$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa File: ba5383e6-ea95-3586-ab25-2ba523d21d63.roa (raw, json) Hash identifier: 5oqlRCJGkb8uKlYnjDy4R8Qs6niA1Z1DiPEpmjaGykc= Subject key identifier: 8F:64:98:21:73:B9:1B:69:25:B8:74:52:43:74:6B:51:F7:6B:9F:E0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EE0F1400F0C986B76E80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ee:0f:14:00:f0:c9:86:b7:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=ac87b223-c498-448a-95d0-13e6869a4901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:a2:54:77:e5:37:a7:41:d4:3d:1b:c3:20: 9e:cc:0d:c4:80:a8:6b:85:04:aa:ee:51:32:43:c7: f6:e0:6a:ea:84:3a:34:3d:3d:c6:12:d2:02:72:23: 39:84:22:15:e9:ac:60:5e:94:98:43:4c:59:e4:2f: 9f:7f:6a:f0:62:4d:d5:d4:2a:87:3a:e5:c8:7b:ce: 39:a5:87:db:68:47:b6:a2:59:92:89:e8:b8:19:77: f4:32:3f:e6:bc:8f:e9:80:dc:08:2e:19:09:65:52: f1:41:e3:46:ef:a4:4d:46:7b:03:b4:e2:3e:c8:92: 00:5a:64:94:be:1e:c7:fb:05:27:6e:1a:88:a9:80: 50:70:ca:a2:20:b3:e0:55:54:d7:6a:0a:9b:fa:aa: 40:89:ed:60:69:2b:32:c9:40:ae:0f:98:5d:06:90: 33:38:4d:67:cc:ad:1b:70:d7:23:2f:33:6c:21:67: ff:e7:03:f4:2e:01:90:97:7b:df:6a:70:b0:75:33: 59:28:71:12:7e:85:f3:39:d6:2a:0b:d1:f9:76:a9: 88:ad:96:0e:00:f4:5e:70:d0:a6:c5:73:fa:57:69: e7:08:12:14:38:6f:42:f1:25:49:21:9b:57:8b:66: 5e:89:02:2a:f1:fa:b1:ef:94:9d:8a:c6:70:de:7d: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:98:21:73:B9:1B:69:25:B8:74:52:43:74:6B:51:F7:6B:9F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c6:4a:07:d3:94:2c:3c:f0:f6:87:12:47:b1:7e:2b:84:03: bc:f1:85:14:96:96:cc:8e:6a:c0:61:55:89:89:58:23:5a:4c: 73:69:93:45:22:3c:f5:ee:16:20:84:ff:80:16:af:f6:21:22: e2:64:7a:00:68:d0:2b:87:c7:d0:e5:64:ad:60:0d:12:68:91: 3f:a3:b5:fe:53:b3:68:66:17:d0:25:dc:0e:bf:56:39:f3:a8: b1:48:19:4e:81:9c:c0:73:ea:31:31:2b:8b:29:2e:82:f6:14: 31:32:04:0d:d5:84:95:86:c5:50:5e:bd:02:25:cb:ac:54:a0: 71:eb:29:09:2c:fe:77:62:65:ae:31:29:01:fd:d4:e0:48:fc: 4b:07:18:04:07:d2:48:18:cc:e4:b0:26:bf:f8:05:67:51:27: d3:a6:c9:fc:6a:41:8e:01:b7:28:3d:bc:70:65:70:aa:7e:01: 76:3d:db:e0:3c:b5:a7:09:6c:8f:f5:78:01:34:1f:eb:31:00: 5f:bd:ac:c0:db:11:4d:b3:e4:70:77:80:8e:a1:b8:e4:46:36: 0a:23:1a:34:f4:ea:c7:20:44:d6:6f:db:18:8a:6c:db:ca:29: 24:dd:95:62:11:60:ae:ca:c4:13:48:91:18:6c:e4:a5:a0:50: 18:2c:60:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe4PFADwyYa3boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YWM4N2IyMjMtYzQ5OC00NDhhLTk1ZDAtMTNlNjg2OWE0OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FqiVHflN6dB1D0bwyCezA3EgKhrhQSq7lEy Q8f24GrqhDo0PT3GEtICciM5hCIV6axgXpSYQ0xZ5C+ff2rwYk3V1CqHOuXIe845 pYfbaEe2olmSiei4GXf0Mj/mvI/pgNwILhkJZVLxQeNG76RNRnsDtOI+yJIAWmSU vh7H+wUnbhqIqYBQcMqiILPgVVTXagqb+qpAie1gaSsyyUCuD5hdBpAzOE1nzK0b cNcjLzNsIWf/5wP0LgGQl3vfanCwdTNZKHESfoXzOdYqC9H5dqmIrZYOAPRecNCm xXP6V2nnCBIUOG9C8SVJIZtXi2ZeiQIq8fqx75SdisZw3n2SJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9kmCFzuRtpJbh0UkN0a1H3a5/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmE1MzgzZTYtZWE5NS0z NTg2LWFiMjUtMmJhNTIzZDIxZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/GSgfTlCw88PaHEkexfiuEA7zxhRSWlsyOasBhVYmJWCNaTHNpk0Ui PPXuFiCE/4AWr/YhIuJkegBo0CuHx9DlZK1gDRJokT+jtf5Ts2hmF9Al3A6/Vjnz qLFIGU6BnMBz6jExK4spLoL2FDEyBA3VhJWGxVBevQIly6xUoHHrKQks/ndiZa4x KQH91OBI/EsHGAQH0kgYzOSwJr/4BWdRJ9OmyfxqQY4Btyg9vHBlcKp+AXY92+A8 tacJbI/1eAE0H+sxAF+9rMDbEU2z5HB3gI6huORGNgojGjT06scgRNZv2xiKbNvK KSTdlWIRYK7KxBNIkRhs5KWgUBgsYBg= -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:10 2025 by rpki-client