$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac85d751-61de-387c-adbc-d4371d66866f.roa File: ac85d751-61de-387c-adbc-d4371d66866f.roa (raw, json) Hash identifier: CUrhtrY3arYzmSEa5VnR/Ul8s3A90DtZgafk5s6BQa4= Subject key identifier: 7F:5C:6E:16:AB:AA:E4:AF:46:10:91:5B:12:D5:62:26:4F:33:30:C3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EA27F74BB7E8C55983A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac85d751-61de-387c-adbc-d4371d66866f.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 104.133.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ea:27:f7:4b:b7:e8:c5:59:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=506dfa42-f5c5-4b8e-8168-3ee6b2937c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:07:89:43:4d:b1:53:1e:e3:f0:b3:96:47: 85:33:3b:c6:84:62:58:c5:78:7c:e8:df:2a:55:65: 11:7b:bd:ef:b6:a7:da:d8:9b:d7:8b:31:32:74:12: 61:c5:42:0d:b9:34:6a:79:f2:ce:e8:bf:2c:d1:71: 10:68:0b:73:b8:bd:1e:e1:7d:8f:2f:1e:90:56:75: 5c:11:c0:72:a6:ba:89:51:82:7f:20:54:31:54:b9: e3:f5:2c:f3:28:91:48:33:37:2c:19:05:b3:7c:2a: 64:d5:e3:5b:4d:a7:f3:fe:5e:ee:7b:3c:4d:4f:06: 7b:a9:23:59:59:82:cc:bf:9d:98:af:f8:3c:e6:1b: 35:4e:90:cb:f4:8e:32:25:92:b4:70:14:c5:20:78: 15:45:37:6d:dc:0d:47:7d:3c:7e:b3:29:fb:eb:65: 34:cd:4e:3d:32:85:bd:71:70:2a:af:ab:e0:49:aa: d6:4d:61:0b:54:44:73:48:3f:d9:05:96:5e:c7:cf: 11:74:0d:18:e1:f0:42:7c:77:73:10:96:1c:22:2f: c5:b8:be:72:3f:0d:e4:c4:34:8c:45:d6:23:21:e7: 93:b2:0c:bd:e5:82:68:1b:ff:eb:95:f0:b3:de:88: 40:de:fd:eb:04:48:5b:08:73:c1:0d:61:e8:59:2d: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5C:6E:16:AB:AA:E4:AF:46:10:91:5B:12:D5:62:26:4F:33:30:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac85d751-61de-387c-adbc-d4371d66866f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:4a:df:31:25:32:89:69:42:f1:e3:75:c0:4c:25:c4:69:89: c1:19:70:78:03:40:11:d4:68:cb:9c:f5:7a:54:af:26:fc:42: 96:b9:e5:b6:ed:bb:8e:b1:c2:45:01:17:36:ad:de:f7:ad:47: fb:e3:09:88:c3:2b:31:88:e0:8e:7e:81:f3:a6:f4:2a:22:2d: 5c:0b:d6:6f:f9:1b:c5:e9:74:4d:9a:11:4e:00:5d:f5:7e:00: 42:b5:bf:77:1f:64:b7:87:5b:48:44:ac:9c:fa:5c:8c:c3:3a: 9b:a2:ac:8e:e7:86:14:68:d1:f2:f0:19:85:ac:af:e4:20:27: 55:3c:b0:d8:a0:f3:86:26:a0:42:e4:17:b8:34:90:2e:86:dc: 09:f4:c6:6e:fb:ba:33:32:1f:df:ec:cf:0a:f0:5e:26:82:fb: a5:b3:18:d6:07:6f:c0:1e:e9:80:2e:be:89:27:52:e1:f5:2d: 28:1c:f7:04:13:35:92:2d:d9:59:eb:e7:e9:9f:39:fd:d0:60: 96:2b:db:b0:58:2e:68:1f:bf:29:4a:06:78:01:6c:14:4f:58: a6:bd:4d:a4:dc:30:e4:03:80:fb:5d:34:ea:3d:22:f6:80:93: 3e:25:14:29:a1:8f:c5:aa:4d:80:71:62:f1:26:60:d7:cc:13: 22:ff:a6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQeon90u36MVZg6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NTA2ZGZhNDItZjVjNS00YjhlLTgxNjgtM2VlNmIyOTM3YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQHiUNNsVMe4/CzlkeFMzvGhGJYxXh86N8q VWURe73vtqfa2JvXizEydBJhxUINuTRqefLO6L8s0XEQaAtzuL0e4X2PLx6QVnVc EcByprqJUYJ/IFQxVLnj9SzzKJFIMzcsGQWzfCpk1eNbTafz/l7uezxNTwZ7qSNZ WYLMv52Yr/g85hs1TpDL9I4yJZK0cBTFIHgVRTdt3A1HfTx+syn762U0zU49MoW9 cXAqr6vgSarWTWELVERzSD/ZBZZex88RdA0Y4fBCfHdzEJYcIi/FuL5yPw3kxDSM RdYjIeeTsgy95YJoG//rlfCz3ohA3v3rBEhbCHPBDWHoWS10jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9cbharquSvRhCRWxLVYiZPMzDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWM4NWQ3NTEtNjFkZS0z ODdjLWFkYmMtZDQzNzFkNjY4NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5K3zElMolpQvHjdcBMJcRpicEZcHgDQBHUaMuc9XpUryb8Qpa55bbt u46xwkUBFzat3vetR/vjCYjDKzGI4I5+gfOm9CoiLVwL1m/5G8XpdE2aEU4AXfV+ AEK1v3cfZLeHW0hErJz6XIzDOpuirI7nhhRo0fLwGYWsr+QgJ1U8sNig84YmoELk F7g0kC6G3An0xm77ujMyH9/szwrwXiaC+6WzGNYHb8Ae6YAuvoknUuH1LSgc9wQT NZIt2Vnr5+mfOf3QYJYr27BYLmgfvylKBngBbBRPWKa9TaTcMOQDgPtdNOo9IvaA kz4lFCmhj8WqTYBxYvEmYNfMEyL/pnI= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:14 2025 by rpki-client