$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/df4be984-ed46-39ee-a7ea-2c73a5b98458.roa File: df4be984-ed46-39ee-a7ea-2c73a5b98458.roa (raw, json) Hash identifier: POJ87UYiG7M+AsZ1as97ykTbioVMGPOuOnc4o+ASp2w= Subject key identifier: B2:A4:86:BD:79:7A:9F:2E:79:5A:C8:AF:A8:8B:AE:C3:BB:AE:18:1D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E774394F7F4274E4FCECF80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/df4be984-ed46-39ee-a7ea-2c73a5b98458.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:43:94:f7:f4:27:4e:4f:ce:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=237e8b0c-d1be-4457-b267-6b144103806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:45:49:44:f6:ad:fc:3b:6f:89:6d:37:84: 04:91:b4:12:b2:53:77:71:b7:d3:21:40:2f:9c:c3: fd:2e:9d:22:29:0b:a3:ea:aa:24:10:0f:3e:a6:24: cc:73:ef:fc:74:b6:d3:2b:8b:d3:15:ef:14:07:68: 82:30:01:ce:5a:5d:8b:34:d8:d4:f7:51:f5:1f:be: ba:e8:7a:59:50:90:13:76:47:33:48:f8:50:8d:7e: 19:5b:1e:3a:20:85:1b:c8:7a:56:58:09:56:2b:e3: 0a:88:0b:e2:33:07:4f:fc:c3:58:0a:d9:30:7a:ae: 3d:41:56:ad:8f:20:1b:89:aa:26:54:9a:ef:47:e3: 69:23:b3:9b:3e:f6:da:ff:4d:63:a4:fc:2b:6c:2b: 36:89:f0:43:77:8a:48:17:84:d6:91:6e:48:ba:14: e2:87:31:da:c2:7d:be:1e:50:56:21:8b:96:e5:37: d7:49:44:3e:8b:9d:de:7c:c5:fa:79:ff:b9:5b:c1: 83:e8:73:e5:d4:72:d4:b3:f9:76:5f:9d:35:a7:ac: e1:56:bf:47:ea:1e:d0:7a:1d:f2:55:61:0d:76:d1: f2:ba:9e:bf:a2:5b:c7:66:21:95:74:2e:d9:2b:ec: 17:b6:23:ca:46:3b:73:70:fa:a3:fc:e0:1c:31:7d: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A4:86:BD:79:7A:9F:2E:79:5A:C8:AF:A8:8B:AE:C3:BB:AE:18:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/df4be984-ed46-39ee-a7ea-2c73a5b98458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d4:89:72:08:eb:5a:5a:7a:57:4b:92:e2:5e:30:24:4b:84: 6c:d2:5f:d8:b8:6c:a4:27:2a:6c:cc:71:cd:eb:26:50:99:93: 26:5f:13:bf:a6:87:7f:9c:75:7d:32:24:b2:d9:f7:d2:6c:2c: 13:99:8c:25:a9:82:b8:dc:28:1f:93:06:9e:90:3e:99:3f:7f: 67:cd:27:34:e2:de:a6:c7:b2:51:0d:9c:b9:bd:03:9c:8c:1c: e7:83:e7:ce:c9:3a:06:bc:19:4e:44:5d:65:09:cc:da:dc:2e: 86:0c:c6:4a:ec:51:cf:af:cc:30:26:58:8c:c5:b5:f6:ab:1d: de:a4:a3:58:88:b9:d3:70:ec:38:b6:1d:7f:ad:54:63:d1:48: e1:9a:9e:82:d5:3b:75:63:ea:44:ea:9f:4c:a4:5d:24:2d:f7: fa:02:68:8a:45:a5:56:11:3c:f9:21:75:b4:ce:56:a5:bf:67: 28:a0:ef:ac:f2:92:9a:c0:3f:0b:96:3c:78:a6:09:6a:b5:94: 01:29:b2:66:34:0b:fd:3b:6e:dd:d1:84:44:d1:34:1b:0b:47: 10:7d:b7:d9:3b:95:bf:4c:a7:68:6e:9d:3b:1e:3c:c8:4d:0d: 28:36:ad:a8:a1:fa:b7:c2:2e:d4:88:69:10:37:b3:54:65:9c: 73:65:9c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0OU9/QnTk/Oz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MjM3ZThiMGMtZDFiZS00NDU3LWIyNjctNmIxNDQxMDM4MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzxFSUT2rfw7b4ltN4QEkbQSslN3cbfTIUAv nMP9Lp0iKQuj6qokEA8+piTMc+/8dLbTK4vTFe8UB2iCMAHOWl2LNNjU91H1H766 6HpZUJATdkczSPhQjX4ZWx46IIUbyHpWWAlWK+MKiAviMwdP/MNYCtkweq49QVat jyAbiaomVJrvR+NpI7ObPvba/01jpPwrbCs2ifBDd4pIF4TWkW5IuhTihzHawn2+ HlBWIYuW5TfXSUQ+i53efMX6ef+5W8GD6HPl1HLUs/l2X501p6zhVr9H6h7Qeh3y VWENdtHyup6/olvHZiGVdC7ZK+wXtiPKRjtzcPqj/OAcMX0j5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKkhr15ep8ueVrIr6iLrsO7rhgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGY0YmU5ODQtZWQ0Ni0z OWVlLWE3ZWEtMmM3M2E1Yjk4NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXUiXII61paeldLkuJeMCRLhGzSX9i4bKQnKmzMcc3rJlCZkyZfE7+m h3+cdX0yJLLZ99JsLBOZjCWpgrjcKB+TBp6QPpk/f2fNJzTi3qbHslENnLm9A5yM HOeD587JOga8GU5EXWUJzNrcLoYMxkrsUc+vzDAmWIzFtfarHd6ko1iIudNw7Di2 HX+tVGPRSOGanoLVO3Vj6kTqn0ykXSQt9/oCaIpFpVYRPPkhdbTOVqW/Zyig76zy kprAPwuWPHimCWq1lAEpsmY0C/07bt3RhETRNBsLRxB9t9k7lb9Mp2hunTsePMhN DSg2raih+rfCLtSIaRA3s1RlnHNlnEY= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:17 2025 by rpki-client