$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa File: ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa (raw, json) Hash identifier: UM/KRsOSS5YunbGY6rEgcSW7xn43ex+f0ZrjP5Niiu0= Subject key identifier: 76:CA:44:1C:D3:2E:1D:48:F5:6D:D1:E1:DC:E9:87:71:B3:AB:FF:98 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D6978B4E9BA3B84F0D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d6:97:8b:4e:9b:a3:b8:4f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=0365ecb5-8e5d-481e-a048-3bc11f883ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:c5:a7:d0:db:a8:b6:d1:de:7f:de:74:52:a9: 52:87:7f:44:65:bf:e1:ab:05:db:c3:7e:1f:69:6a: 06:c6:9f:12:b2:63:72:c3:16:a8:93:71:23:01:d5: 8b:5e:2c:f9:ab:df:78:a8:02:51:00:5e:0e:92:c1: 44:5d:12:1b:ed:06:15:5e:e8:10:51:f4:c0:75:75: 7c:35:de:07:94:42:9d:89:44:4b:f2:76:f6:b5:9d: 19:81:24:9b:dc:01:43:da:0e:98:81:3e:e4:07:0f: cf:cf:16:73:5d:15:05:15:1f:80:66:5b:fa:40:04: 5d:ba:df:f8:61:d0:b4:85:98:b7:22:66:d7:aa:e9: ae:7a:48:24:18:c5:48:1b:aa:97:b0:18:ee:9f:bf: de:78:b2:79:a5:f6:6e:92:df:10:76:98:8d:a8:39: 90:3c:05:b2:21:1f:18:18:25:7b:a3:5f:fc:09:a5: 06:99:48:b8:3e:6e:f9:a3:46:37:1c:f7:44:84:c2: 94:cd:65:48:df:71:30:65:0e:5c:5c:62:d3:5a:01: b1:e8:df:98:0e:dd:7b:46:42:95:13:8b:c1:be:fd: a4:d1:04:35:51:77:a5:88:f2:58:4d:14:d7:1d:b6: 82:e0:b3:c8:2f:75:a7:c6:51:f4:c5:cd:c0:e1:ad: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:44:1C:D3:2E:1D:48:F5:6D:D1:E1:DC:E9:87:71:B3:AB:FF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c7:17:b8:4a:d6:63:20:37:06:eb:0c:32:51:bd:ca:f4:13: 28:38:63:a6:91:e2:a0:a4:2c:12:a5:c7:c6:0f:83:8a:70:ba: 45:b9:91:e2:51:3d:b9:99:57:b1:19:8d:1f:40:ea:e6:df:95: cc:4d:90:c6:7a:2b:d5:67:4a:5c:5a:c8:22:3d:74:50:2e:9e: 83:2e:87:5f:14:39:99:83:f8:64:4b:92:45:b2:b4:ce:05:6a: 2a:28:9a:2b:8c:81:c0:31:c2:9d:16:5e:18:00:f3:83:f9:e7: 8e:e1:a6:c1:f5:f4:fc:96:bd:a8:7d:fb:0c:ee:87:34:86:1a: 4c:65:a2:ac:27:1e:7a:61:d8:3e:76:66:80:cc:98:85:d3:a6: 05:f5:be:5c:33:73:9d:21:41:5e:8e:aa:5b:96:6d:f3:ea:00: e0:81:a8:31:62:78:05:e6:64:88:40:33:a6:c8:95:60:3b:25: 71:e5:93:e6:01:e5:ec:fe:7b:50:29:a0:b0:45:3a:40:50:51: 17:b6:7b:d5:e5:3d:97:19:ce:c7:6f:3a:59:45:a8:3a:27:f4: 9d:04:2f:10:00:d5:4c:ce:81:b0:e1:cb:88:97:8d:a9:cb:c9: f2:3a:4f:96:bd:a3:d4:9d:8d:e3:12:52:f8:e6:fe:0c:b4:a3: 2f:fe:54:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdaXi06bo7hPDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MDM2NWVjYjUtOGU1ZC00ODFlLWEwNDgtM2JjMTFmODgzYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/MWn0NuottHef950UqlSh39EZb/hqwXbw34f aWoGxp8SsmNywxaok3EjAdWLXiz5q994qAJRAF4OksFEXRIb7QYVXugQUfTAdXV8 Nd4HlEKdiURL8nb2tZ0ZgSSb3AFD2g6YgT7kBw/PzxZzXRUFFR+AZlv6QARdut/4 YdC0hZi3ImbXqumuekgkGMVIG6qXsBjun7/eeLJ5pfZukt8QdpiNqDmQPAWyIR8Y GCV7o1/8CaUGmUi4Pm75o0Y3HPdEhMKUzWVI33EwZQ5cXGLTWgGx6N+YDt17RkKV E4vBvv2k0QQ1UXeliPJYTRTXHbaC4LPIL3WnxlH0xc3A4a1ddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbKRBzTLh1I9W3R4dzph3Gzq/+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmEwNmM5YjctNTdkZC0z ODI4LThkNDEtYzk3ZjA0NDBkNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADHF7hK1mMgNwbrDDJRvcr0Eyg4Y6aR4qCkLBKlx8YPg4pwukW5keJR PbmZV7EZjR9A6ubflcxNkMZ6K9VnSlxayCI9dFAunoMuh18UOZmD+GRLkkWytM4F aioomiuMgcAxwp0WXhgA84P5547hpsH19PyWvah9+wzuhzSGGkxloqwnHnph2D52 ZoDMmIXTpgX1vlwzc50hQV6OqluWbfPqAOCBqDFieAXmZIhAM6bIlWA7JXHlk+YB 5ez+e1ApoLBFOkBQURe2e9XlPZcZzsdvOllFqDon9J0ELxAA1UzOgbDhy4iXjanL yfI6T5a9o9SdjeMSUvjm/gy0oy/+VAc= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:36 2025 by rpki-client