$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3647bd9b-d447-32a6-aceb-c11698ae4239.roa File: 3647bd9b-d447-32a6-aceb-c11698ae4239.roa (raw, json) Hash identifier: ONPcPTzR0Udsy9YHjT6pq6u89qtuBW4uFBMc29RLIY8= Subject key identifier: 3F:43:5D:E1:C7:D3:AB:1D:A5:A2:BF:55:CD:39:91:DC:12:8B:5B:0A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7B5378A26DD8415DA780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3647bd9b-d447-32a6-aceb-c11698ae4239.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7b:53:78:a2:6d:d8:41:5d:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=332bee24-3127-416e-accd-51c1b3f9a9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:20:6a:69:06:ec:ec:a8:69:f5:08:b7:85: 51:c2:db:00:3f:b7:28:ba:63:c1:fd:d9:4c:52:e6: 5c:60:d8:c3:e3:19:ff:c5:f5:22:bd:de:39:63:ee: d9:c8:0f:a8:fd:17:e2:9e:66:dd:29:9d:3d:8c:47: 44:fc:1a:af:11:21:3b:8d:da:d4:ad:35:91:ad:8d: a1:67:fe:45:cd:d7:f8:b7:3d:47:b5:5a:45:25:61: 5d:53:4c:56:65:ca:c5:75:b4:ea:8a:d9:09:9e:e8: 2f:2e:cf:39:29:fe:0f:36:08:89:37:04:75:00:9e: 2a:7c:ff:47:c4:eb:5d:c4:f6:d4:1c:14:c0:12:68: 9f:0f:9f:93:a9:18:db:1d:81:45:51:17:83:55:7d: 31:60:c8:f9:20:df:ec:67:46:9e:43:63:f2:83:ca: 98:fd:80:55:aa:47:1f:16:89:b7:a3:21:77:4a:c6: 6d:43:fd:46:42:3d:56:81:04:6e:58:af:86:39:6f: 19:24:7b:66:92:94:53:14:a8:c4:0f:8b:ac:eb:68: cb:8b:fc:7f:89:d5:ff:c5:51:ae:e2:52:5a:39:76: 25:e3:d4:71:81:61:90:30:a1:c3:c9:09:4d:3b:ad: 4c:bd:38:db:d2:ca:17:ca:59:cf:da:7c:db:73:e1: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:43:5D:E1:C7:D3:AB:1D:A5:A2:BF:55:CD:39:91:DC:12:8B:5B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3647bd9b-d447-32a6-aceb-c11698ae4239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8b:39:7a:f0:86:06:a5:da:aa:e9:b0:ac:e7:35:4a:63:5f: d5:50:a8:28:b4:95:09:54:a0:86:d9:eb:67:0d:6b:74:70:48: 7b:f1:2c:32:e6:14:e4:d3:57:6d:77:16:29:41:49:b3:df:90: 79:9b:da:fc:3e:c6:fb:a0:9b:7f:f7:a0:06:26:97:a1:c1:4f: 41:ab:be:25:20:3b:f3:9c:92:e3:8c:d4:c2:60:0e:9d:37:db: e0:0b:e1:d6:b5:be:07:68:28:de:9a:be:4b:77:80:c3:de:d8: 90:bb:00:30:fa:a3:a9:ca:1d:cb:4e:0f:89:c9:97:28:bf:57: 72:17:42:7d:37:c3:54:9d:65:57:cf:b6:62:dc:75:60:21:54: c7:0d:12:40:8f:1d:ad:66:22:02:42:cf:c9:2f:7d:cd:58:e3: e6:59:c2:35:81:40:b4:75:82:71:e6:19:ed:08:e8:a4:ff:36: 88:e2:bb:7d:07:c4:6b:f1:27:31:90:b3:44:4c:e4:c0:40:19: 35:0c:dd:7d:6c:53:68:83:eb:6e:05:6c:e7:93:0e:66:35:a8: e7:21:15:a8:16:6b:34:8b:be:25:06:bb:50:a4:b6:07:29:70: ee:99:f3:98:3a:1e:86:8a:f9:ea:77:ae:a2:55:29:c9:b2:3f: 56:cb:1e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHtTeKJt2EFdp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzMyYmVlMjQtMzEyNy00MTZlLWFjY2QtNTFjMWIzZjlhOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiYgamkG7OyoafUIt4VRwtsAP7coumPB/dlM UuZcYNjD4xn/xfUivd45Y+7ZyA+o/RfinmbdKZ09jEdE/BqvESE7jdrUrTWRrY2h Z/5Fzdf4tz1HtVpFJWFdU0xWZcrFdbTqitkJnugvLs85Kf4PNgiJNwR1AJ4qfP9H xOtdxPbUHBTAEmifD5+TqRjbHYFFUReDVX0xYMj5IN/sZ0aeQ2Pyg8qY/YBVqkcf Fom3oyF3SsZtQ/1GQj1WgQRuWK+GOW8ZJHtmkpRTFKjED4us62jLi/x/idX/xVGu 4lJaOXYl49RxgWGQMKHDyQlNO61MvTjb0soXylnP2nzbc+HKfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9DXeHH06sdpaK/Vc05kdwSi1sKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzY0N2JkOWItZDQ0Ny0z MmE2LWFjZWItYzExNjk4YWU0MjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2LOXrwhgal2qrpsKznNUpjX9VQqCi0lQlUoIbZ62cNa3RwSHvxLDLm FOTTV213FilBSbPfkHmb2vw+xvugm3/3oAYml6HBT0GrviUgO/OckuOM1MJgDp03 2+AL4da1vgdoKN6avkt3gMPe2JC7ADD6o6nKHctOD4nJlyi/V3IXQn03w1SdZVfP tmLcdWAhVMcNEkCPHa1mIgJCz8kvfc1Y4+ZZwjWBQLR1gnHmGe0I6KT/Nojiu30H xGvxJzGQs0RM5MBAGTUM3X1sU2iD624FbOeTDmY1qOchFagWazSLviUGu1Cktgcp cO6Z85g6HoaK+ep3rqJVKcmyP1bLHsE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:44 2025 by rpki-client