$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74002d72-cfae-3b12-b49e-f0443fbbcd96.roa File: 74002d72-cfae-3b12-b49e-f0443fbbcd96.roa (raw, json) Hash identifier: kB3/8AbINU4PXOprxjs/+BOLMhk+9npl7CZxwEI5O/I= Subject key identifier: 54:74:3E:56:73:E8:95:AF:70:FF:CA:0C:8D:71:B7:AC:0B:4E:0D:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F373CBE4E315E5C5AD6A380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74002d72-cfae-3b12-b49e-f0443fbbcd96.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 41264 IP address blocks: 104.134.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3c:be:4e:31:5e:5c:5a:d6:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=95c72d35-9ad7-43ae-baff-9b0271a21fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:39:f5:85:64:84:ae:5c:a4:a0:bf:36:96:5d: ca:91:68:54:7a:3a:30:7d:25:77:dd:32:b1:10:21: 80:55:7e:20:3a:47:b5:e3:27:9d:a3:71:c5:bf:55: 2a:5b:21:5d:42:82:d1:68:67:2f:39:27:0f:6b:87: 95:e7:7e:0d:b7:aa:9e:75:bd:15:4c:0d:fb:96:31: bd:06:03:45:a0:d6:bd:67:47:bf:18:0e:be:d9:9f: c8:13:b2:ea:5e:78:18:71:56:34:6f:b8:90:1f:9a: 0f:6f:72:2d:75:1d:24:5e:2f:0e:79:33:53:f4:7f: c6:fa:3e:a6:34:63:4b:b7:23:fe:bd:c6:cf:3f:2d: 86:0e:ee:f6:e8:2f:76:da:92:6f:01:f4:5e:a0:e0: c1:70:30:d2:b4:65:af:ee:53:6d:ec:0e:41:ea:f4: 88:d7:18:7d:c8:9f:50:24:d9:b0:0b:e1:46:4b:cd: 5e:a5:af:fb:b3:ec:e4:d7:c4:ec:81:4c:72:33:c5: 9b:e2:28:b1:9f:52:97:5d:16:fe:94:dd:06:6e:41: d5:7e:cc:c5:e7:0d:52:68:47:23:9a:fc:7f:60:5f: 3a:7b:14:b8:84:85:c4:d9:d5:d2:0d:94:cc:03:0a: b9:f5:1e:94:f7:81:71:a6:ac:6a:ba:8b:5c:06:dd: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:74:3E:56:73:E8:95:AF:70:FF:CA:0C:8D:71:B7:AC:0B:4E:0D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74002d72-cfae-3b12-b49e-f0443fbbcd96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:86:a5:3e:5f:ff:20:42:cd:0e:d3:11:c9:57:39:36:d6:44: ef:16:3e:33:6d:81:3f:2e:54:36:c5:16:53:47:d4:7b:1a:07: ae:0c:8d:22:4f:88:d7:f9:f5:2d:af:77:e7:ab:a9:90:a3:75: 44:df:79:60:bc:fd:b4:07:18:51:d3:52:fd:99:40:99:63:fa: 86:ee:37:44:fd:66:cc:f1:3e:b6:e6:21:92:81:a8:90:1d:7e: bf:c6:ab:9b:7c:ab:8b:fe:fb:c7:c7:33:96:7b:99:05:e1:db: 7b:7b:9e:cf:81:a7:d0:41:f0:58:11:a9:e4:17:a7:d7:62:c7: 92:64:17:56:e2:31:1c:c1:27:e3:60:e3:02:ad:f0:77:57:cf: 9c:ea:29:79:eb:bc:d6:d1:fb:aa:26:0d:42:64:7f:12:39:6e: cb:37:c6:6f:9a:cc:6f:1c:e5:cd:77:d3:3d:09:4d:c3:0a:07: 3c:a3:34:e4:01:cf:7b:65:e8:a0:16:a1:8b:8a:cb:66:e0:cf: fc:b7:f2:87:fa:34:9a:90:6e:f3:2d:c8:1f:47:0b:06:76:2e: 81:b4:5d:6a:b2:02:a7:86:8a:cb:5b:ee:2a:da:38:7f:97:87: f7:2e:9f:c2:a2:70:80:34:ad:a4:b7:35:99:df:de:db:69:5f: 9f:aa:85:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzy+TjFeXFrWo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTVjNzJkMzUtOWFkNy00M2FlLWJhZmYtOWIwMjcxYTIxZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzn1hWSErlykoL82ll3KkWhUejowfSV33TKx ECGAVX4gOke14yedo3HFv1UqWyFdQoLRaGcvOScPa4eV534Nt6qedb0VTA37ljG9 BgNFoNa9Z0e/GA6+2Z/IE7LqXngYcVY0b7iQH5oPb3ItdR0kXi8OeTNT9H/G+j6m NGNLtyP+vcbPPy2GDu726C922pJvAfReoODBcDDStGWv7lNt7A5B6vSI1xh9yJ9Q JNmwC+FGS81epa/7s+zk18TsgUxyM8Wb4iixn1KXXRb+lN0GbkHVfszF5w1SaEcj mvx/YF86exS4hIXE2dXSDZTMAwq59R6U94FxpqxquotcBt2xrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR0PlZz6JWvcP/KDI1xt6wLTg1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzQwMDJkNzItY2ZhZS0z YjEyLWI0OWUtZjA0NDNmYmJjZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2GpT5f/yBCzQ7TEclXOTbWRO8WPjNtgT8uVDbFFlNH1HsaB64MjSJP iNf59S2vd+erqZCjdUTfeWC8/bQHGFHTUv2ZQJlj+obuN0T9ZszxPrbmIZKBqJAd fr/Gq5t8q4v++8fHM5Z7mQXh23t7ns+Bp9BB8FgRqeQXp9dix5JkF1biMRzBJ+Ng 4wKt8HdXz5zqKXnrvNbR+6omDUJkfxI5bss3xm+azG8c5c130z0JTcMKBzyjNOQB z3tl6KAWoYuKy2bgz/y38of6NJqQbvMtyB9HCwZ2LoG0XWqyAqeGistb7iraOH+X h/cun8KicIA0raS3NZnf3ttpX5+qhdQ= -----END CERTIFICATE-----Generated at Wed Nov 5 02:47:04 2025 by rpki-client