$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa File: a409e585-8d9e-38d9-9ed4-2981a1968af3.roa (raw, json) Hash identifier: V6sdZ9F00518DniDoFLk+3QsRNcWVkDnI7UgDEQIGZE= Subject key identifier: 2C:BA:86:A0:72:21:88:6F:48:B9:FD:A0:E4:39:14:2D:99:D1:BE:27 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EAE418DA99F29C7C3340 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ea:e4:18:da:99:f2:9c:7c:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=0ffb0a8a-050e-43e6-9fd9-c7916b8afc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0e:f3:2f:81:b9:73:6a:44:56:45:db:3d:8a: fc:20:29:40:f4:d9:c0:0d:56:6b:97:18:e3:5c:54: 5e:a6:ea:e6:75:ba:27:40:1f:24:e7:55:fa:9b:5a: e9:ed:9d:10:77:8f:30:ce:c5:54:e0:60:c6:3c:be: e1:7f:1f:10:76:76:64:de:7f:18:3c:8e:fb:62:6f: 4a:61:64:55:af:cf:0c:f0:42:7e:06:b1:51:e5:6b: 89:67:21:a5:2f:a2:91:16:44:44:93:af:52:81:b7: a1:1c:03:ba:a3:2d:c5:22:a7:e0:84:7e:6b:dc:77: a3:5c:a2:ae:59:e8:9a:f9:76:23:00:be:0d:6c:ad: 41:24:cc:1d:bd:58:98:48:da:7f:95:f1:ed:d6:ff: 9e:97:cd:e2:b6:2d:95:a3:46:68:6e:b3:99:7e:34: ea:63:06:a9:31:11:46:27:ae:a4:89:18:98:c8:47: 00:68:8d:78:1a:23:23:48:1d:c2:1e:f3:f1:82:9f: df:77:2f:c2:c8:69:6f:48:37:1f:26:55:b7:02:8b: ff:82:89:86:2a:63:32:cd:17:3c:99:0b:59:f4:7d: 37:e3:b6:b7:17:0a:da:f9:a7:fa:09:cf:e0:37:4b: 0f:59:e2:93:9d:c8:c9:be:a8:fb:24:75:72:2e:ae: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:86:A0:72:21:88:6F:48:B9:FD:A0:E4:39:14:2D:99:D1:BE:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d2:80:60:73:ed:c2:50:3e:36:57:bd:3c:e7:ce:0f:08:36: f9:d3:ad:34:1a:26:d3:58:80:d1:32:4b:3d:ff:d8:d7:1f:ea: cc:c3:b6:9b:e5:c1:bc:b3:6f:f8:fb:05:5a:87:88:ef:c7:e9: 67:4c:40:a2:59:44:50:1d:8a:ee:41:a4:5b:f4:57:66:35:82: 0a:be:9f:6f:bd:69:de:f0:d9:b4:a7:07:04:1e:db:e6:30:b0: 4a:93:10:10:bd:21:37:15:62:33:ff:8b:b8:f0:9c:a8:19:04: 7f:09:af:73:d6:5f:88:39:63:60:af:59:d4:92:41:ea:15:2c: bf:30:44:29:5a:76:6f:a5:98:95:0e:2d:de:3c:a7:7b:d0:4b: db:26:38:5f:08:67:c5:b4:5a:17:64:8a:eb:59:0e:86:af:25: df:92:1a:c8:8e:af:b2:91:4f:2e:39:79:e7:a1:4d:92:d4:bf: 61:85:1c:59:e4:4c:c5:8a:bd:3f:40:e8:3c:75:6d:63:1f:08: 2c:fe:dd:57:7e:a6:dd:aa:35:00:76:8c:f0:27:27:54:5a:f7: bd:f4:6d:00:87:34:71:94:57:5e:58:34:e0:81:6c:8e:fb:14: c5:02:7e:f4:39:ba:78:73:79:6f:8d:8b:92:8b:ee:07:a2:42: ec:b9:3d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQerkGNqZ8px8M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MGZmYjBhOGEtMDUwZS00M2U2LTlmZDktYzc5MTZiOGFmYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ7zL4G5c2pEVkXbPYr8IClA9NnADVZrlxjj XFRepurmdbonQB8k51X6m1rp7Z0Qd48wzsVU4GDGPL7hfx8QdnZk3n8YPI77Ym9K YWRVr88M8EJ+BrFR5WuJZyGlL6KRFkREk69SgbehHAO6oy3FIqfghH5r3HejXKKu Weia+XYjAL4NbK1BJMwdvViYSNp/lfHt1v+el83iti2Vo0ZobrOZfjTqYwapMRFG J66kiRiYyEcAaI14GiMjSB3CHvPxgp/fdy/CyGlvSDcfJlW3Aov/gomGKmMyzRc8 mQtZ9H0347a3Fwra+af6Cc/gN0sPWeKTncjJvqj7JHVyLq48vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy6hqByIYhvSLn9oOQ5FC2Z0b4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTQwOWU1ODUtOGQ5ZS0z OGQ5LTllZDQtMjk4MWExOTY4YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrSgGBz7cJQPjZXvTznzg8INvnTrTQaJtNYgNEySz3/2Ncf6szDtpvl wbyzb/j7BVqHiO/H6WdMQKJZRFAdiu5BpFv0V2Y1ggq+n2+9ad7w2bSnBwQe2+Yw sEqTEBC9ITcVYjP/i7jwnKgZBH8Jr3PWX4g5Y2CvWdSSQeoVLL8wRCladm+lmJUO Ld48p3vQS9smOF8IZ8W0WhdkiutZDoavJd+SGsiOr7KRTy45eeehTZLUv2GFHFnk TMWKvT9A6Dx1bWMfCCz+3Vd+pt2qNQB2jPAnJ1Ra9730bQCHNHGUV15YNOCBbI77 FMUCfvQ5unhzeW+Ni5KL7geiQuy5PWQ= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:15 2025 by rpki-client