$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa File: d928e18b-9866-37ab-a256-596a1223db7b.roa (raw, json) Hash identifier: izIJdnVJw1wsXxwx1MghBMvexFJOWmvqzigY+mhQRAU= Subject key identifier: 43:D0:80:05:C3:4B:C3:23:7F:41:CC:7E:61:3E:5F:A2:EB:EC:82:FE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B76F273AA84839064F40CC1C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 36411 IP address blocks: 104.132.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:73:aa:84:83:90:64:f4:0c:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3326896c-ba65-4007-8e8a-4d815913fe46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:9b:8b:0c:a5:ca:2d:fe:88:3e:5d:1f:f6: 26:25:6f:c0:f2:a1:9f:c6:38:85:36:3a:ae:32:19: eb:95:bc:6a:0c:06:b3:e4:f9:18:9c:67:6c:8b:9d: b7:50:01:a9:e7:49:0f:b9:8e:0e:7a:23:1c:ae:dc: b0:50:f3:8c:fc:fd:c8:42:fa:94:3a:92:2c:f2:a0: c6:67:5c:86:9a:d1:c3:40:65:d8:fc:6b:3a:3f:08: 38:9e:e7:87:c7:a6:14:23:3d:04:20:2a:d2:27:3b: 96:d6:b3:3c:3e:0c:f6:d7:71:4b:b9:36:30:54:c8: 84:38:e1:45:37:5d:d2:14:89:e7:80:dd:92:db:11: c5:29:1c:88:5f:df:62:69:7d:92:c0:a5:4e:83:6f: e8:e1:4e:28:2c:d2:d2:67:60:29:58:21:b7:ef:21: 13:15:24:5b:87:e6:c5:d5:81:89:68:0f:7b:19:59: 44:57:5d:ea:e9:e7:c3:ec:92:12:4e:f6:53:5a:a9: 1f:c1:c3:c5:02:34:dd:34:29:bc:2d:42:bd:3a:4a: fe:2b:6d:43:35:4d:22:06:ff:fa:30:b9:b9:3f:4b: 96:6f:c2:a7:a7:25:e0:de:a7:08:ab:6f:2f:28:38: 28:c4:e1:ca:46:1c:44:5a:c5:cc:44:6b:32:1a:f1: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:80:05:C3:4B:C3:23:7F:41:CC:7E:61:3E:5F:A2:EB:EC:82:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fa:5e:e3:f1:e5:a4:76:15:0e:ca:9d:9c:0f:3b:30:1b:fb: 0e:10:4c:59:4a:1c:69:ca:e1:73:7d:8f:0f:0f:1c:58:65:69: c1:8d:2e:d1:92:c4:93:e4:aa:63:6f:73:bc:7a:51:19:e5:65: a4:e2:c4:42:16:a4:22:03:c9:c0:e4:cf:41:4c:2f:59:f7:76: a1:1d:25:a0:1c:a5:2a:9d:db:dc:a8:3a:3a:fa:55:0f:35:ef: 30:bc:71:07:ae:2c:8d:cd:21:f3:8d:49:0a:ff:71:f2:95:92: a2:2f:ee:4a:53:50:20:00:06:b8:5e:99:aa:c2:9e:60:31:da: 61:53:b2:50:24:e4:a5:fc:21:60:b6:14:86:9a:57:d2:d3:d7: fe:c1:ba:67:dc:18:be:de:39:f4:ac:15:28:37:d0:fa:ef:5e: f5:08:14:1d:93:44:d3:2e:70:6d:4a:4c:85:c5:dc:59:cb:0b: 5b:9e:80:4f:5a:33:e6:e2:b9:0d:0d:1c:db:b3:1e:c7:26:e8: 2b:51:dd:0d:3f:71:f5:fc:10:93:15:e0:3c:3a:d6:33:ba:8e: 60:8d:bd:c5:a0:66:8c:2f:9f:a0:6c:6a:70:f6:b1:c9:72:9a: 25:ce:15:8a:9b:eb:31:69:e8:1c:c8:22:97:0f:0f:45:a4:2c: 67:76:f2:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28nOqhIOQZPQMwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzMyNjg5NmMtYmE2NS00MDA3LThlOGEtNGQ4MTU5MTNmZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7ebiwylyi3+iD5dH/YmJW/A8qGfxjiFNjqu MhnrlbxqDAaz5PkYnGdsi523UAGp50kPuY4OeiMcrtywUPOM/P3IQvqUOpIs8qDG Z1yGmtHDQGXY/Gs6Pwg4nueHx6YUIz0EICrSJzuW1rM8Pgz213FLuTYwVMiEOOFF N13SFInngN2S2xHFKRyIX99iaX2SwKVOg2/o4U4oLNLSZ2ApWCG37yETFSRbh+bF 1YGJaA97GVlEV13q6efD7JISTvZTWqkfwcPFAjTdNCm8LUK9Okr+K21DNU0iBv/6 MLm5P0uWb8KnpyXg3qcIq28vKDgoxOHKRhxEWsXMRGsyGvEeTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPQgAXDS8Mjf0HMfmE+X6Lr7IL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDkyOGUxOGItOTg2Ni0z N2FiLWEyNTYtNTk2YTEyMjNkYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj6XuPx5aR2FQ7KnZwPOzAb+w4QTFlKHGnK4XN9jw8PHFhlacGNLtGS xJPkqmNvc7x6URnlZaTixEIWpCIDycDkz0FML1n3dqEdJaAcpSqd29yoOjr6VQ81 7zC8cQeuLI3NIfONSQr/cfKVkqIv7kpTUCAABrhemarCnmAx2mFTslAk5KX8IWC2 FIaaV9LT1/7BumfcGL7eOfSsFSg30PrvXvUIFB2TRNMucG1KTIXF3FnLC1uegE9a M+biuQ0NHNuzHscm6CtR3Q0/cfX8EJMV4Dw61jO6jmCNvcWgZowvn6BsanD2scly miXOFYqb6zFp6BzIIpcPD0WkLGd28pM= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:10 2025 by rpki-client