$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b19e5abc-4156-398c-913a-e0b74c1b1abe.roa File: b19e5abc-4156-398c-913a-e0b74c1b1abe.roa (raw, json) Hash identifier: 2ZPW7cLaZE8OF055sBVaUBDmDFPXRMqgA8FuHs6lfUU= Subject key identifier: 33:0D:AE:4E:98:01:AE:32:40:DA:FD:67:0B:CB:8D:1F:98:7D:9D:33 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D95DABCD6FED3E3BA480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b19e5abc-4156-398c-913a-e0b74c1b1abe.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d9:5d:ab:cd:6f:ed:3e:3b:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=3db87cef-0919-4cab-80ec-d00528acfc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:fb:cc:b4:f8:36:9b:7e:ee:eb:c5:d7:e0: 79:c4:ff:33:e5:60:e7:ec:ac:87:d5:cd:16:9f:81: 46:d5:03:8c:60:03:af:ce:a7:b5:1f:74:38:63:db: 0d:34:e3:4e:b5:86:ca:05:ac:9c:6b:ad:70:c5:a2: bc:0f:1e:28:5b:4e:e9:81:f0:12:7c:7a:cc:92:10: 8c:bf:df:29:a3:75:15:e1:e6:6c:cd:bf:84:53:b8: 34:6b:17:41:1b:0d:8a:2b:ca:7d:da:e7:02:b1:85: 2e:a0:a9:94:1b:13:09:3c:f9:ea:45:30:59:78:66: 26:3f:3d:ad:c4:74:38:4a:9d:7b:2b:c7:34:fc:04: 01:1b:8f:d8:f6:a5:8b:58:ae:ee:41:42:27:f6:bc: 4a:ca:60:cf:ce:a2:86:ac:92:c6:1c:6d:e8:d2:75: 6f:5d:ae:ba:71:6a:57:83:45:52:21:1c:2e:80:63: c1:36:c2:69:d9:48:6d:f5:4d:b0:b4:7f:54:60:1c: 4c:90:41:87:a7:cf:49:29:e7:0b:82:7d:f8:30:bd: 88:bf:73:85:81:74:56:48:1f:71:a2:c2:8f:2d:61: 09:d4:5d:e9:dc:3c:5b:ac:da:cd:f4:62:81:0d:48: eb:5e:9f:af:4a:e9:0d:31:8c:7a:66:f7:66:e1:63: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:AE:4E:98:01:AE:32:40:DA:FD:67:0B:CB:8D:1F:98:7D:9D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b19e5abc-4156-398c-913a-e0b74c1b1abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:60:4a:6a:16:b7:0b:e7:80:42:11:9d:42:62:f9:87:8c:e1: 65:42:ff:77:56:4c:e1:cc:9d:33:56:44:07:ca:06:e9:06:aa: 38:04:4e:b2:11:e0:30:10:d2:43:5f:0c:34:13:81:86:bf:94: bd:7b:a4:07:24:2f:ae:e2:3b:f7:cd:32:d9:20:1f:81:cc:0a: a5:fc:78:00:97:bc:5e:a4:4e:7d:66:91:bc:38:44:ac:d2:81: b0:61:82:10:32:a0:94:b8:7a:05:3f:b7:c4:d4:36:ea:ec:c6: d8:2c:53:62:3e:a8:f9:36:63:bd:45:7e:55:2e:4f:aa:ae:c4: e5:db:bc:7a:5f:9e:13:cd:e4:9c:6b:43:2d:2c:b1:b6:be:68: 81:66:fe:48:db:43:70:91:49:b1:34:51:2a:89:38:97:bb:aa: 31:d5:2e:a2:49:7c:11:dd:77:74:67:9b:e0:38:42:08:16:94: 1b:1c:56:46:3c:b2:d5:d8:15:e1:1f:a7:96:d0:60:dd:69:d3: 59:e0:bb:3f:bd:5e:32:c7:1a:e0:f4:4e:07:93:57:05:65:d8: aa:4b:ac:ed:e7:85:9a:5d:55:8b:26:f2:c6:6f:7f:91:2b:85: d5:1e:34:e6:3e:94:14:62:b4:1e:e7:6f:ee:72:82:02:52:8c: 92:6f:be:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdldq81v7T47pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk M2RiODdjZWYtMDkxOS00Y2FiLTgwZWMtZDAwNTI4YWNmYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFX7zLT4Npt+7uvF1+B5xP8z5WDn7KyH1c0W n4FG1QOMYAOvzqe1H3Q4Y9sNNONOtYbKBayca61wxaK8Dx4oW07pgfASfHrMkhCM v98po3UV4eZszb+EU7g0axdBGw2KK8p92ucCsYUuoKmUGxMJPPnqRTBZeGYmPz2t xHQ4Sp17K8c0/AQBG4/Y9qWLWK7uQUIn9rxKymDPzqKGrJLGHG3o0nVvXa66cWpX g0VSIRwugGPBNsJp2Uht9U2wtH9UYBxMkEGHp89JKecLgn34ML2Iv3OFgXRWSB9x osKPLWEJ1F3p3DxbrNrN9GKBDUjrXp+vSukNMYx6Zvdm4WP/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMNrk6YAa4yQNr9ZwvLjR+YfZ0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjE5ZTVhYmMtNDE1Ni0z OThjLTkxM2EtZTBiNzRjMWIxYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZgSmoWtwvngEIRnUJi+YeM4WVC/3dWTOHMnTNWRAfKBukGqjgETrIR 4DAQ0kNfDDQTgYa/lL17pAckL67iO/fNMtkgH4HMCqX8eACXvF6kTn1mkbw4RKzS gbBhghAyoJS4egU/t8TUNursxtgsU2I+qPk2Y71FflUuT6quxOXbvHpfnhPN5Jxr Qy0ssba+aIFm/kjbQ3CRSbE0USqJOJe7qjHVLqJJfBHdd3Rnm+A4QggWlBscVkY8 stXYFeEfp5bQYN1p01nguz+9XjLHGuD0TgeTVwVl2KpLrO3nhZpdVYsm8sZvf5Er hdUeNOY+lBRitB7nb+5yggJSjJJvvrA= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:08 2025 by rpki-client