$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a4b4527b-2036-3f40-bcdc-e2b6b03e2956.roa File: a4b4527b-2036-3f40-bcdc-e2b6b03e2956.roa (raw, json) Hash identifier: WnoiTzV2/u/OfyjmzYW4FRSPJlNXIqJSs02H6RoAoMo= Subject key identifier: D2:0B:C7:A5:B5:FE:1A:8E:46:26:A6:C7:49:FB:52:22:16:2C:50:6F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E772984C8CC9B9CCBB349E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a4b4527b-2036-3f40-bcdc-e2b6b03e2956.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:29:84:c8:cc:9b:9c:cb:b3:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=cbc68268-d864-46b3-a68c-e8e6bc5c728f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:39:67:3d:24:92:b1:33:64:d5:26:ad:26: 91:7a:8c:7f:2c:c9:d7:d9:16:99:80:a3:3b:d9:13: 78:57:c0:32:01:10:69:4f:14:72:26:1d:2d:21:a3: 11:0f:6f:97:4d:69:69:be:63:e1:47:a6:d3:c0:f3: de:be:36:bf:90:73:5a:5d:fb:0e:36:ea:9a:40:1f: 0c:15:d7:c1:27:a8:09:6d:15:55:af:15:b7:ac:12: 16:01:6b:f3:13:04:a0:aa:63:d7:c8:a4:64:4d:ee: 08:23:b8:8d:58:1d:59:1c:52:e7:ef:cf:7f:a4:0d: 08:6e:26:e3:2b:d3:b4:d1:d1:a9:3a:47:d0:04:40: 76:df:56:2e:9e:7d:6c:8c:94:f7:e2:7e:20:6d:e8: fc:9c:78:91:15:d8:e3:82:c2:e7:6b:de:06:9e:d8: 37:53:bc:73:f0:57:46:d7:42:95:7a:3f:8f:f0:d8: 2b:36:e8:e5:94:e4:ce:66:d4:8c:a0:af:dc:07:27: f2:cd:ee:2e:4a:46:90:8e:bb:ad:8e:6a:fa:47:38: 66:a6:a1:c1:67:ce:14:96:bf:a7:dd:58:61:da:aa: 7c:df:e6:21:e4:25:ab:f8:8a:1e:70:0a:fc:6c:c5: da:e6:2d:a6:85:68:78:50:08:6a:b8:a0:77:ae:79: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:C7:A5:B5:FE:1A:8E:46:26:A6:C7:49:FB:52:22:16:2C:50:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a4b4527b-2036-3f40-bcdc-e2b6b03e2956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:67:01:53:ac:4c:f0:da:40:54:fd:ed:36:7e:55:50:35:32: ff:d8:96:e0:2d:b9:25:ef:76:21:18:3b:7e:55:8f:7b:19:3d: 2f:c4:89:34:61:50:e0:9f:bb:86:ca:a6:83:32:83:a1:a2:b5: 2d:f8:b3:8f:4c:0f:2d:a6:43:d9:94:46:ae:dd:89:33:1c:97: 31:26:a5:fc:41:47:40:2f:0f:83:9a:c9:21:d7:fb:c4:ef:66: 74:89:9a:f8:e5:2d:1c:ad:1b:5f:ac:0b:c4:7e:a9:ad:c5:14: 4c:5e:c2:43:b3:10:51:27:66:85:b1:de:6b:da:a5:0f:27:80: 6a:64:93:db:97:c0:dc:b8:60:55:9f:ec:c4:d8:0e:24:e4:98: 63:b9:c5:b4:de:79:c3:ba:7a:fe:db:94:9d:6d:06:a4:38:15: 20:67:1c:ab:ec:3f:c3:af:fe:e5:2b:ca:26:78:9b:0d:f0:11: 33:a7:40:59:f7:57:ac:3c:ee:ef:2e:5a:26:01:88:92:dc:e4: ff:f4:c8:e2:5e:53:b9:be:3c:78:68:f5:a6:fa:90:98:1e:16: ef:73:fd:9f:38:f2:0f:9d:3c:5a:86:e9:01:34:72:e4:4b:fc: 18:5a:a3:05:5b:f8:02:10:cd:1b:75:3c:89:50:35:a1:e3:e2: e3:c8:17:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdymEyMybnMuzSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2JjNjgyNjgtZDg2NC00NmIzLWE2OGMtZThlNmJjNWM3MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YM5Zz0kkrEzZNUmrSaReox/LMnX2RaZgKM7 2RN4V8AyARBpTxRyJh0tIaMRD2+XTWlpvmPhR6bTwPPevja/kHNaXfsONuqaQB8M FdfBJ6gJbRVVrxW3rBIWAWvzEwSgqmPXyKRkTe4II7iNWB1ZHFLn789/pA0Ibibj K9O00dGpOkfQBEB231Yunn1sjJT34n4gbej8nHiRFdjjgsLna94Gntg3U7xz8FdG 10KVej+P8NgrNujllOTOZtSMoK/cByfyze4uSkaQjrutjmr6RzhmpqHBZ84Ulr+n 3Vhh2qp83+Yh5CWr+IoecAr8bMXa5i2mhWh4UAhquKB3rnn9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNILx6W1/hqORiamx0n7UiIWLFBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTRiNDUyN2ItMjAzNi0z ZjQwLWJjZGMtZTJiNmIwM2UyOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRnAVOsTPDaQFT97TZ+VVA1Mv/YluAtuSXvdiEYO35Vj3sZPS/EiTRh UOCfu4bKpoMyg6GitS34s49MDy2mQ9mURq7diTMclzEmpfxBR0AvD4OaySHX+8Tv ZnSJmvjlLRytG1+sC8R+qa3FFExewkOzEFEnZoWx3mvapQ8ngGpkk9uXwNy4YFWf 7MTYDiTkmGO5xbTeecO6ev7blJ1tBqQ4FSBnHKvsP8Ov/uUryiZ4mw3wETOnQFn3 V6w87u8uWiYBiJLc5P/0yOJeU7m+PHho9ab6kJgeFu9z/Z848g+dPFqG6QE0cuRL /BhaowVb+AIQzRt1PIlQNaHj4uPIFyk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:11 2025 by rpki-client