$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6137b89-e816-3639-9a97-aeac3079f4bc.roa File: c6137b89-e816-3639-9a97-aeac3079f4bc.roa (raw, json) Hash identifier: 1KsG+0z9iZEsubwm1+1SfCHoAVPhk+KOH3wVd0hoHTU= Subject key identifier: DC:C4:5E:82:FF:CC:16:9D:B5:22:3D:EB:91:55:B2:71:C0:CC:B9:1E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7728423F3EBBB5794EB7C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6137b89-e816-3639-9a97-aeac3079f4bc.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:28:42:3f:3e:bb:b5:79:4e:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=83957f47-140f-46f3-8bd4-3b556c08ab90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:05:ac:bb:76:10:f9:9e:1a:cb:cb:86:94: 8b:a2:fd:ab:4c:60:78:00:43:e6:1a:b3:7d:9e:ba: 16:08:0b:3a:06:21:fd:b1:d1:54:5f:85:f7:8b:23: 1d:e3:f2:f1:5e:f7:68:2d:27:16:4c:3d:07:1d:ea: f1:49:2d:da:ce:b4:d5:7a:0f:62:a4:0c:61:41:56: 78:c3:9f:2c:1e:d1:61:85:78:99:4b:50:25:21:18: cb:93:99:fb:3b:d3:35:fc:8b:73:8b:e8:01:16:5c: ce:39:7f:ce:94:c6:65:1a:71:7e:17:c5:22:bf:b1: e2:7a:60:c8:0e:6b:4f:44:7b:39:d0:14:3d:e3:d7: 9d:4e:3b:76:6a:af:f6:39:c8:1e:30:47:98:e6:17: 00:18:6b:46:e3:ba:e6:97:a8:15:b9:d8:bc:77:23: 98:c6:26:ff:c6:14:b7:c9:99:51:e9:d1:dd:4c:a7: b2:55:41:0a:55:22:d6:b3:5e:26:bb:3d:be:5b:9e: 33:b8:59:d2:59:da:6d:28:26:f0:79:bd:3d:dd:10: 67:81:5b:b7:4f:ea:87:94:f8:c3:7b:44:fb:0e:ae: b0:93:a0:2a:bc:dc:df:ee:73:06:5f:8e:55:ce:e7: 45:bf:db:c8:1b:c0:e6:17:2f:56:6e:ef:b3:69:47: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C4:5E:82:FF:CC:16:9D:B5:22:3D:EB:91:55:B2:71:C0:CC:B9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c6137b89-e816-3639-9a97-aeac3079f4bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:56:52:13:18:d1:61:1e:da:9d:63:2e:f5:4f:52:59:a2:c4: 1c:f0:f2:31:a0:01:c3:ec:2f:2d:82:8d:57:75:7c:b0:89:1e: c8:29:85:0a:2e:3b:a6:23:ee:6c:07:7e:8f:c2:89:89:99:8b: a9:31:ae:c6:83:d1:f9:e2:90:3a:c5:d0:fb:a1:04:8a:eb:ff: 26:a4:d3:65:df:6c:33:12:23:3a:46:14:2d:3e:f4:f8:4c:45: 4a:7e:dc:3d:50:3f:79:ab:32:1c:45:ac:1b:e1:77:53:5a:bd: 8b:dc:bf:fb:8e:53:10:3f:7f:41:ae:d1:2e:09:75:b0:ed:22: df:3b:48:d6:98:78:6e:99:c9:93:f3:e4:1d:dd:bc:57:d2:c4: 77:02:e8:23:27:f8:8f:fa:6d:c8:91:11:ff:27:10:2e:d9:6e: 4b:ab:68:5e:39:3c:c9:e9:b4:81:04:ac:19:bd:02:59:e1:c2: 81:27:dd:c4:3c:29:4a:a0:b3:d0:be:70:22:ec:b2:9e:56:d7: a0:3f:dd:3c:a4:ce:33:86:0d:45:4d:a5:b8:95:1e:47:73:fe: 7b:01:56:a0:12:3a:43:cf:aa:5b:dc:1e:ec:73:ba:ef:41:c3: bf:43:17:d9:7f:40:6d:55:7e:85:0b:ef:f0:2d:03:b6:fd:8e: 76:45:9b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyhCPz67tXlOt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ODM5NTdmNDctMTQwZi00NmYzLThiZDQtM2I1NTZjMDhhYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOsFrLt2EPmeGsvLhpSLov2rTGB4AEPmGrN9 nroWCAs6BiH9sdFUX4X3iyMd4/LxXvdoLScWTD0HHerxSS3azrTVeg9ipAxhQVZ4 w58sHtFhhXiZS1AlIRjLk5n7O9M1/Itzi+gBFlzOOX/OlMZlGnF+F8Uiv7HiemDI DmtPRHs50BQ949edTjt2aq/2OcgeMEeY5hcAGGtG47rml6gVudi8dyOYxib/xhS3 yZlR6dHdTKeyVUEKVSLWs14muz2+W54zuFnSWdptKCbweb093RBngVu3T+qHlPjD e0T7Dq6wk6AqvNzf7nMGX45VzudFv9vIG8DmFy9Wbu+zaUce6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzEXoL/zBadtSI965FVsnHAzLkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzYxMzdiODktZTgxNi0z NjM5LTlhOTctYWVhYzMwNzlmNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZWUhMY0WEe2p1jLvVPUlmixBzw8jGgAcPsLy2CjVd1fLCJHsgphQou O6Yj7mwHfo/CiYmZi6kxrsaD0fnikDrF0PuhBIrr/yak02XfbDMSIzpGFC0+9PhM RUp+3D1QP3mrMhxFrBvhd1NavYvcv/uOUxA/f0Gu0S4JdbDtIt87SNaYeG6ZyZPz 5B3dvFfSxHcC6CMn+I/6bciREf8nEC7ZbkuraF45PMnptIEErBm9AlnhwoEn3cQ8 KUqgs9C+cCLssp5W16A/3TykzjOGDUVNpbiVHkdz/nsBVqASOkPPqlvcHuxzuu9B w79DF9l/QG1VfoUL7/AtA7b9jnZFm1s= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:47 2025 by rpki-client