$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa File: c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa (raw, json) Hash identifier: 76tBVQShKtTESh5jeQyEpVDpOkGNv77Yy4hdpvrJSJI= Subject key identifier: 55:51:B0:6F:A6:36:EA:BB:CC:8E:B6:85:4D:B8:0A:29:59:EC:77:DF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C810BA9720DA721E62AC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:81:0b:a9:72:0d:a7:21:e6:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=9c40b5fb-1994-4880-91cb-9c7efd3eb810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:d0:49:22:67:ad:ae:7b:61:13:11:c6:4e: 1a:39:ca:44:c2:cb:b8:2f:39:82:41:ee:2a:de:14: 8e:cb:e7:69:63:50:a0:eb:d7:c7:47:4c:c1:02:3a: b2:95:ab:a6:11:51:09:96:c3:37:28:23:6f:ea:24: d2:39:42:6f:20:57:06:17:15:16:64:13:42:48:12: 88:e1:28:9c:c7:f5:a1:ea:ec:78:25:22:b0:9b:ea: d1:58:11:a7:8c:dc:80:3e:30:70:7b:b3:c4:58:c2: 4a:4d:fc:9d:01:ec:13:b2:45:bd:a6:18:e4:05:0f: 75:9c:5b:9e:3d:0f:7b:f5:0b:52:de:ff:79:77:cd: ef:29:fe:65:88:cd:93:e4:4a:c9:9c:0d:25:03:b2: 70:62:b2:d9:d4:88:52:52:ed:52:1e:75:13:f1:10: db:17:44:36:ae:41:d8:f3:9e:4f:24:5f:e7:10:f2: 20:65:32:a4:a7:93:a8:16:db:60:50:fd:97:a0:a1: fe:ad:9e:f3:ac:d0:db:4e:43:5d:3e:bc:5d:aa:1e: 51:ac:ef:2c:0c:cf:72:c8:b7:fc:ae:ad:dc:32:f4: d5:92:8c:b8:ed:04:2e:fa:45:ef:b1:e1:e3:78:ed: 4c:90:ee:03:4f:46:6c:e6:06:6f:28:f6:39:4e:6f: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:B0:6F:A6:36:EA:BB:CC:8E:B6:85:4D:B8:0A:29:59:EC:77:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:89:7a:ae:d2:8e:8f:d6:03:ec:f4:f4:7d:26:2a:61:1f:ed: 8a:0f:b1:53:6b:77:dc:aa:84:dd:a6:76:53:a6:43:b9:20:b6: 0c:df:55:fc:ea:31:91:2f:7d:e7:4a:8b:80:a8:fc:77:ee:8c: b1:8d:b0:57:ea:34:47:f3:90:8a:ca:63:ed:0b:2e:02:0f:17: 72:cb:6c:16:58:ef:a3:93:b6:47:48:97:4a:62:78:fd:8e:8c: c3:40:71:85:6f:14:ea:3d:9f:3f:61:d6:89:ba:b8:48:2a:4e: c1:09:80:80:58:84:e2:c7:cc:10:b6:6b:ab:26:0a:99:c9:2f: 2f:c7:d4:ad:74:d5:64:84:ab:5c:bf:05:7f:64:15:d7:33:95: 53:98:5f:7a:05:55:12:b1:2f:16:3e:3a:cf:ee:d9:60:3e:86: 93:49:8d:02:40:f8:48:a1:b6:ad:67:07:8c:44:ec:c6:cc:80: c4:66:40:7c:ac:a1:cd:65:ff:e1:6d:8e:81:3c:c8:c9:15:94: 69:02:b6:dd:58:54:84:41:3e:7e:6f:4a:66:9b:71:85:fa:e2: 69:37:e3:7e:81:bf:79:a6:e6:ab:2d:a4:9d:35:fb:13:ef:c7: 96:a8:e7:8b:eb:4e:62:d2:be:d2:a3:f6:99:a9:f6:54:60:99: 56:a8:43:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIELqXINpyHmKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk OWM0MGI1ZmItMTk5NC00ODgwLTkxY2ItOWM3ZWZkM2ViODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1DQSSJnra57YRMRxk4aOcpEwsu4LzmCQe4q 3hSOy+dpY1Cg69fHR0zBAjqylaumEVEJlsM3KCNv6iTSOUJvIFcGFxUWZBNCSBKI 4Sicx/Wh6ux4JSKwm+rRWBGnjNyAPjBwe7PEWMJKTfydAewTskW9phjkBQ91nFue PQ979QtS3v95d83vKf5liM2T5ErJnA0lA7JwYrLZ1IhSUu1SHnUT8RDbF0Q2rkHY 855PJF/nEPIgZTKkp5OoFttgUP2XoKH+rZ7zrNDbTkNdPrxdqh5RrO8sDM9yyLf8 rq3cMvTVkoy47QQu+kXvseHjeO1MkO4DT0Zs5gZvKPY5Tm927wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVRsG+mNuq7zI62hU24CilZ7HffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzhlMGRlYWYtMjRiNC0z OTQxLThhMzgtYmU4ZjA0MmViZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2Jeq7Sjo/WA+z09H0mKmEf7YoPsVNrd9yqhN2mdlOmQ7kgtgzfVfzq MZEvfedKi4Co/HfujLGNsFfqNEfzkIrKY+0LLgIPF3LLbBZY76OTtkdIl0pieP2O jMNAcYVvFOo9nz9h1om6uEgqTsEJgIBYhOLHzBC2a6smCpnJLy/H1K101WSEq1y/ BX9kFdczlVOYX3oFVRKxLxY+Os/u2WA+hpNJjQJA+Eihtq1nB4xE7MbMgMRmQHys oc1l/+FtjoE8yMkVlGkCtt1YVIRBPn5vSmabcYX64mk3436Bv3mm5qstpJ01+xPv x5ao54vrTmLSvtKj9pmp9lRgmVaoQ+c= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:17 2025 by rpki-client