$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa File: ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa (raw, json) Hash identifier: YCwi0ohxORUSYPELNKOxqkXD0+o4dDa2bRDMoUfmooU= Subject key identifier: BC:46:F2:12:A4:62:7A:93:50:88:B1:40:7B:68:16:1E:85:DD:FD:D2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E77428E14CB1585A2FAB900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:42:8e:14:cb:15:85:a2:fa:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=78fc02b1-5727-450f-a48a-2ca9b737b433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:e1:df:da:3d:31:aa:58:20:7b:3f:1a:6b: 91:29:cf:de:42:63:02:e0:f6:33:32:b1:62:ae:d0: cf:75:49:dd:9a:35:ad:ae:4d:d6:fa:2f:b1:62:f4: 05:d8:b9:40:a5:91:0b:c9:75:2b:ae:ae:43:d4:08: bf:6f:b0:8a:21:19:ef:b9:b3:0d:40:ef:e9:fc:d8: 74:15:0c:b2:c0:be:2d:61:aa:34:05:da:09:fc:e8: a7:1b:e1:28:fb:eb:cb:8f:a5:6c:1e:fa:04:ae:c1: 34:ac:38:9c:d1:ac:6e:5e:f7:bf:50:21:d1:5c:bc: 9d:fd:cd:4a:6a:5b:56:8f:6d:03:98:81:48:eb:d5: 39:f5:5a:64:e0:60:1d:f6:c5:22:fb:e8:25:a5:86: 59:bf:50:f2:49:05:65:ce:bd:25:0b:61:9f:32:97: f4:12:43:b0:15:df:fd:b8:4f:69:47:b1:f1:e8:c4: aa:19:a1:aa:59:f7:76:78:81:f5:18:cf:3e:8a:d0: c1:a7:b0:a8:6c:72:05:d9:5a:da:fb:44:29:91:3a: 23:2f:a3:17:9a:51:0e:ae:0c:f4:50:7f:2c:76:d4: ed:1e:53:aa:32:52:86:fa:fc:77:4b:de:79:04:04: ed:b6:02:98:29:78:59:b5:63:cb:7a:da:4a:63:79: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:F2:12:A4:62:7A:93:50:88:B1:40:7B:68:16:1E:85:DD:FD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:bf:b1:f4:b7:6d:25:f0:52:2d:b6:76:74:e2:33:2b:c8:03: 75:c8:4b:70:cf:dc:d1:36:fe:06:3b:d3:d8:34:6e:02:28:ee: 90:76:97:69:e0:8d:db:f9:11:83:9d:9f:93:e5:97:52:1b:b3: e4:01:8a:34:5c:ab:12:7f:89:2a:c2:01:25:30:59:3d:8a:91: 12:28:ff:ad:90:a8:dd:67:31:69:1b:c0:23:fa:69:c0:0c:fc: d5:1a:3c:2d:41:d4:de:2d:71:0b:74:16:7d:b5:b6:3f:69:80: c6:95:0e:7d:a8:fb:7c:fd:59:f8:99:6c:f0:85:56:1a:04:33: 68:08:ab:e7:5b:50:e9:9f:49:c0:b9:a3:d1:34:7c:a1:95:f4: c7:ba:f8:cf:55:fe:51:40:64:8a:67:ee:dc:e7:36:06:3f:6a: 6a:8b:dc:b3:fc:fc:29:2d:37:4d:60:f7:b0:85:58:a7:c8:66: c5:25:bd:a3:44:63:a0:e3:da:9c:bd:28:b6:60:f4:15:8e:90: 6b:a9:cc:96:b0:57:99:bf:99:02:35:bd:0f:18:cb:0a:f8:63: f1:e3:a0:38:8f:10:a9:be:01:a4:f8:6f:23:8d:d8:71:d7:15: fc:f5:96:d7:50:fc:b5:b4:2f:61:2a:f6:bc:2e:f5:1e:41:fa: 1a:9d:13:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0KOFMsVhaL6uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NzhmYzAyYjEtNTcyNy00NTBmLWE0OGEtMmNhOWI3MzdiNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHLh39o9MapYIHs/GmuRKc/eQmMC4PYzMrFi rtDPdUndmjWtrk3W+i+xYvQF2LlApZELyXUrrq5D1Ai/b7CKIRnvubMNQO/p/Nh0 FQyywL4tYao0BdoJ/OinG+Eo++vLj6VsHvoErsE0rDic0axuXve/UCHRXLyd/c1K altWj20DmIFI69U59Vpk4GAd9sUi++glpYZZv1DySQVlzr0lC2GfMpf0EkOwFd/9 uE9pR7Hx6MSqGaGqWfd2eIH1GM8+itDBp7CobHIF2Vra+0QpkTojL6MXmlEOrgz0 UH8sdtTtHlOqMlKG+vx3S955BATttgKYKXhZtWPLetpKY3kg6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxG8hKkYnqTUIixQHtoFh6F3f3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWI4NDQ5ZjktMWY1Ni0z MDMxLWFlYzctZDIzYjAwOGU2YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC/sfS3bSXwUi22dnTiMyvIA3XIS3DP3NE2/gY709g0bgIo7pB2l2ng jdv5EYOdn5Pll1Ibs+QBijRcqxJ/iSrCASUwWT2KkRIo/62QqN1nMWkbwCP6acAM /NUaPC1B1N4tcQt0Fn21tj9pgMaVDn2o+3z9WfiZbPCFVhoEM2gIq+dbUOmfScC5 o9E0fKGV9Me6+M9V/lFAZIpn7tznNgY/amqL3LP8/CktN01g97CFWKfIZsUlvaNE Y6Dj2py9KLZg9BWOkGupzJawV5m/mQI1vQ8Yywr4Y/HjoDiPEKm+AaT4byON2HHX Ffz1ltdQ/LW0L2Eq9rwu9R5B+hqdE98= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:25 2025 by rpki-client