$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd88d089-543b-3c99-9f66-b7507b46ea60.roa File: dd88d089-543b-3c99-9f66-b7507b46ea60.roa (raw, json) Hash identifier: 1g7pdwcVJZBqQwzHUUskdCNbEL49xrgN3yEF1wAWdIM= Subject key identifier: 0C:E7:5C:B9:D9:BC:03:9E:19:56:FD:9B:E5:41:D2:0D:2D:28:FC:11 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8F08417AF1F668DE5A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd88d089-543b-3c99-9f66-b7507b46ea60.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8f:08:41:7a:f1:f6:68:de:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=3ea471ad-bd54-4c4a-9941-90034a519f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:22:10:52:ac:01:2d:1d:09:60:71:a8:70: 85:3a:29:6e:8f:35:76:49:a7:fd:98:14:af:45:0c: b6:b7:ee:c5:32:c7:d0:50:19:3c:b9:8f:99:c1:b3: 34:ea:9b:ad:de:c0:88:b4:56:16:44:93:f5:97:91: fb:79:db:0a:8f:37:66:66:60:a1:72:fc:7e:38:a6: 40:6b:2f:0d:fb:5f:2c:17:4a:4c:03:fa:80:5f:25: 7d:66:8a:8c:d7:89:df:a5:0c:23:9c:9c:70:8b:61: d2:86:7f:4f:ea:73:ae:db:60:f6:5d:cd:2f:1c:0a: db:29:e8:6f:52:01:4f:11:00:7a:f4:37:fa:69:bc: b1:1f:6d:de:48:fa:d8:3c:0a:04:c9:0b:68:b9:f8: a7:5c:25:be:b8:a8:e4:6b:ef:af:13:4c:80:0e:cb: 6d:78:65:da:86:a7:3d:5b:a9:2f:14:b3:a6:0b:29: b2:a0:93:a2:ea:ac:e6:a7:57:f6:b1:c2:a4:00:ee: da:4f:88:a8:2b:4f:4d:f0:1a:82:1d:a4:be:c9:f1: 8b:c4:70:f3:1b:8a:35:dd:f5:b4:e7:d6:1c:82:84: 9b:95:89:94:30:cd:f4:1f:0e:27:99:bd:5f:09:c9: a7:21:7b:d6:4e:04:30:71:2a:2d:aa:67:b2:56:ff: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:5C:B9:D9:BC:03:9E:19:56:FD:9B:E5:41:D2:0D:2D:28:FC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd88d089-543b-3c99-9f66-b7507b46ea60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6e:41:23:cd:e2:c0:8d:fb:a4:62:9b:7d:c1:d6:6c:d4:da: 78:e9:a1:68:71:6b:62:0c:80:d3:a0:f1:a5:bf:d0:12:75:b6: 3a:2d:dc:05:cd:80:f0:60:85:8a:10:2f:30:9b:26:6d:a4:c8: 47:73:be:f3:9d:55:ca:38:33:60:bc:04:9c:dc:26:e9:6e:b5: d8:f3:a8:3b:0b:17:6b:af:39:5b:fb:3e:14:8e:e7:03:cd:02: 46:a2:9d:82:e0:81:07:dc:ab:d7:25:27:e0:32:ff:31:4a:18: 19:56:22:34:5d:08:53:89:f9:5a:ff:47:1c:c7:50:ca:51:99: c7:67:cf:3e:61:3c:a1:b8:c3:05:46:2e:9b:ff:99:60:a8:f1: e6:03:fc:c2:1e:4b:87:07:e0:70:9f:94:c4:b6:fd:3e:03:75: 26:98:23:01:2d:37:0e:4c:8c:c4:83:d9:bc:26:d4:7a:b7:92: c2:5c:2b:21:51:7f:a5:1d:9c:45:8a:79:77:0f:7f:18:76:c8: 6d:34:52:03:f3:00:63:14:d6:2f:f5:25:ec:13:14:f5:de:e4: 5e:4f:b6:64:7e:56:c0:0f:e8:ee:3a:16:f9:33:30:41:1d:38: 02:4a:0d:22:6e:7f:1f:d8:b9:08:6d:0c:9c:e1:6b:65:4f:45: e1:e7:88:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDI8IQXrx9mjeWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk M2VhNDcxYWQtYmQ1NC00YzRhLTk5NDEtOTAwMzRhNTE5ZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaMiEFKsAS0dCWBxqHCFOilujzV2Saf9mBSv RQy2t+7FMsfQUBk8uY+ZwbM06put3sCItFYWRJP1l5H7edsKjzdmZmChcvx+OKZA ay8N+18sF0pMA/qAXyV9ZoqM14nfpQwjnJxwi2HShn9P6nOu22D2Xc0vHArbKehv UgFPEQB69Df6abyxH23eSPrYPAoEyQtoufinXCW+uKjka++vE0yADstteGXahqc9 W6kvFLOmCymyoJOi6qzmp1f2scKkAO7aT4ioK09N8BqCHaS+yfGLxHDzG4o13fW0 59YcgoSblYmUMM30Hw4nmb1fCcmnIXvWTgQwcSotqmeyVv/UUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAznXLnZvAOeGVb9m+VB0g0tKPwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGQ4OGQwODktNTQzYi0z Yzk5LTlmNjYtYjc1MDdiNDZlYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEduQSPN4sCN+6Rim33B1mzU2njpoWhxa2IMgNOg8aW/0BJ1tjot3AXN gPBghYoQLzCbJm2kyEdzvvOdVco4M2C8BJzcJulutdjzqDsLF2uvOVv7PhSO5wPN AkainYLggQfcq9clJ+Ay/zFKGBlWIjRdCFOJ+Vr/RxzHUMpRmcdnzz5hPKG4wwVG Lpv/mWCo8eYD/MIeS4cH4HCflMS2/T4DdSaYIwEtNw5MjMSD2bwm1Hq3ksJcKyFR f6UdnEWKeXcPfxh2yG00UgPzAGMU1i/1JewTFPXe5F5PtmR+VsAP6O46FvkzMEEd OAJKDSJufx/YuQhtDJzha2VPReHniMc= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:58 2025 by rpki-client