$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa File: c8c24147-75ec-35e3-a350-2da570a3661b.roa (raw, json) Hash identifier: KNjtyhRj85nS5zbrlcK5pDDpvXPFl4KuFmrkdxZcQ8o= Subject key identifier: 2A:3D:E0:99:67:49:F4:54:32:78:00:08:8C:9E:73:BD:77:0C:3E:3D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C954066A852D4F593BA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:95:40:66:a8:52:d4:f5:93:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=9b250421-3095-4de1-a66e-02874b48828d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:a7:5c:e0:47:28:6b:d7:4f:dd:e4:4c:40: 00:d7:b7:a8:a0:7e:b7:b0:0b:a3:65:1e:0b:b3:66: 06:4f:64:5f:06:67:12:77:d1:e3:d5:e8:ac:02:e7: 09:4c:23:51:04:f8:57:96:09:06:99:e3:36:e8:97: ea:7d:44:62:c8:2f:f0:4d:e3:85:00:c8:14:47:96: 5a:22:31:b8:14:6e:cc:3c:37:43:07:46:08:54:8a: 9d:cb:f3:3c:3f:c0:b7:7f:ab:6e:47:2f:c9:30:77: d8:4b:ee:0b:86:df:32:89:79:e9:59:bb:eb:94:66: 68:b0:03:58:09:1b:c6:aa:2f:84:aa:fb:3f:66:91: 90:99:f3:f4:71:21:76:ab:b9:83:f9:b3:b6:0d:c9: 42:46:49:e8:80:9e:79:66:b1:b7:15:7a:1d:ae:9b: 73:93:73:c8:de:5a:8c:bc:55:c4:d4:14:fb:4d:64: 0c:e2:59:2c:e6:4b:9d:f1:10:a0:de:7b:4d:b1:98: 40:ff:b2:72:f2:7c:34:38:5a:df:92:bc:cc:9a:05: 1a:f8:54:cf:8a:c7:64:72:e3:dc:28:f9:93:d4:cf: ea:fc:6a:2c:52:aa:db:35:f8:c4:d1:45:e7:87:df: b0:87:2f:36:4d:42:f6:61:a5:e1:d5:22:6a:34:64: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:E0:99:67:49:F4:54:32:78:00:08:8C:9E:73:BD:77:0C:3E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:86:40:00:02:25:71:33:5b:0d:fd:b2:16:0a:43:5b:12:9c: 42:7d:43:40:47:35:2f:a1:0a:e3:14:8a:13:7c:0a:bd:0a:90: 1b:6d:4b:0c:ea:63:6f:c7:3e:a9:b4:5e:14:ab:cd:fd:08:cc: ed:61:fa:f7:02:a8:fc:2a:f8:9f:9a:ec:2b:0f:01:90:76:70: 2a:4b:33:31:54:6e:1e:57:1c:b9:a5:80:f2:a8:55:02:94:eb: f7:3e:19:2c:6e:31:ad:13:a8:12:30:22:a8:af:32:b1:9d:86: 38:0c:63:72:54:8b:6f:92:f8:a8:bc:a3:7b:4c:90:87:20:c0: ba:d2:a1:36:bd:a0:63:88:1e:d8:8b:a0:ee:8d:77:c1:66:1d: 32:b1:12:66:37:12:06:3a:ce:77:28:8f:8b:5d:88:ed:b4:74: ed:52:74:78:4c:35:47:ba:49:bd:3a:6e:f8:93:6a:c9:e9:1d: ea:e2:05:36:47:56:6f:22:0d:84:cf:ef:24:d7:9c:5e:fe:93: a5:5e:67:5c:53:53:fe:62:db:b9:97:f1:00:aa:09:25:f7:d5: dd:60:dd:b5:f2:84:ff:c0:80:e6:65:c1:8e:2d:79:32:2d:68: 21:d5:df:b4:99:2f:b0:4e:58:fd:57:f4:a7:d1:95:1b:a1:b7: 94:36:aa:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJVAZqhS1PWTugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk OWIyNTA0MjEtMzA5NS00ZGUxLWE2NmUtMDI4NzRiNDg4MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIunXOBHKGvXT93kTEAA17eooH63sAujZR4L s2YGT2RfBmcSd9Hj1eisAucJTCNRBPhXlgkGmeM26JfqfURiyC/wTeOFAMgUR5Za IjG4FG7MPDdDB0YIVIqdy/M8P8C3f6tuRy/JMHfYS+4Lht8yiXnpWbvrlGZosANY CRvGqi+Eqvs/ZpGQmfP0cSF2q7mD+bO2DclCRknogJ55ZrG3FXodrptzk3PI3lqM vFXE1BT7TWQM4lks5kud8RCg3ntNsZhA/7Jy8nw0OFrfkrzMmgUa+FTPisdkcuPc KPmT1M/q/GosUqrbNfjE0UXnh9+why82TUL2YaXh1SJqNGT9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo94JlnSfRUMngACIyec713DD49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzhjMjQxNDctNzVlYy0z NWUzLWEzNTAtMmRhNTcwYTM2NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeGQAACJXEzWw39shYKQ1sSnEJ9Q0BHNS+hCuMUihN8Cr0KkBttSwzq Y2/HPqm0XhSrzf0IzO1h+vcCqPwq+J+a7CsPAZB2cCpLMzFUbh5XHLmlgPKoVQKU 6/c+GSxuMa0TqBIwIqivMrGdhjgMY3JUi2+S+Ki8o3tMkIcgwLrSoTa9oGOIHtiL oO6Nd8FmHTKxEmY3EgY6zncoj4tdiO20dO1SdHhMNUe6Sb06bviTasnpHeriBTZH Vm8iDYTP7yTXnF7+k6VeZ1xTU/5i27mX8QCqCSX31d1g3bXyhP/AgOZlwY4teTIt aCHV37SZL7BOWP1X9KfRlRuht5Q2qrc= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:22 2025 by rpki-client