$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa File: 227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa (raw, json) Hash identifier: bPUOTcgEO4QhEWRSk/jbgAitP3vTh3XTQR4baB0ZN9U= Subject key identifier: 9E:3B:19:73:C3:FC:BE:FB:3E:01:9E:4F:67:D3:D7:4D:A4:6F:01:C2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C90F2491EE78F48B01700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:90:f2:49:1e:e7:8f:48:b0:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=61bbf388-91b4-4bd0-9744-a495abebc996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b6:97:31:91:d9:30:71:a3:dc:9f:b2:92:9b: 7a:01:69:fe:c8:2d:f3:e3:63:e5:81:00:32:7e:3e: e1:cb:e6:27:28:b2:12:60:d4:3d:a8:e9:d4:82:a5: 25:d4:e9:41:21:ea:20:d1:74:e8:a3:78:2e:02:9d: 1c:5d:86:ca:56:6f:90:21:b5:5d:c4:cf:83:12:97: 9e:c7:14:ee:46:6a:a1:be:57:77:ef:e7:ea:97:fe: b4:a4:61:e7:91:2c:ac:e1:a0:51:32:70:5c:8f:dc: 0b:24:51:24:d0:5a:29:1e:98:67:70:50:4f:c6:4e: 8d:ec:35:c4:14:5c:79:b6:c4:41:70:01:88:f5:0f: b6:ac:e3:43:76:31:5b:cc:13:c1:e7:19:18:29:74: f3:8f:dd:0e:bd:a8:9c:b6:52:91:c3:b8:bd:90:9f: 90:f2:b4:37:db:e4:0a:4b:cb:01:f4:b1:70:5a:e7: 19:db:45:e7:1d:81:b5:1c:3b:69:88:7c:32:51:2b: 3e:72:60:fc:3d:49:7e:19:1b:31:b5:a3:cf:82:e3: 9e:6d:66:85:bb:60:59:29:18:ea:26:48:62:fc:3d: 6a:3f:c2:ef:28:c8:ed:3d:ac:76:79:a4:36:40:8e: 94:a1:9b:ed:44:15:ba:49:3c:22:8f:a0:80:64:20: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3B:19:73:C3:FC:BE:FB:3E:01:9E:4F:67:D3:D7:4D:A4:6F:01:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:87:c8:ca:92:6f:c0:1c:c5:27:1f:24:6d:ad:7e:c5:b4:2a: 2d:42:b2:01:ac:1b:25:28:91:39:1c:e9:5e:de:b6:7c:2a:04: f4:1d:57:e6:79:19:4b:15:fd:22:64:5d:b8:97:a0:2f:9d:bf: 63:df:f3:c1:31:d2:d2:99:c2:1c:15:8a:5c:91:0a:e3:fc:69: bd:7d:ac:52:11:47:e2:7c:53:5f:6c:62:4c:fe:b4:5a:66:14: e9:86:6f:95:ae:3a:08:a8:f2:ce:49:86:be:95:d3:01:57:c7: 9d:8e:7e:52:4f:c5:a6:ef:0f:90:fb:e9:c4:d8:06:26:bc:d0: 3e:ca:c8:f3:40:6e:e1:f0:7d:31:1e:a2:50:20:62:60:02:65: 78:0c:f7:ee:45:73:16:6b:c3:15:4d:e5:ce:98:f9:ed:14:93: d0:e0:2d:6b:b3:e5:9a:cb:8a:dd:d0:13:fd:b9:cb:eb:fd:36: 12:5f:1e:96:6a:a2:58:c3:95:de:20:ac:aa:f9:9d:b0:4f:0d: 57:ca:da:f1:df:10:d3:9b:2f:12:f1:ce:a1:a5:ed:86:8a:44: 86:b9:42:bf:14:81:85:c3:e1:c3:56:bd:21:a9:18:fb:57:c6: 8e:44:3a:e2:55:3d:57:89:fc:96:e0:9f:06:22:db:b8:4f:b8: 07:62:7f:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJDySR7nj0iwFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjFiYmYzODgtOTFiNC00YmQwLTk3NDQtYTQ5NWFiZWJjOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7aXMZHZMHGj3J+ykpt6AWn+yC3z42PlgQAy fj7hy+YnKLISYNQ9qOnUgqUl1OlBIeog0XToo3guAp0cXYbKVm+QIbVdxM+DEpee xxTuRmqhvld37+fql/60pGHnkSys4aBRMnBcj9wLJFEk0FopHphncFBPxk6N7DXE FFx5tsRBcAGI9Q+2rONDdjFbzBPB5xkYKXTzj90OvaictlKRw7i9kJ+Q8rQ32+QK S8sB9LFwWucZ20XnHYG1HDtpiHwyUSs+cmD8PUl+GRsxtaPPguOebWaFu2BZKRjq Jkhi/D1qP8LvKMjtPax2eaQ2QI6UoZvtRBW6STwij6CAZCBFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ47GXPD/L77PgGeT2fT102kbwHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjI3YWYxOWUtNGUxMC0z NTQwLTllMzEtYTI5ZGQ2Y2RmYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiHyMqSb8AcxScfJG2tfsW0Ki1CsgGsGyUokTkc6V7etnwqBPQdV+Z5 GUsV/SJkXbiXoC+dv2Pf88Ex0tKZwhwVilyRCuP8ab19rFIRR+J8U19sYkz+tFpm FOmGb5WuOgio8s5Jhr6V0wFXx52OflJPxabvD5D76cTYBia80D7KyPNAbuHwfTEe olAgYmACZXgM9+5FcxZrwxVN5c6Y+e0Uk9DgLWuz5ZrLit3QE/25y+v9NhJfHpZq oljDld4grKr5nbBPDVfK2vHfENObLxLxzqGl7YaKRIa5Qr8UgYXD4cNWvSGpGPtX xo5EOuJVPVeJ/JbgnwYi27hPuAdif6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 01:01:15 2025 by rpki-client