$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa File: cf005a1e-cc33-32b3-8191-49c75f69f07b.roa (raw, json) Hash identifier: 5r1dzLmzDOfM34499ocwPwK8AKxLQusu6+d8/6oULQ0= Subject key identifier: 80:4F:94:A4:E1:7D:20:59:35:5B:B5:3C:8A:3A:30:A2:9E:C8:0A:11 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7BB7BB25453F6CAF3180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7b:b7:bb:25:45:3f:6c:af:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=a0061daa-1f4a-4cd4-acd9-fad9ebc29528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:eb:cb:25:93:15:84:13:4b:b3:ba:0f:6d:bf: 36:c9:3f:a1:85:9e:c8:6c:12:5b:0b:4c:39:d1:fa: 07:e3:06:ac:21:0f:de:1a:f4:3d:56:23:f2:63:6f: 87:9a:7f:ab:93:75:56:cf:46:5f:a9:6d:8e:1e:1f: f4:b5:4d:5a:4a:3b:c4:9f:db:43:5c:2d:c2:f2:10: 4c:d6:b5:88:31:8f:c5:9b:11:ab:72:56:10:9a:48: c5:d1:09:ff:df:9e:c2:55:13:84:2b:d6:2e:ff:be: 55:70:1a:19:5b:89:5c:6c:c6:c5:7f:52:f2:59:24: 57:58:fd:a0:04:fd:67:a8:ce:fb:69:b4:b3:47:fb: 7d:eb:76:56:43:a7:c6:34:2b:fe:17:57:36:d0:af: f6:cb:e0:2a:0a:9f:77:9b:3d:23:32:b8:e7:b9:fe: ae:21:ed:24:d9:ba:a8:c7:07:e8:08:c0:a4:ae:b9: ee:b7:6c:a3:69:b3:93:a9:5a:13:83:23:cb:3c:02: 89:13:94:44:96:47:3e:a7:bb:ff:05:3b:c1:7a:ae: da:ef:31:0f:c9:7f:4c:58:ca:7e:8d:82:30:49:62: d9:97:ec:e2:f6:dd:d3:45:7a:1d:55:04:78:1a:89: d4:6e:cb:36:a8:a4:fb:0b:08:6c:87:4f:d0:ff:dd: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4F:94:A4:E1:7D:20:59:35:5B:B5:3C:8A:3A:30:A2:9E:C8:0A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d2:51:b4:5e:75:88:b1:b1:4d:a7:38:16:8e:cc:e0:84:e1: 58:1e:14:bc:a1:9e:88:64:f1:e3:06:8d:8b:4f:ac:23:e0:96: 74:a4:3d:94:c0:19:cb:40:69:eb:27:ad:69:29:89:80:36:a9: 4b:35:83:23:48:59:a1:77:ac:33:b6:97:73:0f:71:a0:2e:23: 53:a4:65:c7:b2:ba:10:66:b5:c6:0b:c3:41:74:f2:22:e5:ad: 08:e5:2c:f3:b3:0d:84:29:0b:c4:43:07:43:e7:ec:0f:fb:6c: cf:d6:a6:9b:e9:3b:c0:97:b2:28:b4:f7:df:ca:fb:6b:80:a4: 78:94:70:88:e1:45:ec:71:16:ca:07:c2:37:45:dd:ae:16:cf: 34:d2:c4:8e:1e:13:31:de:de:86:13:79:a7:92:38:70:c2:56: 9d:4c:11:5e:c9:4c:0d:11:8c:5d:fa:3e:21:cc:3d:a0:ab:b1: c6:58:a9:2a:1c:29:84:24:26:3f:0c:de:60:35:0e:7a:72:99: 9b:1d:18:92:8c:2c:cd:29:0e:65:07:f2:f0:29:30:6f:0b:2b: 53:4a:3b:de:8f:41:cb:f9:df:c8:73:d3:f3:6d:e2:3e:9e:c4: 3b:f3:97:33:88:f5:75:80:83:ad:cf:64:c0:01:a6:96:37:b7: ef:3b:2c:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHu3uyVFP2yvMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YTAwNjFkYWEtMWY0YS00Y2Q0LWFjZDktZmFkOWViYzI5NTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOvLJZMVhBNLs7oPbb82yT+hhZ7IbBJbC0w5 0foH4wasIQ/eGvQ9ViPyY2+Hmn+rk3VWz0ZfqW2OHh/0tU1aSjvEn9tDXC3C8hBM 1rWIMY/FmxGrclYQmkjF0Qn/357CVROEK9Yu/75VcBoZW4lcbMbFf1LyWSRXWP2g BP1nqM77abSzR/t963ZWQ6fGNCv+F1c20K/2y+AqCp93mz0jMrjnuf6uIe0k2bqo xwfoCMCkrrnut2yjabOTqVoTgyPLPAKJE5RElkc+p7v/BTvBeq7a7zEPyX9MWMp+ jYIwSWLZl+zi9t3TRXodVQR4GonUbss2qKT7Cwhsh0/Q/91hAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBPlKThfSBZNVu1PIo6MKKeyAoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YwMDVhMWUtY2MzMy0z MmIzLTgxOTEtNDljNzVmNjlmMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbSUbRedYixsU2nOBaOzOCE4VgeFLyhnohk8eMGjYtPrCPglnSkPZTA GctAaesnrWkpiYA2qUs1gyNIWaF3rDO2l3MPcaAuI1OkZceyuhBmtcYLw0F08iLl rQjlLPOzDYQpC8RDB0Pn7A/7bM/WppvpO8CXsii099/K+2uApHiUcIjhRexxFsoH wjdF3a4WzzTSxI4eEzHe3oYTeaeSOHDCVp1MEV7JTA0RjF36PiHMPaCrscZYqSoc KYQkJj8M3mA1DnpymZsdGJKMLM0pDmUH8vApMG8LK1NKO96PQcv538hz0/Nt4j6e xDvzlzOI9XWAg63PZMABppY3t+87LDI= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:32 2025 by rpki-client