$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c7993b42-2efe-3500-9bc6-c824d32e804a.roa File: c7993b42-2efe-3500-9bc6-c824d32e804a.roa (raw, json) Hash identifier: rwzqa+hPW6Ozf37z6Z8qcWvu4EeHwgWDBZ7bCH/o4ms= Subject key identifier: 00:95:CC:97:9B:75:32:D8:00:4F:1D:53:1E:B8:0B:25:5D:C1:18:CC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7727CECC04D794B3801480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c7993b42-2efe-3500-9bc6-c824d32e804a.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:27:ce:cc:04:d7:94:b3:80:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=118dadc7-5181-4059-9d08-efcb3d7ab7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:96:7b:80:12:91:ac:86:89:c5:3f:40:dd: 69:23:b4:2d:c0:58:37:fc:ec:16:b9:70:c2:f7:88: b0:62:79:fa:63:78:ee:56:56:b7:7c:49:57:be:70: d8:5f:35:44:fe:e3:ae:19:e9:11:fd:28:47:1d:29: 06:c5:7d:54:14:97:ce:02:e5:99:ba:97:a9:85:0b: 0e:de:9a:c6:18:b8:b8:61:35:b9:65:5c:5c:d3:5b: 48:67:3f:1b:16:a6:a9:bf:10:22:47:73:79:d4:98: 85:7b:5c:6e:56:b2:7b:33:95:53:3c:0d:eb:3b:83: 1a:fa:88:a3:8c:4b:78:16:97:c7:7e:c5:bd:12:ca: 6a:66:05:fc:51:a4:c3:ba:e8:fc:ce:2c:7b:41:64: df:f8:eb:2a:9d:1e:2d:8d:11:0e:b9:78:4d:5e:ba: 19:92:83:b8:ce:4d:15:06:8c:c2:66:9f:60:e4:bd: 0e:66:3f:e1:ea:fc:44:c5:cc:1d:28:63:00:83:e0: 13:9c:75:9a:93:b1:84:31:4f:7b:83:32:3a:78:83: 2d:d5:4b:8c:0e:a6:25:21:77:f9:9e:02:16:65:27: 1a:dd:e1:5f:7c:76:3b:e8:08:73:1b:68:55:74:5f: 6b:1a:f4:89:a4:24:33:e3:45:07:db:37:3a:22:15: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:95:CC:97:9B:75:32:D8:00:4F:1D:53:1E:B8:0B:25:5D:C1:18:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c7993b42-2efe-3500-9bc6-c824d32e804a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:e0:fd:fb:ad:97:0e:cb:ad:11:ae:fc:70:31:88:c2:d1:a0: 84:b0:c1:1a:4f:f5:0c:85:e2:a2:f7:99:7d:82:b5:ef:31:2e: e5:e1:70:9a:9d:5b:27:00:20:77:a8:c5:d8:59:24:90:66:47: 7b:1c:18:eb:5c:fd:4b:9c:00:c5:56:28:22:c4:bc:4a:3d:32: 10:f6:e2:eb:15:44:bb:00:cf:3a:14:5c:dd:e6:58:02:56:62: 83:70:fd:e3:59:d5:f7:e6:f0:73:0d:c1:bf:7e:4d:34:7f:74: ee:70:8b:68:e3:c9:4d:21:df:f8:36:55:8d:1a:9f:3a:c5:57: 66:db:8d:8e:1a:c2:98:79:56:94:54:28:7e:3d:6d:b1:72:f0: e3:a2:f0:4c:68:97:c0:02:f0:0e:8b:dd:70:21:59:c3:5a:b9: 5e:41:5d:1e:6a:67:8a:de:30:12:ef:46:ff:3b:00:52:3e:8b: 59:92:d9:d5:50:0e:cf:ab:42:c7:4d:e1:87:ca:2e:8c:99:ce: 17:96:57:e0:cf:c3:74:9f:7a:ec:ab:24:f9:b8:dc:d7:5c:bf: 5c:63:b6:50:06:00:3d:c8:f2:db:5d:97:d9:c6:12:14:39:7f: 0c:04:f9:f5:7e:db:c3:fe:40:37:7b:84:f0:cd:13:95:75:23: 10:ba:ff:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyfOzATXlLOAFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MTE4ZGFkYzctNTE4MS00MDU5LTlkMDgtZWZjYjNkN2FiN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkheWe4ASkayGicU/QN1pI7QtwFg3/OwWuXDC 94iwYnn6Y3juVla3fElXvnDYXzVE/uOuGekR/ShHHSkGxX1UFJfOAuWZupephQsO 3prGGLi4YTW5ZVxc01tIZz8bFqapvxAiR3N51JiFe1xuVrJ7M5VTPA3rO4Ma+oij jEt4FpfHfsW9EspqZgX8UaTDuuj8zix7QWTf+OsqnR4tjREOuXhNXroZkoO4zk0V BozCZp9g5L0OZj/h6vxExcwdKGMAg+ATnHWak7GEMU97gzI6eIMt1UuMDqYlIXf5 ngIWZSca3eFffHY76AhzG2hVdF9rGvSJpCQz40UH2zc6IhXtdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACVzJebdTLYAE8dUx64CyVdwRjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzc5OTNiNDItMmVmZS0z NTAwLTliYzYtYzgyNGQzMmU4MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXg/futlw7LrRGu/HAxiMLRoISwwRpP9QyF4qL3mX2Cte8xLuXhcJqd WycAIHeoxdhZJJBmR3scGOtc/UucAMVWKCLEvEo9MhD24usVRLsAzzoUXN3mWAJW YoNw/eNZ1ffm8HMNwb9+TTR/dO5wi2jjyU0h3/g2VY0anzrFV2bbjY4awph5VpRU KH49bbFy8OOi8Exol8AC8A6L3XAhWcNauV5BXR5qZ4reMBLvRv87AFI+i1mS2dVQ Ds+rQsdN4YfKLoyZzheWV+DPw3SfeuyrJPm43Ndcv1xjtlAGAD3I8ttdl9nGEhQ5 fwwE+fV+28P+QDd7hPDNE5V1IxC6/zk= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:00 2025 by rpki-client