$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa File: d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa (raw, json) Hash identifier: 4HGOCqTeZrZO7p3duvJ6IMXoGQ8FToJZLtC7sjDAwEs= Subject key identifier: 99:F6:AF:5A:F6:D6:60:9A:C1:FE:EB:EB:BA:5A:B7:6B:5C:47:63:7B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7726C0468429E9948E7780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:26:c0:46:84:29:e9:94:8e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c54ef6f2-1c5c-44e9-9fd1-e966ea79fa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:76:11:ea:a2:09:64:c9:d0:8f:a8:53:1f: 69:32:11:16:d3:d3:be:85:bb:4b:fb:f4:e9:44:c7: 53:4a:be:d8:c6:7a:1a:c0:ad:49:1b:8c:09:32:1b: c1:1b:a8:1e:9e:d5:3b:23:ee:da:bf:f7:db:80:69: 5d:25:dd:72:6a:4d:03:a8:ec:64:e2:9d:9b:e9:05: 36:c4:b5:75:86:07:5c:d4:8d:f1:d4:38:d7:b7:f7: da:d3:d7:f9:5e:38:fa:89:12:80:5b:68:ba:cd:ff: c2:05:c1:9d:c6:1c:a8:4d:bc:a7:67:3e:eb:b0:c9: 0d:e4:3c:e9:d7:4d:e3:22:5f:75:1d:3a:48:c6:ea: 46:6e:76:98:47:74:fa:de:7b:76:58:07:18:bd:91: 05:b4:f1:52:e2:ef:59:60:4c:4c:88:80:58:0c:7c: 2f:61:2a:f3:0b:8c:37:28:27:68:c4:14:8d:14:1b: e4:71:91:25:3b:6e:00:d7:35:19:c4:e6:45:d4:da: 84:d8:5d:b7:69:78:7f:97:ac:de:e2:d4:10:cb:11: fb:f0:e6:29:5c:ec:ae:83:e5:9d:14:8a:8f:61:ef: 1b:cf:1b:17:c1:c0:34:ce:e4:b1:08:70:87:c6:45: e7:b0:62:e7:af:50:31:b1:e4:8d:e7:fd:a9:70:6b: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F6:AF:5A:F6:D6:60:9A:C1:FE:EB:EB:BA:5A:B7:6B:5C:47:63:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:61:20:f6:c1:f7:51:74:35:60:85:f7:0c:6e:9f:1b:ee:5f: 33:47:1d:46:45:06:a1:c3:96:34:6f:8b:ed:68:50:e1:8f:24: c9:5a:cc:cc:53:15:81:2e:89:49:b5:e1:4c:c3:62:04:46:9d: f8:76:fe:85:95:dd:a7:64:d9:e6:85:32:d5:09:f3:d8:5f:f3: 2e:e7:8a:fb:43:7a:6a:55:bf:1f:0b:2e:42:db:d6:70:9d:82: 9f:97:7f:09:88:e3:f2:d8:94:66:0a:c9:a4:81:77:fb:2d:f2: 70:41:27:69:88:60:68:61:b8:19:82:f4:a4:06:96:31:27:20: c6:3d:ca:55:1a:c9:b8:e8:24:da:af:8d:dd:e3:04:f2:ce:db: e2:66:e6:75:82:8b:63:dc:b8:44:87:9b:d1:27:a6:10:fb:79: 9d:22:ef:0d:0e:3e:30:73:f6:39:1e:49:78:30:bf:c8:ad:75: 9b:ef:b8:67:ad:2e:09:0a:ff:70:d6:81:9a:34:fc:e5:ec:8b: 0c:83:04:1f:f9:18:03:72:d6:c2:05:93:5a:ca:f3:78:5d:e8: 1b:71:12:08:36:64:44:96:f9:61:40:c0:47:88:16:42:ae:d5: 96:1c:00:8c:81:d7:f8:35:cb:07:74:59:ec:c4:01:13:96:85: fc:d4:73:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdybARoQp6ZSOd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzU0ZWY2ZjItMWM1Yy00NGU5LTlmZDEtZTk2NmVhNzlmYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmml2EeqiCWTJ0I+oUx9pMhEW09O+hbtL+/Tp RMdTSr7YxnoawK1JG4wJMhvBG6gentU7I+7av/fbgGldJd1yak0DqOxk4p2b6QU2 xLV1hgdc1I3x1DjXt/fa09f5Xjj6iRKAW2i6zf/CBcGdxhyoTbynZz7rsMkN5Dzp 103jIl91HTpIxupGbnaYR3T63nt2WAcYvZEFtPFS4u9ZYExMiIBYDHwvYSrzC4w3 KCdoxBSNFBvkcZElO24A1zUZxOZF1NqE2F23aXh/l6ze4tQQyxH78OYpXOyug+Wd FIqPYe8bzxsXwcA0zuSxCHCHxkXnsGLnr1AxseSN5/2pcGvDwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn2r1r21mCawf7r67pat2tcR2N7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDcwZjBmYWEtY2IxNC0z N2JjLWI3ZTgtNjFkZGI4Mjk0MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBhIPbB91F0NWCF9wxunxvuXzNHHUZFBqHDljRvi+1oUOGPJMlazMxT FYEuiUm14UzDYgRGnfh2/oWV3adk2eaFMtUJ89hf8y7nivtDempVvx8LLkLb1nCd gp+XfwmI4/LYlGYKyaSBd/st8nBBJ2mIYGhhuBmC9KQGljEnIMY9ylUaybjoJNqv jd3jBPLO2+Jm5nWCi2PcuESHm9EnphD7eZ0i7w0OPjBz9jkeSXgwv8itdZvvuGet LgkK/3DWgZo0/OXsiwyDBB/5GANy1sIFk1rK83hd6BtxEgg2ZESW+WFAwEeIFkKu 1ZYcAIyB1/g1ywd0WezEAROWhfzUc3g= -----END CERTIFICATE-----Generated at Thu Oct 9 20:02:59 2025 by rpki-client