$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa File: e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa (raw, json) Hash identifier: nVy285d3d4wUpj5w+D4N6g9LMJpFkRtnj+f7j8+Wj7A= Subject key identifier: 76:43:63:0F:DC:1C:B4:62:24:4B:6F:91:33:7C:73:EE:A6:19:B0:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3763C6D5D7C7A9A9AAF7C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:63:c6:d5:d7:c7:a9:a9:aa:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c9d3518f-301c-4ba6-8aa9-be11ef552ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:7b:71:83:bf:ac:4a:9d:21:59:7b:fd:6f: f3:ea:c4:82:c6:7f:fc:95:1a:4c:b7:82:78:f4:28: 8f:4d:19:41:a4:2b:2f:af:b1:4f:81:32:74:a1:f0: 4e:3c:8c:43:14:93:7e:8d:a0:1a:90:21:dd:1e:2e: 2e:40:d2:14:37:75:02:51:1a:b9:10:69:99:b5:42: 58:77:35:1e:4b:37:32:1a:b7:be:b6:19:90:d1:c1: bd:1d:9d:dd:e4:bf:a8:00:25:d6:8e:07:52:6d:52: 7c:9e:0a:26:69:50:7a:20:11:4b:4f:4b:2c:89:36: 3c:f7:a9:9c:3f:8a:1f:60:9d:6b:e0:eb:31:9b:71: fc:11:33:ae:72:03:08:ac:41:f1:aa:62:c8:c0:a4: 42:95:6a:98:e7:8a:f3:83:3c:76:66:1f:cb:f0:01: 45:0c:ce:3f:0e:de:f4:58:78:58:3c:14:c9:a7:b1: 1c:ba:fa:3c:d4:b0:05:58:f7:4d:34:4f:6d:b9:96: e0:4e:fe:c4:1d:8b:dd:30:eb:9d:eb:dc:84:e0:db: 0d:92:0e:a8:00:72:02:76:d7:3e:85:fe:0d:11:f6: 0f:e3:d5:62:33:14:a8:55:25:5f:21:1a:61:88:1c: 57:0e:d8:ac:05:28:4e:9c:dc:c6:38:7a:e1:90:b7: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:43:63:0F:DC:1C:B4:62:24:4B:6F:91:33:7C:73:EE:A6:19:B0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:d3:8d:be:d2:80:fd:d7:57:0b:23:37:ea:1a:50:09:32:0d: 43:5a:9d:34:90:19:a5:1b:d2:98:d3:65:29:51:d3:4e:d5:6d: 5a:ed:18:9a:c1:93:95:2b:65:56:5a:db:f8:00:03:ef:b5:2f: 06:9e:71:28:01:8f:17:f9:21:62:09:af:0d:76:f6:17:96:20: 24:ce:a0:74:31:c6:30:63:1b:16:24:3d:21:1b:57:07:b7:9b: 12:80:e3:29:fc:86:f6:c9:c4:e2:79:05:e4:8c:b9:51:68:a5: bc:fe:f3:b6:d7:56:73:69:7f:86:48:2d:9f:1d:33:21:e0:e0: f3:b0:1f:a8:94:fa:44:de:51:07:3e:71:e6:05:af:a8:1c:41: b9:78:22:20:42:2d:94:2f:36:bb:0c:de:60:10:fd:43:7a:8c: f2:a0:10:ea:79:a9:78:df:71:f6:fc:25:84:c2:3e:b6:ae:e8: c2:63:68:fa:51:79:64:4c:a6:f9:78:71:07:f0:01:30:25:6a: e8:fb:17:37:12:b3:02:0f:fd:a9:ef:4f:5f:09:dc:1f:49:ce: 09:8f:4c:d9:1b:85:0d:15:2f:e8:b1:b6:d8:cd:03:15:a8:8a: 8c:6d:f6:d5:4b:ce:7a:72:d9:44:bf:a5:c7:a8:40:85:ca:74: 33:ae:3f:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2PG1dfHqamq98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzlkMzUxOGYtMzAxYy00YmE2LThhYTktYmUxMWVmNTUyZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6R7cYO/rEqdIVl7/W/z6sSCxn/8lRpMt4J4 9CiPTRlBpCsvr7FPgTJ0ofBOPIxDFJN+jaAakCHdHi4uQNIUN3UCURq5EGmZtUJY dzUeSzcyGre+thmQ0cG9HZ3d5L+oACXWjgdSbVJ8ngomaVB6IBFLT0ssiTY896mc P4ofYJ1r4Osxm3H8ETOucgMIrEHxqmLIwKRClWqY54rzgzx2Zh/L8AFFDM4/Dt70 WHhYPBTJp7Ecuvo81LAFWPdNNE9tuZbgTv7EHYvdMOud69yE4NsNkg6oAHICdtc+ hf4NEfYP49ViMxSoVSVfIRphiBxXDtisBShOnNzGOHrhkLeUVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZDYw/cHLRiJEtvkTN8c+6mGbC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTg4NmFkN2ItMmVmOS0z YTA5LTk5YTAtMWJiNDVkOWRjNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/Tjb7SgP3XVwsjN+oaUAkyDUNanTSQGaUb0pjTZSlR007VbVrtGJrB k5UrZVZa2/gAA++1LwaecSgBjxf5IWIJrw129heWICTOoHQxxjBjGxYkPSEbVwe3 mxKA4yn8hvbJxOJ5BeSMuVFopbz+87bXVnNpf4ZILZ8dMyHg4POwH6iU+kTeUQc+ ceYFr6gcQbl4IiBCLZQvNrsM3mAQ/UN6jPKgEOp5qXjfcfb8JYTCPrau6MJjaPpR eWRMpvl4cQfwATAlauj7FzcSswIP/anvT18J3B9JzgmPTNkbhQ0VL+ixttjNAxWo ioxt9tVLznpy2US/pceoQIXKdDOuPw0= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:26 2025 by rpki-client