$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa File: 3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa (raw, json) Hash identifier: bWHcUFthwiZuBTXsHqoVaLSL9slySPFVgzirn2vd3ME= Subject key identifier: 96:B4:59:A7:89:CD:9F:30:F4:59:A9:E9:6D:E2:BA:67:9D:11:D2:47 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7AF0CE48961B8C943B80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7a:f0:ce:48:96:1b:8c:94:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=a8fc65a2-9821-4f61-bd93-f84f756f5c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:9a:96:d9:72:f9:26:f5:00:9e:11:58:a9: 57:6c:0d:ca:00:27:47:27:c8:84:f2:be:db:b5:90: d0:e8:15:ba:e7:14:53:e4:92:bb:a3:73:9d:cd:e7: 0f:dd:c1:83:d6:73:63:67:0f:31:30:8a:f4:57:1e: 10:3d:41:02:f9:5e:35:5a:27:21:8b:0a:dc:eb:ab: 19:78:fb:9a:bb:57:4a:09:53:34:f8:89:2c:a4:d8: 3d:1d:ed:74:2d:fb:7a:19:d3:00:d6:99:9f:4f:8e: 40:90:6e:49:41:dc:10:a6:e8:17:1b:88:b4:1f:ee: fe:b2:8c:d8:e8:6d:f0:b4:bc:bf:a3:61:fc:95:fa: 34:ce:48:16:9a:7e:c7:a2:b7:bc:4f:c5:03:9a:0e: 4f:50:f6:8b:bf:49:48:33:bb:10:59:ce:79:69:64: 34:46:03:89:34:58:28:da:4c:6f:da:a2:32:8c:c8: 0e:e5:26:c4:c2:74:ef:84:96:02:31:eb:97:8c:3e: 90:44:8d:73:e1:43:fb:4f:c7:b9:17:f4:98:35:0e: f1:31:1f:8e:11:b9:29:74:07:aa:37:aa:e9:16:f4: ed:a2:0b:9f:92:13:77:36:fc:cb:db:56:68:75:df: db:32:bb:d2:dc:50:b3:cb:5b:cb:0c:1a:36:84:a4: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:59:A7:89:CD:9F:30:F4:59:A9:E9:6D:E2:BA:67:9D:11:D2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5f:1c:a9:fd:38:5d:84:5b:38:44:7a:2c:f9:01:5c:d5:78: 65:79:8d:39:53:c3:ae:5f:88:da:9a:66:b7:df:d6:55:8b:9c: 34:7a:30:ee:18:40:d9:3d:be:98:54:32:bc:67:08:11:9e:a8: 06:54:ca:a6:da:f3:f8:82:d8:57:e5:fc:fa:90:be:39:0d:a2: 8a:2d:81:65:9b:21:2e:24:a0:15:bc:52:8c:0b:97:f6:18:0e: c1:d3:bd:92:ec:9a:2e:19:5f:d8:6c:13:99:d6:66:41:2d:74: f7:59:c2:df:d0:b1:e5:f6:2a:9f:7e:65:a7:a6:af:3a:28:11: 3f:e7:00:87:5c:38:ba:e6:31:d7:41:3b:40:b8:0e:c7:a5:8c: be:09:5b:7c:b7:c4:79:e2:23:04:d5:36:19:46:66:3b:f0:f4: bc:f6:e5:ef:31:90:dc:f4:8f:9a:0b:76:d1:06:ca:76:12:cd: ec:15:bd:ea:37:c2:6a:1e:f8:d7:3a:40:9b:b1:e5:7d:29:a1: 41:73:6a:5a:11:5b:32:b8:13:75:83:06:29:7d:76:5c:cf:1b: da:64:a8:e1:b2:13:9a:df:b2:bf:a6:99:ce:4b:d9:cb:da:b2: 96:c0:2c:e2:93:2b:55:ff:fd:4d:dd:cb:60:a9:4f:12:b0:2a: 3f:32:92:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHrwzkiWG4yUO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YThmYzY1YTItOTgyMS00ZjYxLWJkOTMtZjg0Zjc1NmY1YzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyaltly+Sb1AJ4RWKlXbA3KACdHJ8iE8r7b tZDQ6BW65xRT5JK7o3OdzecP3cGD1nNjZw8xMIr0Vx4QPUEC+V41Wichiwrc66sZ ePuau1dKCVM0+IkspNg9He10Lft6GdMA1pmfT45AkG5JQdwQpugXG4i0H+7+sozY 6G3wtLy/o2H8lfo0zkgWmn7Hore8T8UDmg5PUPaLv0lIM7sQWc55aWQ0RgOJNFgo 2kxv2qIyjMgO5SbEwnTvhJYCMeuXjD6QRI1z4UP7T8e5F/SYNQ7xMR+OEbkpdAeq N6rpFvTtogufkhN3NvzL21Zodd/bMrvS3FCzy1vLDBo2hKTurwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa0WaeJzZ8w9Fmp6W3iumedEdJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM5NmM1MGQtNDExYi0z YTFhLThjZDAtZjQwZGZkYjUzYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRfHKn9OF2EWzhEeiz5AVzVeGV5jTlTw65fiNqaZrff1lWLnDR6MO4Y QNk9vphUMrxnCBGeqAZUyqba8/iC2Ffl/PqQvjkNoootgWWbIS4koBW8UowLl/YY DsHTvZLsmi4ZX9hsE5nWZkEtdPdZwt/QseX2Kp9+ZaemrzooET/nAIdcOLrmMddB O0C4DseljL4JW3y3xHniIwTVNhlGZjvw9Lz25e8xkNz0j5oLdtEGynYSzewVveo3 wmoe+Nc6QJux5X0poUFzaloRWzK4E3WDBil9dlzPG9pkqOGyE5rfsr+mmc5L2cva spbALOKTK1X//U3dy2CpTxKwKj8ykqs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:55:11 2025 by rpki-client