$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa File: 4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa (raw, json) Hash identifier: Vb8FVPx8gzyU85/OIKKA0UdpOSUXyFgz/EScCp4fo+I= Subject key identifier: 7A:98:9A:90:E0:F7:C8:2C:34:5B:49:D5:6A:FE:8B:1A:16:BF:45:A8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B973EA988AD818688AD2A4360 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa Signing time: Tue 21 Oct 2025 02:41:01 +0000 ROA not before: Tue 21 Oct 2025 02:41:01 +0000 ROA not after: Mon 19 Jan 2026 03:41:01 +0000 asID: 15169 IP address blocks: 104.134.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:3e:a9:88:ad:81:86:88:ad:2a:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 21 02:41:01 2025 GMT Not After : Jan 19 03:41:01 2026 GMT Subject: CN=4ae8dafc-4b18-4ea3-a591-0665d9cde718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:76:b5:6a:f6:02:0f:64:05:e0:3a:23:42:35: c6:7d:a7:c7:c7:14:bc:2a:a7:67:2b:aa:f7:92:e1: dc:0e:ff:a7:41:3a:a8:14:28:18:05:78:e3:f2:fd: 77:07:87:7e:a1:f2:95:ea:92:3d:05:4e:b4:47:3c: 78:81:0f:94:42:26:d3:06:7f:6c:2d:d8:11:01:ea: 53:64:16:ac:40:37:c5:ec:4f:dd:34:62:7d:5e:ea: e7:69:52:26:30:3b:ff:6a:3f:6d:a1:9b:85:7c:e7: cb:c2:c2:e0:ea:86:a3:7b:04:86:13:ec:a3:a1:e6: df:22:b5:39:90:db:4f:d0:9f:3c:64:3c:00:ba:7b: d0:fc:20:a4:30:8b:52:59:57:a4:b5:4e:cf:38:72: e5:fc:82:b6:18:3d:cc:38:93:88:86:f7:4b:8a:e9: 88:49:37:ff:a2:74:da:1e:cb:82:a6:be:02:2c:58: 4e:90:48:52:48:aa:ef:b0:b1:7a:05:cb:89:f6:6c: 5d:71:3e:76:39:eb:26:a8:7c:73:40:69:34:fb:76: 56:aa:d6:fb:ad:d3:02:79:2a:dd:84:cb:6e:aa:20: 11:35:09:85:20:0b:59:4c:5b:86:8e:7c:50:8a:9a: f7:a1:76:5a:9a:35:a7:93:53:fd:dc:2c:1c:85:f3: 1d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:98:9A:90:E0:F7:C8:2C:34:5B:49:D5:6A:FE:8B:1A:16:BF:45:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:1e:90:19:67:fe:40:03:79:69:27:50:76:5a:72:f9:d7:f1: 65:98:0f:33:cf:30:36:49:9b:d5:22:49:6e:ac:b6:b5:06:bb: 19:e2:1a:2e:63:d1:07:e7:f0:82:50:d2:a5:ad:5a:21:8a:5d: 68:91:9c:a4:08:32:6d:90:12:ae:d3:1f:fe:1b:d3:6e:ff:07: 8f:7d:c5:87:de:2b:72:2e:09:81:1d:7f:bd:1c:5e:6d:b4:ef: 13:41:0a:a6:e0:e9:0e:30:61:81:90:3d:04:42:56:3d:65:c9: 60:bf:16:5a:8a:62:9d:c3:7b:7c:79:d7:b4:2e:70:83:df:9d: 0c:93:0c:da:ce:5a:f5:47:0b:7f:33:32:c4:d8:5f:38:64:24: 72:0f:9d:7e:98:b1:a5:6a:03:b2:5c:fe:4f:b6:54:9a:58:f4: 99:9b:ad:13:f4:26:96:bc:02:9a:22:49:df:11:22:db:5d:4f: b7:23:76:f0:b1:e8:d5:90:1f:bb:76:44:59:5c:e5:b8:7c:11: 16:79:34:c4:d7:c2:91:46:cf:ab:53:5f:5a:c1:ac:54:f4:47: 1b:4e:ca:d2:7a:b8:7c:7c:64:e3:19:95:61:49:26:d2:5e:57: 44:9f:81:32:21:7f:52:9e:af:7e:84:98:9f:00:71:df:8e:6c: ff:03:7e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXPqmIrYGGiK0qQ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAyMTAyNDEwMVoXDTI2MDExOTAzNDEwMVowLzEtMCsGA1UEAxMk NGFlOGRhZmMtNGIxOC00ZWEzLWE1OTEtMDY2NWQ5Y2RlNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Xa1avYCD2QF4DojQjXGfafHxxS8KqdnK6r3 kuHcDv+nQTqoFCgYBXjj8v13B4d+ofKV6pI9BU60Rzx4gQ+UQibTBn9sLdgRAepT ZBasQDfF7E/dNGJ9XurnaVImMDv/aj9toZuFfOfLwsLg6oajewSGE+yjoebfIrU5 kNtP0J88ZDwAunvQ/CCkMItSWVektU7POHLl/IK2GD3MOJOIhvdLiumISTf/onTa HsuCpr4CLFhOkEhSSKrvsLF6BcuJ9mxdcT52OesmqHxzQGk0+3ZWqtb7rdMCeSrd hMtuqiARNQmFIAtZTFuGjnxQipr3oXZamjWnk1P93CwchfMdPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqYmpDg98gsNFtJ1Wr+ixoWv0WoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGZmM2NjZGQtMGVhNi0z ZDRkLWE3NmMtYzExZWM2MmQ1ZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8ekBln/kADeWknUHZacvnX8WWYDzPPMDZJm9UiSW6strUGuxniGi5j 0Qfn8IJQ0qWtWiGKXWiRnKQIMm2QEq7TH/4b027/B499xYfeK3IuCYEdf70cXm20 7xNBCqbg6Q4wYYGQPQRCVj1lyWC/FlqKYp3De3x517QucIPfnQyTDNrOWvVHC38z MsTYXzhkJHIPnX6YsaVqA7Jc/k+2VJpY9JmbrRP0Jpa8ApoiSd8RIttdT7cjdvCx 6NWQH7t2RFlc5bh8ERZ5NMTXwpFGz6tTX1rBrFT0RxtOytJ6uHx8ZOMZlWFJJtJe V0SfgTIhf1Ker36EmJ8Acd+ObP8DfvM= -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:25 2025 by rpki-client