$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa File: f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa (raw, json) Hash identifier: 6aQZvjpDUdMKG6+B+rBm6JhjrvXQfj6vWMipt8so5dg= Subject key identifier: 97:45:0C:47:3F:51:57:BA:40:2B:7D:F0:71:C6:24:66:67:1A:CB:C2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C9268EA3A2B240E139000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:92:68:ea:3a:2b:24:0e:13:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=f63b75aa-2bd2-474e-87f3-2867c0a285bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:c6:9d:ed:30:68:16:2e:68:52:e3:7f:07: b6:8c:e3:fd:b7:a9:1b:9a:51:61:80:3d:58:8e:76: 1b:69:69:33:ae:fc:2a:ca:80:f4:98:e7:19:ed:82: 93:d8:6a:00:b7:6f:c1:a7:88:21:aa:2f:4d:40:b8: 26:47:91:3c:fd:75:13:41:16:d5:a1:22:41:ad:6d: 00:1b:6c:47:87:89:1c:62:e5:38:b6:59:4d:53:03: 50:3b:a1:a3:63:24:3e:48:5f:77:81:1e:b7:c3:84: da:da:17:14:71:6e:73:be:86:c3:1c:ac:c9:5c:72: be:0f:73:4c:f5:e7:76:20:cd:79:c5:ea:26:46:d4: 61:63:83:b8:44:de:5f:4b:52:c2:e7:65:83:3f:88: 4e:64:0d:b9:15:19:c5:ef:5a:c9:ac:95:77:6d:01: 0b:d8:1c:63:0b:0e:7f:fa:a3:d4:ed:08:e2:78:d2: 63:bc:97:48:ab:38:a4:28:58:15:a5:1b:57:e1:ae: 87:7e:f8:22:30:8a:1c:ff:4e:ca:14:ed:63:00:29: 0c:40:0f:20:10:40:34:af:90:c0:14:83:ca:4a:c7: 97:a9:a2:f2:b8:f9:e1:2b:41:18:3b:8a:9f:43:50: ed:2d:0d:80:a5:ce:62:50:b8:f2:c1:f4:20:f8:38: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:45:0C:47:3F:51:57:BA:40:2B:7D:F0:71:C6:24:66:67:1A:CB:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:29:e2:6a:08:22:f8:2e:41:d5:f4:70:6a:a5:ec:2f:f5:57: 4d:6f:ad:cc:be:1c:27:ea:82:b5:8f:f6:65:27:22:c5:71:19: 44:0e:30:ac:8c:72:40:9d:c8:6c:37:3a:c4:43:45:fc:b8:ba: b0:ca:e7:e1:93:30:51:ed:7e:63:ea:cc:d8:fe:f0:f3:d0:4d: 56:2c:82:ab:cb:2f:e5:70:cb:25:0f:6d:6f:78:06:4a:d2:0f: 7b:04:70:74:83:85:cd:6d:6e:21:29:22:e2:79:c3:60:46:7b: a9:0f:47:eb:b6:0e:51:71:1a:83:66:b6:85:49:6f:c2:32:f0: de:97:40:12:54:57:cc:26:f0:d5:ef:02:99:2d:b8:10:5a:cc: e0:86:ed:11:cf:00:38:9e:b7:13:5f:12:ca:dc:f3:80:39:0e: 46:64:12:53:f3:66:fe:0b:27:34:ec:b4:f1:6c:d9:54:4e:27: 0c:c9:69:5b:8c:36:6e:89:42:57:b1:1a:6b:c8:39:84:cd:4e: 83:a6:7a:ba:8d:ad:a9:d9:39:c1:f1:44:f6:61:96:88:e1:79: ae:8c:b2:52:f6:23:72:9f:02:39:bc:71:f9:3f:31:03:1f:f2: 6d:ba:24:b3:fd:dd:90:f1:47:bc:d8:08:d5:2f:53:94:5d:76: f0:d6:e7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJJo6jorJA4TkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjYzYjc1YWEtMmJkMi00NzRlLTg3ZjMtMjg2N2MwYTI4NWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx/Gne0waBYuaFLjfwe2jOP9t6kbmlFhgD1Y jnYbaWkzrvwqyoD0mOcZ7YKT2GoAt2/Bp4ghqi9NQLgmR5E8/XUTQRbVoSJBrW0A G2xHh4kcYuU4tllNUwNQO6GjYyQ+SF93gR63w4Ta2hcUcW5zvobDHKzJXHK+D3NM 9ed2IM15xeomRtRhY4O4RN5fS1LC52WDP4hOZA25FRnF71rJrJV3bQEL2BxjCw5/ +qPU7QjieNJjvJdIqzikKFgVpRtX4a6HfvgiMIoc/07KFO1jACkMQA8gEEA0r5DA FIPKSseXqaLyuPnhK0EYO4qfQ1DtLQ2Apc5iULjywfQg+DhG2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdFDEc/UVe6QCt98HHGJGZnGsvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjgxYTVkOGMtYTZlYy0z MmFmLTgzZmEtNjc2ZGM3YzE1NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIp4moIIvguQdX0cGql7C/1V01vrcy+HCfqgrWP9mUnIsVxGUQOMKyM ckCdyGw3OsRDRfy4urDK5+GTMFHtfmPqzNj+8PPQTVYsgqvLL+VwyyUPbW94BkrS D3sEcHSDhc1tbiEpIuJ5w2BGe6kPR+u2DlFxGoNmtoVJb8Iy8N6XQBJUV8wm8NXv ApktuBBazOCG7RHPADietxNfEsrc84A5DkZkElPzZv4LJzTstPFs2VROJwzJaVuM Nm6JQlexGmvIOYTNToOmerqNranZOcHxRPZhlojhea6MslL2I3KfAjm8cfk/MQMf 8m26JLP93ZDxR7zYCNUvU5RddvDW550= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:18 2025 by rpki-client