:6d:f6:27:3e:39:52:2d:67:2d:14: 92:d0:98:3c:ef:36:27:8d:f1:1e:39:eb:10:ef:ea: c2:89:35:78:51:18:db:1d:bc:35:50:8c:58:c7:3d: 32:b8:56:cb:3f:fe:6c:0e:f7:18:15:a0:35:42:32: be:07:c9:81:4c:8f:eb:88:5d:98:47:66:7d:4f:43: 01:67:ac:5e:f5:69:4b:5b:b7:83:c6:b5:a7:07:d8: f2:87:07:04:ef:70:35:19:73:12:77:02:48:74:64: 49:85:3d:1c:2e:07:75:0b:6d:7a:14:13:ec:ab:b6: 44:4a:94:17:10:a2:13:b3:e7:0e:1b:80:eb:c7:34: 5e:03:44:7d:80:7f:bb:b5:b6:6d:ae:01:d4:95:9d: d7:ae:eb:50:68:2a:48:0b:df:af:05:2f:a5:d4:b4: 5f:d6:98:79:14:2a:f9:2a:86:39:a9:16:79:26:72: 46:28:04:fa:73:2f:2f:fb:7d:1a:38:f0:01:cb:52: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:6B:8C:08:64:3A:B9:F0:5D:EE:D5:00:3F:78:D6:6A:EA:24:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:00:09:88:20:d7:6a:38:b7:b8:5e:e6:9b:3d:11:62:f3:6d: d0:f9:94:fd:8a:3b:f0:7a:85:fb:8b:46:d9:bd:d0:53:43:57: e5:e2:41:9b:43:45:a0:b5:87:e0:00:2c:7d:e7:be:49:62:e4: 00:e8:f8:28:a8:91:57:1a:85:7e:77:48:58:62:7c:34:87:df: 4f:75:29:5d:9a:3a:ce:5b:47:ba:d6:8b:10:04:e1:35:a7:ed: 82:ae:67:78:2e:b1:1a:6d:dc:c7:44:f1:fd:99:cf:0c:0b:bd: 6f:c7:9d:82:45:12:c8:c7:41:82:1a:67:66:5e:5e:99:5b:5c: cd:11:7e:c8:a1:6c:8f:09:04:6a:a1:7c:38:f0:e3:67:ce:7c: 78:7e:07:b0:02:23:46:b9:24:41:39:73:b2:01:56:2a:2e:e2: 40:68:2b:18:9d:ba:7a:f5:06:e1:3a:af:5f:02:50:bb:13:15: db:b3:b9:e4:df:60:8e:c7:5c:36:a1:29:0f:f3:22:4f:3b:d6: 32:c8:44:d7:4e:f7:8c:9d:06:20:3a:36:a8:4f:d2:35:75:3b: 1a:51:af:c9:3e:04:17:c5:94:a2:7d:d7:c4:0c:f7:b2:11:bb: c8:a5:6a:98:39:94:97:6d:6b:71:91:56:85:96:84:2e:df:5e: 93:e1:a3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzQ44id97u5rdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDEyYjU4NGMtNmRjYy00NzhkLWFjZGQtMzcxMGI4MTA1MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVL7WX0dv9at0z/S9TRleWYuaUh5EUIb2ZhS Tx4vxIFOlRQVAqFYEpFAtaZdpHRTigxRpBS62M1EsUe8/AY8BW32Jz45Ui1nLRSS 0Jg87zYnjfEeOesQ7+rCiTV4URjbHbw1UIxYxz0yuFbLP/5sDvcYFaA1QjK+B8mB TI/riF2YR2Z9T0MBZ6xe9WlLW7eDxrWnB9jyhwcE73A1GXMSdwJIdGRJhT0cLgd1 C216FBPsq7ZESpQXEKITs+cOG4DrxzReA0R9gH+7tbZtrgHUlZ3XrutQaCpIC9+v BS+l1LRf1ph5FCr5KoY5qRZ5JnJGKAT6cy8v+30aOPABy1J2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL9a4wIZDq58F3u1QA/eNZq6iRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTBiOWQ3ODctOTgzZS0z MmRlLTk5ZTMtNGI3NGEyZGRkMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAACYgg12o4t7he5ps9EWLzbdD5lP2KO/B6hfuLRtm90FNDV+XiQZtD RaC1h+AALH3nvkli5ADo+CiokVcahX53SFhifDSH3091KV2aOs5bR7rWixAE4TWn 7YKuZ3gusRpt3MdE8f2ZzwwLvW/HnYJFEsjHQYIaZ2ZeXplbXM0RfsihbI8JBGqh fDjw42fOfHh+B7ACI0a5JEE5c7IBViou4kBoKxidunr1BuE6r18CULsTFduzueTf YI7HXDahKQ/zIk871jLIRNdO94ydBiA6NqhP0jV1OxpRr8k+BBfFlKJ918QM97IR u8ilapg5lJdta3GRVoWWhC7fXpPho58= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:04 2025 by rpki-client