$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa File: d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa (raw, json) Hash identifier: mqruNL6+YjmX9j0vWQ+GAGknzXvJytHkH0xCjZ6/q+A= Subject key identifier: 7A:55:AA:1D:F5:D0:A7:DD:04:3F:8F:0F:F0:42:87:06:C8:75:DD:5C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E77270B9DBA148DB52C3400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:27:0b:9d:ba:14:8d:b5:2c:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=66b6fab2-9811-4c0e-adc8-ccf9f9266b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:ed:2d:e6:e1:10:df:1a:6a:51:2f:3b:ac: 27:97:66:b4:cf:1c:46:41:eb:76:df:c6:70:43:6c: 52:81:7f:76:db:28:5c:92:7d:44:cf:bf:08:84:92: d8:81:ec:9c:eb:9d:16:84:08:ef:11:83:bd:33:d4: 72:93:65:aa:7a:cb:bb:b1:55:00:22:c7:42:43:34: e5:51:34:5b:4a:86:92:91:f1:f3:a0:b9:e0:e7:44: e7:57:89:6c:35:dd:30:27:ea:b5:cd:53:b5:a4:59: 1d:e9:b3:7e:28:cc:fd:63:cc:31:a5:66:03:3f:85: 24:ad:4c:7f:91:45:02:dd:fc:ce:1f:6b:e1:8b:5a: 8b:3b:14:76:80:0a:23:10:a6:b0:bd:52:81:fa:7b: ed:9f:54:b0:2e:fa:73:ae:a0:7b:f5:d0:24:e8:4f: 50:e4:68:d1:ff:23:d0:6c:57:04:c0:7f:20:2e:84: fa:bd:7b:3e:3b:df:0f:15:f7:a5:80:25:7d:26:10: 10:39:43:96:4d:86:b0:8f:15:c6:36:20:09:bb:0a: 0c:29:8c:27:e6:2a:fc:d6:32:b9:1b:9b:6e:d3:12: 98:84:88:ff:0e:f1:82:3f:db:71:e0:8c:51:8f:62: d7:72:e9:25:0d:d4:e3:3a:95:24:c5:dc:74:6c:12: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:AA:1D:F5:D0:A7:DD:04:3F:8F:0F:F0:42:87:06:C8:75:DD:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ec:d0:96:4c:bf:28:77:7c:d4:7b:9e:07:01:d9:40:92:0c: 81:e5:ba:2a:d4:1e:03:3e:66:3c:72:b7:61:b9:88:7f:c0:94: 73:09:54:04:c6:e6:83:00:4e:f6:69:cf:68:2f:09:35:eb:28: 3e:81:6b:81:80:c4:f3:35:7e:d5:9e:2a:33:33:36:87:5c:4a: 36:90:d2:10:ab:74:ab:f3:53:75:5c:69:b5:2e:30:a5:c6:e5: fc:ca:c5:7b:db:15:14:1a:43:2b:1d:8a:41:0b:88:f2:5b:54: 5d:16:96:fe:59:fd:32:3b:c4:40:9d:9c:d1:0e:4f:55:5a:d4: b4:60:fb:77:ee:8f:df:28:5a:53:d9:b8:d4:0a:7a:e7:cc:ae: 2f:77:53:12:89:89:70:08:4d:72:20:24:93:ef:14:5f:3e:70: d7:e1:84:57:f1:93:24:5d:48:67:bc:6c:4d:04:99:c8:bf:05: c8:05:38:01:bf:ae:8f:d6:a3:5e:82:dd:23:2d:c4:60:e8:18: fd:98:64:6c:de:7b:e8:cb:c2:34:fe:c1:41:1a:29:f2:50:d8: eb:a9:ca:e5:60:37:fd:73:be:c4:25:62:ed:fe:04:e7:bf:ba: fc:44:39:bc:d1:4c:b4:b4:4a:27:d0:c2:31:16:77:ab:a1:28: 36:dd:e8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdycLnboUjbUsNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjZiNmZhYjItOTgxMS00YzBlLWFkYzgtY2NmOWY5MjY2YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqrtLebhEN8aalEvO6wnl2a0zxxGQet238Zw Q2xSgX922yhckn1Ez78IhJLYgeyc650WhAjvEYO9M9Ryk2Wqesu7sVUAIsdCQzTl UTRbSoaSkfHzoLng50TnV4lsNd0wJ+q1zVO1pFkd6bN+KMz9Y8wxpWYDP4UkrUx/ kUUC3fzOH2vhi1qLOxR2gAojEKawvVKB+nvtn1SwLvpzrqB79dAk6E9Q5GjR/yPQ bFcEwH8gLoT6vXs+O98PFfelgCV9JhAQOUOWTYawjxXGNiAJuwoMKYwn5ir81jK5 G5tu0xKYhIj/DvGCP9tx4IxRj2LXcuklDdTjOpUkxdx0bBIVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpVqh310KfdBD+PD/BChwbIdd1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDA0MTk3ZTYtNGNjNy0z NmFjLWFiMWEtYzAwYjEyOTVkNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbs0JZMvyh3fNR7ngcB2UCSDIHluirUHgM+Zjxyt2G5iH/AlHMJVATG 5oMATvZpz2gvCTXrKD6Ba4GAxPM1ftWeKjMzNodcSjaQ0hCrdKvzU3VcabUuMKXG 5fzKxXvbFRQaQysdikELiPJbVF0Wlv5Z/TI7xECdnNEOT1Va1LRg+3fuj98oWlPZ uNQKeufMri93UxKJiXAITXIgJJPvFF8+cNfhhFfxkyRdSGe8bE0Emci/BcgFOAG/ ro/Wo16C3SMtxGDoGP2YZGzee+jLwjT+wUEaKfJQ2OupyuVgN/1zvsQlYu3+BOe/ uvxEObzRTLS0SifQwjEWd6uhKDbd6G4= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:04 2025 by rpki-client