$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db796cf7-2608-3581-86e1-b1edb34fc89f.roa File: db796cf7-2608-3581-86e1-b1edb34fc89f.roa (raw, json) Hash identifier: kzX6OwmG3b4vEnjO4sYNR6p1IqyBUjtCa2wXrqtjeOw= Subject key identifier: EC:7A:01:5B:46:2E:15:74:99:2C:DD:5B:DA:89:9C:AA:1F:BA:2F:0D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D8056A1005844D5E51F0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db796cf7-2608-3581-86e1-b1edb34fc89f.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d8:05:6a:10:05:84:4d:5e:51:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=1976a366-36a2-4137-84c7-276df0c9bcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:a5:14:a6:e1:0a:b8:40:34:d3:e6:cc:ca: f3:84:8d:b3:ec:2b:fc:45:41:cd:0d:ac:f4:62:da: 82:6b:aa:ea:97:4a:37:21:2d:b2:6a:29:04:3f:13: 9f:2c:77:98:78:bd:03:00:36:b5:68:2f:79:81:22: 8d:aa:17:c9:fb:ba:9c:86:d7:74:02:8d:27:66:af: e5:aa:3d:37:32:2b:cd:81:45:b9:6b:11:ee:2a:de: 47:93:de:2b:15:75:b4:b4:61:b4:09:ab:8c:56:81: 4b:f6:80:dc:13:b6:1f:f2:a4:47:45:76:84:50:cf: c3:d0:1b:56:82:54:56:66:10:dd:fa:56:44:d8:c1: bf:3e:dc:21:d0:9c:dc:94:f0:16:40:56:b3:7a:4d: 31:a8:74:2f:03:af:30:c7:e7:5a:f0:39:fe:73:6f: 3f:a5:07:b3:07:27:88:30:f7:6f:45:6d:7c:d3:ff: 5f:4a:6e:3d:f0:46:22:73:bb:a2:09:16:7b:b9:a7: 87:e8:e3:75:d5:95:bc:3c:55:4e:e0:68:d6:da:57: 64:19:5a:0b:47:0a:9b:c5:e4:4c:e8:5d:3b:be:f1: f6:fb:61:89:91:4f:da:57:95:8c:bc:6d:a7:b7:d0: 06:8b:d4:03:e0:57:f0:28:bf:17:41:49:7f:bc:11: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7A:01:5B:46:2E:15:74:99:2C:DD:5B:DA:89:9C:AA:1F:BA:2F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db796cf7-2608-3581-86e1-b1edb34fc89f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d1:6a:de:d9:64:99:cb:ec:0c:79:e7:2f:0f:1f:4e:e0:5e: 25:fe:71:04:30:d8:f7:7f:7a:d8:99:ec:a4:62:8d:62:b0:8c: 08:dc:c4:8f:54:de:33:79:0b:77:52:c8:d9:9d:3b:d8:7e:4c: 20:97:13:f7:74:ef:13:da:11:d8:07:9d:b9:00:02:4b:a1:1c: d8:71:ce:92:0a:3b:f2:89:d8:a8:61:d7:6f:41:cc:f1:ee:5f: fe:4e:e8:b4:2f:7a:a8:9f:6e:3a:38:73:b7:00:1e:17:d1:af: b9:35:e5:b3:56:a0:7e:c3:c7:20:1c:33:01:08:24:64:19:13: a7:dd:d6:55:39:54:fd:fb:be:1c:ee:14:65:64:82:61:cc:40: 29:81:9a:45:9e:95:30:24:c1:98:40:b0:6e:7f:d0:4c:08:21: b1:59:3b:1e:ab:f0:4d:70:ad:dd:1d:85:51:a7:a2:1c:9c:ac: 39:c9:ee:49:95:bb:ca:05:ed:2e:15:1b:16:40:9d:14:ae:88: 63:ca:8d:29:d1:ad:69:72:09:48:34:23:9b:1f:78:24:65:f7: 1b:fe:36:42:b5:06:12:f5:39:20:5b:54:37:54:4b:c7:0a:ec: 1c:26:77:fe:2a:6f:bd:2d:f7:9f:b0:cd:dc:93:a8:a3:7f:a3: 96:a5:98:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdgFahAFhE1eUfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MTk3NmEzNjYtMzZhMi00MTM3LTg0YzctMjc2ZGYwYzliY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ClFKbhCrhANNPmzMrzhI2z7Cv8RUHNDaz0 YtqCa6rql0o3IS2yaikEPxOfLHeYeL0DADa1aC95gSKNqhfJ+7qchtd0Ao0nZq/l qj03MivNgUW5axHuKt5Hk94rFXW0tGG0CauMVoFL9oDcE7Yf8qRHRXaEUM/D0BtW glRWZhDd+lZE2MG/Ptwh0JzclPAWQFazek0xqHQvA68wx+da8Dn+c28/pQezByeI MPdvRW180/9fSm498EYic7uiCRZ7uaeH6ON11ZW8PFVO4GjW2ldkGVoLRwqbxeRM 6F07vvH2+2GJkU/aV5WMvG2nt9AGi9QD4FfwKL8XQUl/vBGmzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx6AVtGLhV0mSzdW9qJnKofui8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGI3OTZjZjctMjYwOC0z NTgxLTg2ZTEtYjFlZGIzNGZjODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTRat7ZZJnL7Ax55y8PH07gXiX+cQQw2Pd/etiZ7KRijWKwjAjcxI9U 3jN5C3dSyNmdO9h+TCCXE/d07xPaEdgHnbkAAkuhHNhxzpIKO/KJ2Khh129BzPHu X/5O6LQveqifbjo4c7cAHhfRr7k15bNWoH7DxyAcMwEIJGQZE6fd1lU5VP37vhzu FGVkgmHMQCmBmkWelTAkwZhAsG5/0EwIIbFZOx6r8E1wrd0dhVGnohycrDnJ7kmV u8oF7S4VGxZAnRSuiGPKjSnRrWlyCUg0I5sfeCRl9xv+NkK1BhL1OSBbVDdUS8cK 7Bwmd/4qb70t95+wzdyTqKN/o5almOQ= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:02 2025 by rpki-client