$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b24159f5-3ffa-3dcf-8556-c224db0c000c.roa File: b24159f5-3ffa-3dcf-8556-c224db0c000c.roa (raw, json) Hash identifier: fzWnGHVIYblS3eAOxImdfMNhJKdDa5TlUGN7Okiv0pc= Subject key identifier: FC:43:88:B9:0B:10:B6:E6:0D:90:C7:6D:93:FD:91:AB:6A:BF:36:FE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C9578CBFDBD2E15421480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b24159f5-3ffa-3dcf-8556-c224db0c000c.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:95:78:cb:fd:bd:2e:15:42:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=d00694f6-1945-4e36-8292-e0cc23f32bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:f9:28:06:31:2d:6c:cd:1c:37:66:d6:fb: b1:6a:d9:2d:1a:0a:d2:64:be:8f:22:c9:68:bf:ee: ae:9d:a9:36:ae:7b:05:af:1b:c9:a5:f0:73:0f:de: 66:ce:cc:9a:10:da:22:8e:dc:23:38:4c:c3:d6:5b: 23:b4:4b:1e:7c:5f:cc:75:30:2e:84:9a:f2:04:59: b6:52:9d:7b:1d:b4:a0:d6:74:fa:c1:c1:54:c0:78: 6e:31:37:6f:6f:e8:18:31:c8:6e:53:75:eb:5d:d7: a1:21:da:41:7d:c0:2c:d4:fb:85:2f:77:97:e6:6e: c2:33:c8:df:08:08:8c:66:25:6b:e9:90:ce:55:11: 3f:b1:d4:0b:a8:d9:b6:a0:d3:24:ef:87:6b:7f:13: f6:5f:cc:f0:a8:c0:a1:70:ea:64:c3:67:dc:32:0a: 66:86:1e:74:23:08:ca:1f:d4:4a:3e:0c:31:6c:19: 0c:18:d2:fa:6c:0c:37:e7:78:26:2c:82:23:c7:71: af:2b:d7:4f:b5:e9:10:fd:bc:5f:cb:12:e2:b5:08: ea:91:94:f3:b3:85:92:7a:de:90:1f:15:7a:9a:df: 5d:2a:1b:02:87:3a:cb:21:19:c0:a7:2c:bf:1a:5e: d1:24:95:6f:76:af:83:cf:b4:61:01:e5:0e:10:b4: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:88:B9:0B:10:B6:E6:0D:90:C7:6D:93:FD:91:AB:6A:BF:36:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b24159f5-3ffa-3dcf-8556-c224db0c000c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5c:03:7d:28:22:77:4e:cc:4f:c2:d8:66:f5:d2:5c:da:74: d0:41:85:3b:1f:87:5a:fe:49:dc:aa:3a:7e:cb:cc:2e:d5:02: 99:6a:9a:c7:55:eb:51:d3:f5:e5:dc:b2:82:5e:44:e6:f2:29: 98:fb:41:fa:73:89:a1:f7:b0:a1:9a:f7:b9:7f:91:d7:12:bf: 72:79:8d:95:f2:b4:52:aa:e6:86:39:38:0f:3c:e6:7b:a6:df: e9:4f:54:d4:86:13:87:df:f7:2f:a6:86:a1:44:8b:bf:26:18: 95:4d:af:8f:9b:9f:1b:d9:b7:1a:39:36:b7:0a:aa:38:d3:e1: f3:37:ba:4e:a3:c9:10:03:0f:48:db:8f:0c:71:a4:fd:58:9e: 33:3c:25:64:84:63:d6:2c:fc:0d:c2:b5:44:25:bd:18:c4:09: 98:e8:d9:d6:96:45:15:12:28:4d:ee:f9:d3:b2:05:c8:9b:23: 33:9f:4a:34:07:d7:c2:f7:7c:2c:05:5d:d9:b9:21:0d:c2:24: da:5e:ec:df:d2:f3:9e:0b:8e:ef:3d:2e:71:c6:f0:b4:07:49: f6:c7:38:42:f0:c5:41:47:82:fe:1a:36:6e:1c:5d:5a:68:b6: 22:50:84:54:e9:9a:e5:09:07:76:5f:8a:9e:16:03:b7:6c:c5: 7f:eb:69:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJV4y/29LhVCFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDAwNjk0ZjYtMTk0NS00ZTM2LTgyOTItZTBjYzIzZjMyYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cb5KAYxLWzNHDdm1vuxatktGgrSZL6PIslo v+6unak2rnsFrxvJpfBzD95mzsyaENoijtwjOEzD1lsjtEsefF/MdTAuhJryBFm2 Up17HbSg1nT6wcFUwHhuMTdvb+gYMchuU3XrXdehIdpBfcAs1PuFL3eX5m7CM8jf CAiMZiVr6ZDOVRE/sdQLqNm2oNMk74drfxP2X8zwqMChcOpkw2fcMgpmhh50IwjK H9RKPgwxbBkMGNL6bAw353gmLIIjx3GvK9dPtekQ/bxfyxLitQjqkZTzs4WSet6Q HxV6mt9dKhsChzrLIRnApyy/Gl7RJJVvdq+Dz7RhAeUOELRWuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxDiLkLELbmDZDHbZP9katqvzb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjI0MTU5ZjUtM2ZmYS0z ZGNmLTg1NTYtYzIyNGRiMGMwMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlcA30oIndOzE/C2Gb10lzadNBBhTsfh1r+SdyqOn7LzC7VAplqmsdV 61HT9eXcsoJeRObyKZj7QfpziaH3sKGa97l/kdcSv3J5jZXytFKq5oY5OA885num 3+lPVNSGE4ff9y+mhqFEi78mGJVNr4+bnxvZtxo5NrcKqjjT4fM3uk6jyRADD0jb jwxxpP1YnjM8JWSEY9Ys/A3CtUQlvRjECZjo2daWRRUSKE3u+dOyBcibIzOfSjQH 18L3fCwFXdm5IQ3CJNpe7N/S854Lju89LnHG8LQHSfbHOELwxUFHgv4aNm4cXVpo tiJQhFTpmuUJB3Zfip4WA7dsxX/raQs= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:33 2025 by rpki-client