$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa File: b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa (raw, json) Hash identifier: WVgfNZq2C2eNYfedz9om3mo7PrL1X3zLeIH6oAlle0E= Subject key identifier: B4:0F:B4:A0:8F:22:EA:E8:04:1A:71:B1:60:64:95:63:37:8C:5E:C6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C80BF357D459867CB3120 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:80:bf:35:7d:45:98:67:cb:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=2747648c-2a7f-42fd-94fb-3fae0a24a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:fe:00:cb:d3:b8:b0:cf:13:d2:36:0c:0a: 55:7a:b1:c9:57:20:14:32:ce:65:3f:59:6b:ea:96: 40:91:86:40:27:d5:5f:95:22:72:61:ae:c2:6f:95: 30:3e:4f:b8:6a:1a:56:e4:54:4f:68:a2:e4:c0:2e: 45:3a:6b:ef:cc:67:29:04:82:c5:57:c1:ab:22:f5: cf:bb:7e:9f:bc:2a:f9:34:c9:12:fc:af:10:ac:81: a2:4c:cb:dc:77:dc:68:6c:17:8d:55:57:26:71:7c: 25:ff:57:51:58:84:f6:29:ae:b5:e3:ee:b3:4c:29: c7:de:79:21:50:eb:24:e3:2e:5f:b8:a7:2e:07:9a: 2e:33:95:50:7b:3f:20:28:7f:57:30:d5:b7:8a:cb: 94:13:cf:ac:f4:11:3b:17:42:0c:b7:a6:46:32:b3: 18:49:c6:d8:91:80:a7:e1:f6:54:85:4d:ec:9f:84: 88:80:75:2b:1f:a5:aa:7c:3c:f1:20:d7:b6:dc:d9: d4:65:98:9c:e1:5d:3d:1e:f7:bd:19:84:a4:d8:95: f2:94:85:2b:e1:ad:49:a0:02:f5:30:af:27:40:a9: ee:45:4b:bb:90:55:41:fa:1a:a3:d4:51:9c:d6:5a: 19:7f:31:70:67:6a:6c:f4:c0:78:96:58:cd:2d:1e: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0F:B4:A0:8F:22:EA:E8:04:1A:71:B1:60:64:95:63:37:8C:5E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c8:0f:00:f6:e5:c7:d8:a8:87:f8:30:31:f9:23:ac:bd:df: 0f:bf:05:66:bf:0e:28:d9:41:cc:9e:9f:e4:a0:41:97:3b:04: 94:b2:ff:72:43:89:32:a5:e4:8f:7e:c8:21:1c:e4:8e:9f:82: 2f:ad:e0:1b:b1:ce:50:f9:f0:c6:45:1d:63:31:f3:15:b3:0f: 97:3a:9f:58:e6:f1:5c:c3:00:53:cf:9d:c3:93:88:bd:ee:66: 2e:20:55:69:3a:d9:c8:f8:ce:d8:43:ad:0e:47:75:e6:a7:7a: b3:49:24:dd:0d:fa:43:cb:fb:17:f2:9b:4f:96:54:c1:89:7c: 2c:b9:b7:cd:3c:ce:00:d4:e2:94:74:62:98:7f:40:8e:c7:bc: a6:96:66:9f:5a:ed:74:74:30:12:5a:81:3c:b5:76:d5:7c:0c: 45:d7:54:76:b0:a3:9a:50:09:19:2a:81:03:7a:c7:36:b6:06: bf:66:12:75:90:da:c3:35:46:8f:4e:f9:22:76:a1:58:f9:b5: 80:92:8c:2f:e9:01:97:6d:31:15:60:b6:b1:04:ec:0b:08:37: 18:9a:b7:2b:41:08:25:c3:9b:e9:fe:f1:1c:43:6f:3e:75:0c: 9e:a9:0d:bd:ca:bc:bd:20:05:a0:04:dc:a3:2a:37:61:f6:a3: 6c:5c:3a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIC/NX1FmGfLMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk Mjc0NzY0OGMtMmE3Zi00MmZkLTk0ZmItM2ZhZTBhMjRhMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN/+AMvTuLDPE9I2DApVerHJVyAUMs5lP1lr 6pZAkYZAJ9VflSJyYa7Cb5UwPk+4ahpW5FRPaKLkwC5FOmvvzGcpBILFV8GrIvXP u36fvCr5NMkS/K8QrIGiTMvcd9xobBeNVVcmcXwl/1dRWIT2Ka614+6zTCnH3nkh UOsk4y5fuKcuB5ouM5VQez8gKH9XMNW3isuUE8+s9BE7F0IMt6ZGMrMYScbYkYCn 4fZUhU3sn4SIgHUrH6WqfDzxINe23NnUZZic4V09Hve9GYSk2JXylIUr4a1JoAL1 MK8nQKnuRUu7kFVB+hqj1FGc1loZfzFwZ2ps9MB4lljNLR5XSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQPtKCPIuroBBpxsWBklWM3jF7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjQwMGZlMGMtNDYwZi0z NzE4LTgyNjEtNmUyYzU1ZjNlYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3IDwD25cfYqIf4MDH5I6y93w+/BWa/DijZQcyen+SgQZc7BJSy/3JD iTKl5I9+yCEc5I6fgi+t4BuxzlD58MZFHWMx8xWzD5c6n1jm8VzDAFPPncOTiL3u Zi4gVWk62cj4zthDrQ5HdeanerNJJN0N+kPL+xfym0+WVMGJfCy5t808zgDU4pR0 Yph/QI7HvKaWZp9a7XR0MBJagTy1dtV8DEXXVHawo5pQCRkqgQN6xza2Br9mEnWQ 2sM1Ro9O+SJ2oVj5tYCSjC/pAZdtMRVgtrEE7AsINxiatytBCCXDm+n+8RxDbz51 DJ6pDb3KvL0gBaAE3KMqN2H2o2xcOgA= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:31 2025 by rpki-client