$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa File: c9009554-e10d-3f67-9b1e-0b89a6446c32.roa (raw, json) Hash identifier: ekbOR4lLk1zJ69jSaeacXmdlEoIpS4+e/5NGMSrxpp0= Subject key identifier: 30:49:E8:00:0D:27:BB:F9:3C:7D:1B:5D:A7:51:17:E1:A4:EB:0A:89 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DCC4D3F1E3B170B31400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:dc:c4:d3:f1:e3:b1:70:b3:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=5b860e32-0189-4307-a625-48e97bd617e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:75:5d:d0:3b:7a:da:72:b2:98:7b:7d:98: 0e:89:ff:7b:c2:fa:a3:3d:31:05:6c:7d:a2:78:ec: 9a:dc:74:79:93:ba:de:81:54:9e:5d:1e:16:c8:95: e5:1c:69:75:48:fa:b2:a9:27:b1:fb:b0:45:6f:45: 8a:e1:14:14:a1:fa:5d:ee:25:1b:4b:5e:cf:09:a3: f5:b5:d4:0c:a1:fc:43:d9:e3:ef:25:27:50:ed:43: dc:63:72:03:af:55:8f:63:41:43:3d:6e:e6:7a:4c: 72:f3:06:f2:f8:06:48:e0:d7:63:f7:72:c9:af:0e: c1:c3:ea:ce:fd:f2:6d:a7:64:75:c2:a0:d4:4d:02: 20:dc:96:f9:19:89:f6:69:88:92:c6:d5:9c:d7:45: 60:e3:9c:0c:f4:0b:f5:6c:f9:51:70:6e:e9:c7:17: 4e:69:9b:b2:d2:24:f5:fe:3a:f6:f9:d0:95:31:4d: 26:95:68:9d:8c:ae:27:f7:59:63:85:0b:e0:78:46: e9:bd:74:cd:1e:2d:b0:8d:aa:22:3f:39:f1:41:a8: bb:7c:6b:96:12:24:ab:9a:93:fa:3d:a1:15:d5:1c: 19:5c:48:9d:9a:96:26:3d:01:93:bc:00:64:5f:d8: d0:d6:1c:1f:73:0e:b3:47:3a:c1:18:a6:bc:95:3a: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:49:E8:00:0D:27:BB:F9:3C:7D:1B:5D:A7:51:17:E1:A4:EB:0A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b6:c9:7b:8b:e5:9a:e1:76:db:cd:ef:f6:27:c6:26:aa:fb: ca:97:ec:44:4b:eb:49:36:a4:ca:3e:6f:4f:a1:a2:9e:7a:c7: 4d:5f:cc:26:2b:2d:57:8c:51:01:e5:15:55:b4:ce:34:63:61: 59:8d:18:f8:90:5e:4e:c1:4b:2a:10:61:01:2f:9f:bf:df:c1: f8:16:5b:16:de:05:84:d4:7f:34:75:d9:f4:a0:fe:65:2c:4f: 76:77:c4:f4:4f:d7:a0:63:36:0c:0c:b5:30:7b:be:9b:d4:ba: 8a:6f:65:fb:36:2c:1e:01:07:3e:6f:3c:b9:4e:6e:0f:22:a4: 7f:a0:bb:d5:0c:85:a4:b0:fa:08:2b:24:46:21:fc:51:cb:bb: ef:b5:6a:ef:d0:b1:d3:56:67:dc:7a:d0:7d:8d:20:fe:b5:7b: 01:73:9b:98:e4:35:e7:f1:cb:bf:15:3d:31:4f:a0:a3:23:16: 1c:e3:e4:7f:d3:db:67:95:29:e2:50:b3:a9:03:f2:cf:9a:a1: 99:92:d5:e3:be:e9:73:54:6b:9a:fc:15:21:ef:4c:f9:70:b8: e4:f1:67:c0:49:9b:5e:09:b9:c2:02:8a:9a:f5:66:91:36:f5: c7:50:db:a2:28:47:0f:61:33:d9:5d:bc:79:4c:69:03:e5:9c: 35:8f:7d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdzE0/HjsXCzFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NWI4NjBlMzItMDE4OS00MzA3LWE2MjUtNDhlOTdiZDYxN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlV1XdA7etpysph7fZgOif97wvqjPTEFbH2i eOya3HR5k7regVSeXR4WyJXlHGl1SPqyqSex+7BFb0WK4RQUofpd7iUbS17PCaP1 tdQMofxD2ePvJSdQ7UPcY3IDr1WPY0FDPW7mekxy8wby+AZI4Ndj93LJrw7Bw+rO /fJtp2R1wqDUTQIg3Jb5GYn2aYiSxtWc10Vg45wM9Av1bPlRcG7pxxdOaZuy0iT1 /jr2+dCVMU0mlWidjK4n91ljhQvgeEbpvXTNHi2wjaoiPznxQai7fGuWEiSrmpP6 PaEV1RwZXEidmpYmPQGTvABkX9jQ1hwfcw6zRzrBGKa8lTpDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBJ6AANJ7v5PH0bXadRF+Gk6wqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzkwMDk1NTQtZTEwZC0z ZjY3LTliMWUtMGI4OWE2NDQ2YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI22yXuL5ZrhdtvN7/Ynxiaq+8qX7ERL60k2pMo+b0+hop56x01fzCYr LVeMUQHlFVW0zjRjYVmNGPiQXk7BSyoQYQEvn7/fwfgWWxbeBYTUfzR12fSg/mUs T3Z3xPRP16BjNgwMtTB7vpvUuopvZfs2LB4BBz5vPLlObg8ipH+gu9UMhaSw+ggr JEYh/FHLu++1au/QsdNWZ9x60H2NIP61ewFzm5jkNefxy78VPTFPoKMjFhzj5H/T 22eVKeJQs6kD8s+aoZmS1eO+6XNUa5r8FSHvTPlwuOTxZ8BJm14JucICipr1ZpE2 9cdQ26IoRw9hM9ldvHlMaQPlnDWPfaE= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:01 2025 by rpki-client