$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa File: fa64b528-4d5e-3048-93d6-79bf8737e58c.roa (raw, json) Hash identifier: NH9E+DXbLMaEPcwuw7PgxxY59jsLNTGzh7PGdQmqo1s= Subject key identifier: BB:1A:E9:C3:FF:73:18:5F:39:4F:D7:C0:6B:78:86:09:F4:72:BE:78 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DE630036A24B556B0200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:de:63:00:36:a2:4b:55:6b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=b788cd76-38cc-4b60-bab0-45d14d110c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:93:4c:6e:22:ab:77:6a:90:a2:a0:bb:bd: 6f:9d:5a:86:0f:b8:72:54:73:af:b8:f9:85:c1:bd: 3e:42:98:e3:3e:b6:1e:94:19:90:81:c2:68:4c:b1: e3:7a:9a:f0:a4:cc:1b:84:a8:4e:af:84:29:4a:5c: 00:9a:10:c3:32:1f:e2:a2:40:3f:b0:9b:5c:6b:5e: 87:16:d4:b3:0a:b9:bc:a5:de:1e:bd:66:b4:61:59: 63:8c:24:8c:cb:e2:a3:8c:cd:9f:50:0c:bc:f9:21: b1:29:43:c9:b5:76:45:73:bf:aa:ff:cd:0c:56:14: f3:47:3a:cc:e7:5d:84:6d:19:a5:a2:4a:8e:27:2d: 4e:d2:d7:7f:32:77:2a:0b:e3:ce:31:c9:ca:17:5d: 5a:c6:e3:70:d2:ba:19:3f:99:cf:fd:17:a7:db:de: 1d:53:3a:83:4f:c5:70:12:f3:79:fe:04:a9:44:c8: cf:44:8d:1d:85:b9:43:f5:18:cb:ef:89:4d:bd:dd: 7a:89:eb:c0:a1:f6:69:2d:aa:df:4e:9d:73:3d:93: 2e:28:f2:48:02:18:f2:05:b4:9f:5a:cf:e2:ab:2b: 2d:c1:82:39:42:46:51:1a:30:d1:b7:46:43:71:d0: 1d:a0:86:99:3d:79:02:2e:dc:af:cc:4d:6a:11:56: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:E9:C3:FF:73:18:5F:39:4F:D7:C0:6B:78:86:09:F4:72:BE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f9:69:8c:9f:5a:3d:e1:58:4a:d7:e5:29:4d:e1:92:e6:70: dd:de:66:01:ec:4e:81:2a:40:93:aa:03:84:25:2e:76:c7:1e: 0a:22:82:bf:c4:da:b1:5e:f1:74:b9:f1:e0:e4:f9:0b:fa:80: b4:56:2a:c5:85:62:07:46:65:ab:71:75:d8:fa:aa:41:9a:9f: 25:76:8b:6d:e6:4a:b9:71:37:b1:e2:73:84:c7:2d:bd:97:77: 2b:7a:83:80:ad:46:35:fb:96:5d:d9:ef:31:ad:55:88:ca:7b: aa:1c:1d:cd:09:6c:52:25:46:ff:6c:12:a6:2d:d5:cf:fb:93: ee:ce:93:aa:a2:ff:cb:a4:92:ee:92:ab:e0:a4:8a:6b:e4:cd: a5:14:6f:e3:b7:c2:c1:30:51:55:18:38:fb:32:56:c2:55:36: cb:02:07:31:2e:6b:d2:08:a9:02:3a:08:7a:a3:90:da:98:39: 17:98:93:43:43:fd:05:a2:be:b9:00:b1:7a:d2:97:0e:d7:25: ea:f4:c8:34:f9:85:8b:16:84:c6:d6:76:62:1c:9b:d8:b9:c9: b9:a9:4b:8e:6a:d2:4b:96:30:a3:8f:ae:cd:7e:d1:5c:e3:11: 1c:72:c9:b2:ac:ea:ed:d1:1d:0a:9a:56:6e:2b:60:f4:09:0c: b8:52:b0:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQd5jADaiS1VrAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk Yjc4OGNkNzYtMzhjYy00YjYwLWJhYjAtNDVkMTRkMTEwYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApASTTG4iq3dqkKKgu71vnVqGD7hyVHOvuPmF wb0+QpjjPrYelBmQgcJoTLHjeprwpMwbhKhOr4QpSlwAmhDDMh/iokA/sJtca16H FtSzCrm8pd4evWa0YVljjCSMy+KjjM2fUAy8+SGxKUPJtXZFc7+q/80MVhTzRzrM 512EbRmlokqOJy1O0td/MncqC+POMcnKF11axuNw0roZP5nP/Ren294dUzqDT8Vw EvN5/gSpRMjPRI0dhblD9RjL74lNvd16ievAofZpLarfTp1zPZMuKPJIAhjyBbSf Ws/iqystwYI5QkZRGjDRt0ZDcdAdoIaZPXkCLtyvzE1qEVYr9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsa6cP/cxhfOU/XwGt4hgn0cr54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmE2NGI1MjgtNGQ1ZS0z MDQ4LTkzZDYtNzliZjg3MzdlNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr5aYyfWj3hWErX5SlN4ZLmcN3eZgHsToEqQJOqA4QlLnbHHgoigr/E 2rFe8XS58eDk+Qv6gLRWKsWFYgdGZatxddj6qkGanyV2i23mSrlxN7Hic4THLb2X dyt6g4CtRjX7ll3Z7zGtVYjKe6ocHc0JbFIlRv9sEqYt1c/7k+7Ok6qi/8ukku6S q+CkimvkzaUUb+O3wsEwUVUYOPsyVsJVNssCBzEua9IIqQI6CHqjkNqYOReYk0ND /QWivrkAsXrSlw7XJer0yDT5hYsWhMbWdmIcm9i5ybmpS45q0kuWMKOPrs1+0Vzj ERxyybKs6u3RHQqaVm4rYPQJDLhSsIc= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:19 2025 by rpki-client