$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fcf8f3c3-b232-35f9-8759-d4325c1102c2.roa File: fcf8f3c3-b232-35f9-8759-d4325c1102c2.roa (raw, json) Hash identifier: minjebw+I95Y7IfNZDNojLoOnZulUaVNDdc+dZchDak= Subject key identifier: 1A:2B:81:B5:BA:E7:37:51:2E:AC:BE:89:95:0A:39:AF:D7:65:EE:B8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E774479BC73799517DA2F80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fcf8f3c3-b232-35f9-8759-d4325c1102c2.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:44:79:bc:73:79:95:17:da:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c292b89b-d624-498b-98c5-a861e2c5aeab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:50:7e:c3:82:77:81:f5:0a:b0:03:42:53: 8c:c2:77:68:d0:25:e8:c9:6d:8a:5b:92:55:db:ed: 37:92:fd:30:5a:1c:cd:9d:94:10:15:78:c4:95:26: c7:aa:9e:a9:4f:84:4e:cc:ea:1b:87:11:f7:72:cf: cd:c7:fa:43:fe:30:98:7b:fd:76:34:96:69:53:07: 89:d7:80:77:d2:83:61:2b:41:e9:ab:85:36:84:fb: 5c:af:88:4a:d7:f5:01:3c:33:3b:09:fc:2b:2c:f9: 39:4f:32:f9:f2:1b:c4:5e:fa:f6:8d:e7:e8:6b:84: a0:04:f3:2c:b2:f5:bb:a5:d9:73:a1:5b:f4:d8:75: fb:c6:b1:4b:73:b8:03:ec:b7:48:70:49:b4:67:f9: f0:05:21:db:99:29:93:cc:25:d2:43:47:0c:3f:49: 0b:e6:9f:4b:21:6f:a9:41:ad:10:ee:77:55:9f:44: 30:0a:10:ee:dc:8e:68:66:8b:27:d6:10:69:8d:f9: 09:78:0e:4d:d7:22:9c:32:b0:af:9d:e0:33:99:6f: 1e:98:0c:09:e2:23:5a:88:87:6f:30:76:51:51:c8: e2:05:8a:e1:79:ba:40:c8:5b:70:17:fc:e9:95:44: a6:81:db:c7:0d:b8:b8:a0:bc:3d:b1:b0:02:79:74: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2B:81:B5:BA:E7:37:51:2E:AC:BE:89:95:0A:39:AF:D7:65:EE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fcf8f3c3-b232-35f9-8759-d4325c1102c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ed:7e:ab:fc:7a:f1:67:f2:ad:e0:c8:42:b3:d7:9c:8c:12: ca:02:f1:9d:ca:c9:51:53:c8:9f:fd:fa:77:35:35:ad:40:0f: ce:49:ce:d9:71:12:81:dc:6d:59:d6:21:6e:b4:9e:7b:22:e5: fe:2c:92:f0:6e:f8:4f:9c:c0:d5:77:aa:37:b7:b1:6e:7d:2a: 6a:bd:ee:4b:b6:d2:6c:fe:14:e5:19:35:53:2f:7b:cc:71:9d: 40:d3:5f:96:01:55:01:7d:a4:28:65:1f:8c:bb:2f:b9:41:12: 1b:58:c9:ea:cb:08:68:3d:c3:9e:03:1b:0e:3a:8b:8c:3d:6c: 8f:c6:9c:48:df:1b:8e:33:0e:97:80:70:6b:3c:f0:ad:04:bb: 3b:f4:f8:53:73:38:7f:86:9f:46:0c:5a:bc:ad:f2:44:80:61: de:45:aa:87:be:e7:9d:88:1e:14:da:aa:23:79:e2:cc:13:fd: aa:0b:a8:54:43:79:ea:d7:7a:a3:a3:62:94:b4:1a:57:96:93: 03:c0:d1:b9:83:cf:4d:df:5b:7e:64:1b:2b:2c:78:e1:68:e7: c2:09:25:a0:10:93:e3:5f:a0:83:1f:0c:13:b4:7b:33:3c:84: 5e:bc:2e:77:f8:c3:7a:2b:f3:50:81:bd:a1:ff:1c:c1:b0:c9: 3b:1e:03:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0R5vHN5lRfaL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzI5MmI4OWItZDYyNC00OThiLTk4YzUtYTg2MWUyYzVhZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn39QfsOCd4H1CrADQlOMwndo0CXoyW2KW5JV 2+03kv0wWhzNnZQQFXjElSbHqp6pT4ROzOobhxH3cs/Nx/pD/jCYe/12NJZpUweJ 14B30oNhK0Hpq4U2hPtcr4hK1/UBPDM7CfwrLPk5TzL58hvEXvr2jefoa4SgBPMs svW7pdlzoVv02HX7xrFLc7gD7LdIcEm0Z/nwBSHbmSmTzCXSQ0cMP0kL5p9LIW+p Qa0Q7ndVn0QwChDu3I5oZosn1hBpjfkJeA5N1yKcMrCvneAzmW8emAwJ4iNaiIdv MHZRUcjiBYrhebpAyFtwF/zplUSmgdvHDbi4oLw9sbACeXRCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBorgbW65zdRLqy+iZUKOa/XZe64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmNmOGYzYzMtYjIzMi0z NWY5LTg3NTktZDQzMjVjMTEwMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITtfqv8evFn8q3gyEKz15yMEsoC8Z3KyVFTyJ/9+nc1Na1AD85Jztlx EoHcbVnWIW60nnsi5f4skvBu+E+cwNV3qje3sW59Kmq97ku20mz+FOUZNVMve8xx nUDTX5YBVQF9pChlH4y7L7lBEhtYyerLCGg9w54DGw46i4w9bI/GnEjfG44zDpeA cGs88K0Euzv0+FNzOH+Gn0YMWryt8kSAYd5Fqoe+552IHhTaqiN54swT/aoLqFRD eerXeqOjYpS0GleWkwPA0bmDz03fW35kGysseOFo58IJJaAQk+NfoIMfDBO0ezM8 hF68Lnf4w3or81CBvaH/HMGwyTseAzs= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:57 2025 by rpki-client