$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e37423ee-66b0-3c5b-a5ad-d7f69642006e.roa File: e37423ee-66b0-3c5b-a5ad-d7f69642006e.roa (raw, json) Hash identifier: XpVtMgOZNbdrA3994jaRxfC0galO+4RU1uZ6SrtUOkI= Subject key identifier: 85:67:9B:80:6B:ED:A5:3D:73:95:66:CD:B1:CF:44:7D:BD:92:AF:8D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141ED1278FDD0A7B35FF980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e37423ee-66b0-3c5b-a5ad-d7f69642006e.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ed:12:78:fd:d0:a7:b3:5f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=448bf8c3-ccb2-4c6a-96cc-5c458a0efaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:dc:34:46:4b:fd:53:24:d9:be:dd:cc:42: 51:2d:bf:d9:89:6b:b2:4d:01:84:4a:1f:6b:23:97: c2:1b:d0:dc:96:0d:b3:19:cc:e8:ca:28:98:e0:05: 58:be:eb:fa:de:6e:5c:68:99:07:13:a9:71:60:86: db:75:49:e6:06:23:3e:a3:30:17:dd:02:88:41:08: 04:5b:f5:26:5b:60:55:02:57:c1:6b:47:91:f3:07: 70:cc:93:a4:c0:b3:f6:9e:96:9b:f3:87:65:41:c7: 60:1b:ab:fb:0a:f5:f3:42:94:2e:3c:d9:25:de:e4: 23:87:47:ea:92:c4:3c:31:d3:18:2e:d9:9f:d8:da: d4:d4:0e:a8:e9:0a:b1:bd:1a:cc:88:88:89:13:35: 26:3a:6b:4b:db:b9:f6:53:e4:eb:1f:67:19:07:cd: 60:cb:55:a6:4f:8c:4d:19:55:a2:64:91:db:31:37: f1:fd:aa:bd:a0:b5:80:05:22:04:3e:2e:21:5d:09: 13:4c:3b:50:95:43:2d:12:62:f4:a3:95:d1:a9:38: 19:c3:1e:33:50:ae:f8:00:ca:bf:58:02:f5:ff:20: 00:3a:fe:c8:5a:e7:1e:fa:1d:26:84:89:47:1b:70: 7f:1d:9c:cc:de:af:90:dd:33:9c:c4:3b:dc:49:1a: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:9B:80:6B:ED:A5:3D:73:95:66:CD:B1:CF:44:7D:BD:92:AF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e37423ee-66b0-3c5b-a5ad-d7f69642006e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2c:f2:f2:1f:08:be:a8:a2:6d:09:d6:1e:23:f8:fa:18:6f: b7:2a:68:07:9e:bf:20:04:a6:5b:79:b7:cb:04:23:e3:db:6f: e1:bf:a2:9d:79:a1:e8:a1:59:7f:b8:c7:9a:7c:93:44:52:f7: 42:dd:7a:56:0e:96:1a:c6:19:6b:ac:79:ba:88:6d:34:b7:bf: 11:dd:5f:57:ac:78:41:98:2d:2a:d9:10:a9:7e:98:4a:02:47: 45:d5:f1:4b:96:0a:42:98:d1:46:8a:46:f8:29:16:f5:0d:aa: 7e:ad:f2:37:34:32:f0:2e:3c:7e:de:6b:fc:59:8b:61:e5:97: 8b:73:a1:ba:68:99:b9:a0:32:d6:99:6b:7e:7d:8f:7b:04:03: a7:7c:7f:fd:4f:33:69:3f:2e:b8:f7:b9:8d:b0:2d:b0:53:83: dc:aa:c6:a1:dc:e0:ea:ca:6f:5d:73:a4:63:8c:0a:d3:65:16: 14:46:e1:ea:51:97:80:c5:29:3a:38:fd:ee:53:23:95:a8:17: 59:a4:da:e9:c9:1d:bc:4b:6b:39:80:86:89:c0:7c:3b:d1:db: 34:8b:66:9b:76:21:50:4b:7c:29:ec:b2:dd:6c:be:56:f0:cb: 4a:e1:67:ca:23:05:16:70:5d:70:aa:ff:7c:92:53:bd:8d:35: 27:df:35:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe0SeP3Qp7Nf+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NDQ4YmY4YzMtY2NiMi00YzZhLTk2Y2MtNWM0NThhMGVmYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrfcNEZL/VMk2b7dzEJRLb/ZiWuyTQGESh9r I5fCG9Dclg2zGczoyiiY4AVYvuv63m5caJkHE6lxYIbbdUnmBiM+ozAX3QKIQQgE W/UmW2BVAlfBa0eR8wdwzJOkwLP2npab84dlQcdgG6v7CvXzQpQuPNkl3uQjh0fq ksQ8MdMYLtmf2NrU1A6o6QqxvRrMiIiJEzUmOmtL27n2U+TrH2cZB81gy1WmT4xN GVWiZJHbMTfx/aq9oLWABSIEPi4hXQkTTDtQlUMtEmL0o5XRqTgZwx4zUK74AMq/ WAL1/yAAOv7IWuce+h0mhIlHG3B/HZzM3q+Q3TOcxDvcSRoB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVnm4Br7aU9c5VmzbHPRH29kq+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTM3NDIzZWUtNjZiMC0z YzViLWE1YWQtZDdmNjk2NDIwMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQs8vIfCL6oom0J1h4j+PoYb7cqaAeevyAEplt5t8sEI+Pbb+G/op15 oeihWX+4x5p8k0RS90LdelYOlhrGGWusebqIbTS3vxHdX1eseEGYLSrZEKl+mEoC R0XV8UuWCkKY0UaKRvgpFvUNqn6t8jc0MvAuPH7ea/xZi2Hll4tzobpombmgMtaZ a359j3sEA6d8f/1PM2k/Lrj3uY2wLbBTg9yqxqHc4OrKb11zpGOMCtNlFhRG4epR l4DFKTo4/e5TI5WoF1mk2unJHbxLazmAhonAfDvR2zSLZpt2IVBLfCnsst1svlbw y0rhZ8ojBRZwXXCq/3ySU72NNSffNbs= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:59 2025 by rpki-client