$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e253e130-7676-3a9e-9ce0-1951c8afc98b.roa File: e253e130-7676-3a9e-9ce0-1951c8afc98b.roa (raw, json) Hash identifier: nkhG35WVss1xMlXBKUUD+EB+BkWWvkNhkg4GZnxK20Y= Subject key identifier: 44:83:45:FC:61:79:AE:86:5F:A2:CB:88:BA:F1:E4:32:45:C3:E9:A9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E774459C7DBE869AADF2480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e253e130-7676-3a9e-9ce0-1951c8afc98b.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:44:59:c7:db:e8:69:aa:df:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=aad1512f-2694-44c2-a5ac-894700790c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:73:5c:d6:89:92:a8:57:f1:49:45:06:07: f1:0e:62:85:1f:5b:63:d1:1f:3f:b3:34:48:f1:b2: 17:de:fc:db:2b:32:a3:5b:c7:25:ce:91:1c:6b:82: aa:69:d8:75:ae:f4:2f:8b:60:fc:03:38:6a:3d:66: 93:47:c8:26:6d:c8:39:66:7b:9a:c3:75:70:f7:e0: db:10:da:3a:e9:79:96:0d:ad:ed:62:9b:bd:eb:19: 8c:af:85:dc:f5:3c:93:90:d4:01:2f:9b:36:7d:e6: 6e:d8:28:ab:2f:eb:22:1c:53:2c:ef:68:4e:a8:1f: e6:18:42:92:f1:0c:2c:69:75:99:68:95:e3:0e:0e: a5:3b:0f:50:3c:52:0e:e1:82:65:ad:e0:f1:c6:b5: 0c:16:98:57:e7:a6:15:81:c5:a4:07:32:7c:70:b6: 07:05:e5:d4:cf:c3:57:b3:e1:56:fe:6c:2d:44:5d: 9b:63:5d:49:60:5d:db:de:00:de:21:3f:8c:75:f0: 20:48:9a:06:5d:e0:7b:50:27:d5:b2:0b:be:3e:ab: 73:91:ba:ab:1b:9b:da:66:67:c2:59:03:8f:53:bc: b4:21:97:ae:c4:86:fb:c6:52:51:5d:f3:e3:6e:ff: 56:34:ad:44:a3:d3:65:ed:69:16:e3:36:77:f0:5f: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:45:FC:61:79:AE:86:5F:A2:CB:88:BA:F1:E4:32:45:C3:E9:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e253e130-7676-3a9e-9ce0-1951c8afc98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:43:88:ed:36:e7:39:48:52:1b:8e:10:2d:ca:b1:4b:35:a9: 51:ec:0c:82:59:5e:ba:e4:68:89:41:f3:e2:28:92:04:f3:4d: ae:21:1e:1a:09:1d:65:19:7f:d3:59:2b:bb:8d:2a:ea:74:7b: 79:58:e6:9c:3e:ae:e0:ed:bf:26:17:c9:89:c1:02:39:70:12: a4:1e:5e:e5:f7:25:b4:5c:dd:1e:bf:6f:d1:68:ce:af:5e:36: ef:1e:57:a0:8a:d4:d0:4f:e9:de:7d:35:4f:f7:92:9d:3d:3d: a9:52:c8:d1:82:1d:3e:18:d9:df:aa:d1:10:55:65:3e:4f:9d: 31:42:c5:e4:ab:ea:6d:4e:52:d8:06:35:3c:66:e7:a8:28:85: a1:60:40:4f:4e:02:bd:64:6f:dd:eb:1a:90:26:2d:34:22:a3: 58:41:97:24:8e:b6:93:10:13:f8:3a:06:b7:eb:38:2c:4a:4b: 46:54:11:0a:52:57:19:43:da:79:fb:53:61:0f:09:46:eb:e5: 22:9a:fb:37:29:6e:bd:16:d2:5a:4d:65:13:12:dd:74:14:64: 0a:0a:50:c1:38:de:0b:7b:5e:4e:9f:9e:0d:5d:91:83:84:cb: 23:58:03:3c:42:9a:09:38:d6:39:75:24:6a:13:39:a4:a1:03: d4:2c:06:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0RZx9voaarfJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YWFkMTUxMmYtMjY5NC00NGMyLWE1YWMtODk0NzAwNzkwYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFzXNaJkqhX8UlFBgfxDmKFH1tj0R8/szRI 8bIX3vzbKzKjW8clzpEca4Kqadh1rvQvi2D8AzhqPWaTR8gmbcg5Znuaw3Vw9+Db ENo66XmWDa3tYpu96xmMr4Xc9TyTkNQBL5s2feZu2CirL+siHFMs72hOqB/mGEKS 8QwsaXWZaJXjDg6lOw9QPFIO4YJlreDxxrUMFphX56YVgcWkBzJ8cLYHBeXUz8NX s+FW/mwtRF2bY11JYF3b3gDeIT+MdfAgSJoGXeB7UCfVsgu+PqtzkbqrG5vaZmfC WQOPU7y0IZeuxIb7xlJRXfPjbv9WNK1Eo9Nl7WkW4zZ38F9FHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESDRfxhea6GX6LLiLrx5DJFw+mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTI1M2UxMzAtNzY3Ni0z YTllLTljZTAtMTk1MWM4YWZjOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNDiO025zlIUhuOEC3KsUs1qVHsDIJZXrrkaIlB8+IokgTzTa4hHhoJ HWUZf9NZK7uNKup0e3lY5pw+ruDtvyYXyYnBAjlwEqQeXuX3JbRc3R6/b9Fozq9e Nu8eV6CK1NBP6d59NU/3kp09PalSyNGCHT4Y2d+q0RBVZT5PnTFCxeSr6m1OUtgG NTxm56gohaFgQE9OAr1kb93rGpAmLTQio1hBlySOtpMQE/g6BrfrOCxKS0ZUEQpS VxlD2nn7U2EPCUbr5SKa+zcpbr0W0lpNZRMS3XQUZAoKUME43gt7Xk6fng1dkYOE yyNYAzxCmgk41jl1JGoTOaShA9QsBrE= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:45 2025 by rpki-client