$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa File: e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa (raw, json) Hash identifier: Jm65KAOQnoeDdHJbKGM3eWRsSmrSoxSQbUPgKy24nzU= Subject key identifier: 0F:03:1D:AC:C7:3B:EA:AF:DD:A6:C7:8A:9F:86:64:29:C8:03:04:AF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8CCF96FEC5BA2412B000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8c:cf:96:fe:c5:ba:24:12:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c4092a55-4496-4acc-ad73-0636be12a43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:a0:01:8c:18:02:8f:f9:24:3b:4f:b4:6b: c6:e5:f0:38:83:2c:16:11:6c:74:b6:b0:be:5b:e3: e2:9b:be:4f:56:1b:97:44:23:f6:d8:6f:05:84:39: a7:60:47:94:20:84:5d:07:77:c8:ce:1b:cd:f5:72: 85:ea:0f:12:0d:51:d0:e9:96:75:21:fb:3c:f8:9f: df:aa:41:62:dd:38:6f:a1:36:d6:3c:b3:95:61:9b: 36:2e:da:ba:3d:04:8c:bf:45:42:c5:02:e7:c6:8c: ae:2e:ad:eb:7b:89:73:b3:b1:fa:f0:48:d6:c4:17: 29:89:9b:d5:ac:6c:2a:be:06:97:fa:3c:57:b1:fc: b5:25:a3:13:0a:ff:12:f3:98:04:40:06:66:c6:93: e0:ff:d3:91:cd:b6:2d:06:2d:d7:52:61:5a:26:5b: 88:a7:ec:f1:06:cf:ff:1d:9c:ec:14:6d:fe:f1:7e: d7:0a:e9:40:a5:9a:6f:84:b1:eb:f8:b9:39:70:9e: 22:44:d9:58:5b:b2:bd:c0:c5:1c:3f:d3:45:d1:ec: 8a:39:29:20:3d:04:05:3e:2e:28:55:6f:90:a3:7c: 73:50:5b:6b:c5:cc:05:80:4e:d2:92:c9:d0:3d:1f: e2:be:34:75:44:5c:e9:45:e7:f7:01:40:82:e6:98: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:1D:AC:C7:3B:EA:AF:DD:A6:C7:8A:9F:86:64:29:C8:03:04:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e7efe4ec-b4d4-3f9f-bc4e-e9835b5598c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e7:87:34:06:6c:c9:63:17:e7:ca:08:d2:fc:07:06:07:c0: 0f:94:87:ba:c5:64:45:59:b5:03:c3:83:31:c2:37:e0:50:bc: 98:93:fa:f0:ed:96:11:dc:c2:c4:7c:9a:87:8c:6e:74:11:bd: 01:3d:90:f0:19:0e:92:92:7b:66:34:09:fa:c8:6d:d6:c3:ed: 6d:1d:dc:24:25:98:75:b8:a9:85:3c:fc:9d:1b:a1:9c:74:1f: 7e:4e:58:d6:8a:8d:03:7c:54:da:94:c7:32:7c:21:35:69:6f: af:41:2c:b3:d9:12:46:15:78:8f:c4:76:6a:33:74:44:10:1a: b6:f9:a9:b7:4a:74:f9:e8:15:ad:2c:c4:e8:02:47:75:61:45: 49:2e:e8:fa:7c:7c:56:cc:9c:95:b6:cf:84:88:2a:e0:42:ad: f9:8b:0b:36:2b:d2:2d:27:27:c5:ba:c4:ab:5f:41:e6:ba:76: 91:f2:9e:38:71:6c:e9:63:70:ae:ad:f8:82:5b:3e:98:a8:2c: 45:ef:91:d4:66:8d:0f:6c:78:21:98:b2:73:96:e0:f1:ae:e6: e9:b2:db:93:e3:e9:76:d0:7e:d8:15:9b:30:e8:3d:de:85:24: 45:b8:f6:92:d8:04:fe:fb:5a:b4:8f:c5:ae:3a:29:ee:08:94: cb:ca:00:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIzPlv7FuiQSsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzQwOTJhNTUtNDQ5Ni00YWNjLWFkNzMtMDYzNmJlMTJhNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaWgAYwYAo/5JDtPtGvG5fA4gywWEWx0trC+ W+Pim75PVhuXRCP22G8FhDmnYEeUIIRdB3fIzhvN9XKF6g8SDVHQ6ZZ1Ifs8+J/f qkFi3ThvoTbWPLOVYZs2Ltq6PQSMv0VCxQLnxoyuLq3re4lzs7H68EjWxBcpiZvV rGwqvgaX+jxXsfy1JaMTCv8S85gEQAZmxpPg/9ORzbYtBi3XUmFaJluIp+zxBs// HZzsFG3+8X7XCulApZpvhLHr+Lk5cJ4iRNlYW7K9wMUcP9NF0eyKOSkgPQQFPi4o VW+Qo3xzUFtrxcwFgE7SksnQPR/ivjR1RFzpRef3AUCC5pgauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8DHazHO+qv3abHip+GZCnIAwSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTdlZmU0ZWMtYjRkNC0z ZjlmLWJjNGUtZTk4MzViNTU5OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLnhzQGbMljF+fKCNL8BwYHwA+Uh7rFZEVZtQPDgzHCN+BQvJiT+vDt lhHcwsR8moeMbnQRvQE9kPAZDpKSe2Y0CfrIbdbD7W0d3CQlmHW4qYU8/J0boZx0 H35OWNaKjQN8VNqUxzJ8ITVpb69BLLPZEkYVeI/EdmozdEQQGrb5qbdKdPnoFa0s xOgCR3VhRUku6Pp8fFbMnJW2z4SIKuBCrfmLCzYr0i0nJ8W6xKtfQea6dpHynjhx bOljcK6t+IJbPpioLEXvkdRmjQ9seCGYsnOW4PGu5umy25Pj6XbQftgVmzDoPd6F JEW49pLYBP77WrSPxa46Ke4IlMvKAN8= -----END CERTIFICATE-----Generated at Thu Oct 9 21:42:12 2025 by rpki-client