$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa File: dfd93ee2-24f3-3c72-927e-16cb7326efed.roa (raw, json) Hash identifier: fep3T4z2pP54P4fep1V3RmsByHaKHYFgLYyn7FhqUwk= Subject key identifier: 23:75:FD:E5:AA:B5:32:1C:B6:F1:F2:A8:DD:E7:5D:3A:BD:A8:6D:C5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E774348053C1E036AD20980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:43:48:05:3c:1e:03:6a:d2:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=42f2d683-a172-448d-ab3c-b96b018be032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:09:9c:d5:bb:8f:dc:d9:66:c7:d6:30:c4: c2:86:a6:f4:27:da:f6:d3:77:f7:e5:ad:c9:53:00: 27:25:58:9b:52:a1:5f:7c:f3:25:9b:e4:ac:88:6e: 65:9b:7f:0d:70:85:ea:67:c8:93:0d:14:05:cc:d0: 03:5e:5b:07:25:e2:7b:2d:b1:b5:fc:09:99:e5:57: c3:c7:d0:e0:1d:7f:16:5f:a6:4a:20:75:0f:85:d3: 77:5c:86:78:d5:e1:10:3f:e6:28:ef:6b:de:ca:e1: 2e:06:ee:9b:5b:7c:b6:43:0f:3d:37:b9:49:8d:ed: b5:be:a5:5e:ac:92:2f:a6:a2:24:5f:4d:15:fa:21: 1b:3b:f4:b5:04:53:be:cb:dd:ea:2c:3f:7f:3a:22: df:77:69:2c:5c:2b:04:2c:eb:85:2a:ae:6c:26:4e: 42:9a:79:0c:07:95:94:5a:d4:a6:b4:f9:61:44:9b: 30:ac:28:ff:2b:47:a0:0b:13:d1:c6:6f:d1:e5:92: 3e:10:9d:fc:d7:ce:3c:e1:70:20:69:09:ae:8d:34: 5b:dc:35:de:03:b5:fa:69:e4:57:e2:8d:3d:e0:dd: ce:d8:96:3b:66:ad:54:5f:31:97:30:ef:0a:2b:6c: 66:63:e9:ad:93:73:eb:54:8e:3e:83:27:ce:57:fb: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:75:FD:E5:AA:B5:32:1C:B6:F1:F2:A8:DD:E7:5D:3A:BD:A8:6D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:19:ef:78:12:97:6d:12:4b:43:51:63:42:eb:7e:f8:a0:a6: c2:29:05:3b:5d:cc:8e:bc:a6:ca:c9:7e:ea:25:fd:b7:3b:8f: 46:13:b1:6c:ef:2f:09:cb:bb:6b:42:37:d4:72:d8:30:0c:fc: 6d:21:4b:7f:fa:4d:82:59:f1:32:97:47:c8:22:f5:0d:cb:ae: 84:62:c5:e6:e5:1d:12:80:b0:fb:ba:0d:44:48:b2:b5:b8:d9: d2:bf:10:f9:88:40:42:1c:b4:35:ed:45:a5:c9:8f:f1:fe:b9: 08:8b:60:fa:8a:12:5f:a2:5f:2c:2c:3e:50:83:c3:8b:a2:15: 0d:68:70:38:88:cd:6f:18:e1:52:dd:33:da:dc:55:9b:f7:9e: ea:3a:19:4c:b4:6e:20:18:cb:a9:f2:ea:3f:28:ca:7c:35:de: 2d:48:28:90:37:a0:68:38:69:a6:4c:44:4b:06:7a:0d:8e:fb: 93:d0:87:e5:0a:88:13:14:ee:46:6a:fc:f3:55:8d:48:29:62: d2:f9:f0:52:e1:6c:ee:66:7b:3a:c7:2f:2c:3d:99:f3:f9:86: c4:ed:03:22:9a:6e:f2:b9:d6:11:54:cf:66:47:23:3a:60:30: 18:e5:f9:40:86:77:4d:b2:18:ad:28:07:1a:71:c3:94:0d:ed: 0f:a7:ba:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0NIBTweA2rSCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NDJmMmQ2ODMtYTE3Mi00NDhkLWFiM2MtYjk2YjAxOGJlMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA8JnNW7j9zZZsfWMMTChqb0J9r203f35a3J UwAnJVibUqFffPMlm+SsiG5lm38NcIXqZ8iTDRQFzNADXlsHJeJ7LbG1/AmZ5VfD x9DgHX8WX6ZKIHUPhdN3XIZ41eEQP+Yo72veyuEuBu6bW3y2Qw89N7lJje21vqVe rJIvpqIkX00V+iEbO/S1BFO+y93qLD9/OiLfd2ksXCsELOuFKq5sJk5CmnkMB5WU WtSmtPlhRJswrCj/K0egCxPRxm/R5ZI+EJ3818484XAgaQmujTRb3DXeA7X6aeRX 4o094N3O2JY7Zq1UXzGXMO8KK2xmY+mtk3PrVI4+gyfOV/t6BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN1/eWqtTIctvHyqN3nXTq9qG3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGZkOTNlZTItMjRmMy0z YzcyLTkyN2UtMTZjYjczMjZlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIZ73gSl20SS0NRY0LrfvigpsIpBTtdzI68psrJfuol/bc7j0YTsWzv LwnLu2tCN9Ry2DAM/G0hS3/6TYJZ8TKXR8gi9Q3LroRixeblHRKAsPu6DURIsrW4 2dK/EPmIQEIctDXtRaXJj/H+uQiLYPqKEl+iXywsPlCDw4uiFQ1ocDiIzW8Y4VLd M9rcVZv3nuo6GUy0biAYy6ny6j8oynw13i1IKJA3oGg4aaZMREsGeg2O+5PQh+UK iBMU7kZq/PNVjUgpYtL58FLhbO5mezrHLyw9mfP5hsTtAyKabvK51hFUz2ZHIzpg MBjl+UCGd02yGK0oBxpxw5QN7Q+nung= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:05 2025 by rpki-client