$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa File: bf43aa8f-6881-31aa-8958-92f09ff019c2.roa (raw, json) Hash identifier: 3spFXIHpJsLTPecjYMD7yJcbdCRWXyjz2ZzDKJvPvmY= Subject key identifier: B3:56:B5:4C:E0:56:88:A6:E1:9E:06:F9:8A:C0:BD:2D:1A:96:EA:B1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D7A601C7D3424CA605D0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d7:a6:01:c7:d3:42:4c:a6:05:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=58a115df-bc1b-41fa-b0e3-6f775fd9f16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:b4:73:b6:3d:6f:3e:8f:93:0b:45:fb:5d: 92:f6:5d:e3:93:a4:39:d6:1d:93:2d:db:5d:1d:89: 3a:48:7a:0b:6d:97:de:80:90:f2:c7:1e:94:9f:72: 47:ad:85:42:2c:48:e9:25:27:88:6a:a8:07:a1:99: 50:33:37:01:ab:13:5a:05:1a:31:72:ba:21:3e:ca: 02:b6:a0:5c:8b:bd:dc:4c:01:29:51:51:90:a4:05: c8:51:25:c7:0b:9c:6f:34:c2:2d:7c:c8:d7:f8:5c: b4:64:dd:7a:dd:74:cc:21:23:ab:ba:b1:bd:9a:da: 7a:39:e8:33:0b:7f:2a:7c:f2:51:ad:ba:36:43:7a: 5f:de:4e:32:de:29:42:49:19:5d:1d:df:8f:4d:99: 7a:1d:48:9a:2e:dc:ee:5a:e9:22:c8:0a:82:dd:50: 4e:89:86:5c:4b:f7:c5:60:ae:65:8d:8c:5f:8e:38: 17:9b:4e:7a:6e:3e:42:ba:2b:df:05:7b:9a:ed:58: b5:0a:ab:07:58:21:c9:66:3d:c4:00:dc:4c:5f:00: 6f:b1:cd:8c:da:6f:1f:28:7b:bd:16:47:da:44:d8: 8c:77:f6:fd:13:bc:40:c3:81:a8:88:61:65:cf:48: e6:21:b3:10:ab:53:f5:42:11:ce:53:7f:5e:1c:d6: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:56:B5:4C:E0:56:88:A6:E1:9E:06:F9:8A:C0:BD:2D:1A:96:EA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:94:39:60:ed:db:5d:2e:c6:db:60:c0:1e:3d:9d:ea:b9:22: 89:fb:e9:09:bf:89:f5:fc:cd:7a:26:9f:45:f0:6c:d7:a5:d2: 03:ed:1e:53:ae:24:74:16:0c:f0:e8:78:d8:36:35:fe:53:c0: 06:52:37:ab:82:f2:38:31:6b:7b:a1:5e:46:6a:7a:1f:db:d7: b5:93:02:5b:4c:3e:cf:5b:97:76:95:db:14:5c:83:2b:63:3e: e4:46:5a:bf:1a:84:95:1c:a2:77:68:70:a3:82:f1:68:d1:46: 77:9b:8d:38:ca:e4:96:75:41:3f:e5:fc:b0:3f:e5:03:32:a0: 28:d8:a2:c7:a6:10:91:c4:ec:cb:9c:75:d0:d3:df:29:c5:49: cb:24:2f:3c:e4:dd:6a:8b:a8:a3:a7:29:03:ba:3a:96:f0:ec: 10:73:b7:4a:89:95:5b:ce:45:29:fb:a8:d8:39:68:bc:bc:bf: cf:d3:27:9a:9d:5d:56:a0:86:53:02:fb:ad:ef:f3:5f:18:a8: a5:fe:28:a3:8e:47:9d:65:9f:3a:e9:e7:af:70:38:ad:79:2d: c1:a5:75:16:46:e0:1e:9c:a7:02:4e:71:4d:ae:92:32:b4:c7: 63:ad:2d:40:c6:af:cb:2e:a2:18:f4:b0:94:ac:90:59:bf:90: 3f:ce:84:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdemAcfTQkymBdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NThhMTE1ZGYtYmMxYi00MWZhLWIwZTMtNmY3NzVmZDlmMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwS0c7Y9bz6PkwtF+12S9l3jk6Q51h2TLdtd HYk6SHoLbZfegJDyxx6Un3JHrYVCLEjpJSeIaqgHoZlQMzcBqxNaBRoxcrohPsoC tqBci73cTAEpUVGQpAXIUSXHC5xvNMItfMjX+Fy0ZN163XTMISOrurG9mtp6Oegz C38qfPJRrbo2Q3pf3k4y3ilCSRldHd+PTZl6HUiaLtzuWukiyAqC3VBOiYZcS/fF YK5ljYxfjjgXm056bj5CuivfBXua7Vi1CqsHWCHJZj3EANxMXwBvsc2M2m8fKHu9 FkfaRNiMd/b9E7xAw4GoiGFlz0jmIbMQq1P1QhHOU39eHNZl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNWtUzgVoim4Z4G+YrAvS0aluqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmY0M2FhOGYtNjg4MS0z MWFhLTg5NTgtOTJmMDlmZjAxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCUOWDt210uxttgwB49neq5Ion76Qm/ifX8zXomn0XwbNel0gPtHlOu JHQWDPDoeNg2Nf5TwAZSN6uC8jgxa3uhXkZqeh/b17WTAltMPs9bl3aV2xRcgytj PuRGWr8ahJUcondocKOC8WjRRnebjTjK5JZ1QT/l/LA/5QMyoCjYosemEJHE7Muc ddDT3ynFScskLzzk3WqLqKOnKQO6Opbw7BBzt0qJlVvORSn7qNg5aLy8v8/TJ5qd XVaghlMC+63v818YqKX+KKOOR51lnzrp569wOK15LcGldRZG4B6cpwJOcU2ukjK0 x2OtLUDGr8suohj0sJSskFm/kD/OhJ4= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:42 2025 by rpki-client