$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa File: bd8071dc-d868-3f91-a4bc-822224a2e269.roa (raw, json) Hash identifier: webk4XeCILSizD/l8AXP+hgO/0BhVr6wcThj2BY98eo= Subject key identifier: 40:38:0A:35:52:7C:31:26:61:4C:64:EE:25:01:53:F0:2F:1A:39:3C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584BA0D26A0FC6D2626FDE584A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 395973 IP address blocks: 104.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6a:0f:c6:d2:62:6f:de:58:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=aad98418-cae5-459c-9f51-064672f09203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:97:75:cf:21:fa:95:b6:9e:91:aa:1f:ee: ab:3b:2b:a8:45:08:e9:7b:ea:15:c8:d6:1c:2f:8d: 9e:d7:c3:b8:f1:bc:76:37:29:07:b7:5e:15:17:93: 73:b1:8b:de:6c:9b:f9:44:27:92:13:03:16:af:03: da:f8:75:a9:2d:53:05:9d:88:5b:65:00:bc:f5:92: 97:07:7a:51:4f:18:75:58:f4:36:0f:ad:f6:b0:4e: e9:5b:6a:77:cd:6f:0e:ce:50:3b:95:79:d5:24:aa: 05:d7:3a:46:c9:46:53:40:d0:97:c9:1a:ac:08:15: 83:cb:5b:57:6b:dc:ba:65:02:e0:8d:40:39:89:84: 71:7e:0a:09:cc:99:26:78:ae:26:22:59:e4:41:f5: 39:a5:f3:9f:de:02:df:a7:9f:ff:39:05:c8:41:25: 9a:96:40:e6:b9:23:81:64:88:45:9e:71:66:46:e5: 46:30:cd:58:4e:17:cf:77:9b:c9:6d:1d:ea:4d:fd: 02:31:6f:91:c7:93:a4:ad:9b:bc:f3:28:fe:fd:18: 08:3b:5f:56:e6:49:ce:15:42:f6:e9:f2:19:61:3d: 66:a3:e6:fa:e8:60:d1:5f:2e:53:81:b3:c8:7e:fa: f6:05:50:4b:d7:70:9e:c8:a6:1f:a6:67:8f:9f:84: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:0A:35:52:7C:31:26:61:4C:64:EE:25:01:53:F0:2F:1A:39:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:69:89:56:cd:28:7d:5c:75:71:a2:18:e6:23:5f:4f:fa:fd: 52:81:88:57:0c:83:3b:82:0f:48:8f:fa:0e:cd:9d:34:16:fc: dd:2f:a0:a8:27:a3:d3:67:49:dd:8c:aa:a9:5f:dd:13:25:c5: 25:4b:17:25:a8:ce:41:13:71:e7:2c:e1:87:be:df:23:78:cf: 7e:25:b5:97:0d:22:97:f9:b2:2d:14:82:5f:50:0a:08:44:6a: 0b:35:b4:6d:e5:fa:bc:5f:53:41:cf:1e:0a:20:c0:27:0f:9b: 84:54:1d:0d:f5:ef:87:f8:56:5b:ef:7b:04:69:03:e4:34:5f: 75:8c:d5:bd:b2:6b:c4:63:aa:91:73:e4:f1:08:e9:cc:aa:42: 1a:f8:40:28:5b:93:87:19:38:e1:74:ca:27:0d:8f:1c:54:52: bf:5e:7a:9b:31:b4:c9:f1:87:6d:c5:9d:d7:fb:33:4e:27:77: c8:82:a4:ae:46:a7:55:bc:e8:8b:b2:47:86:4d:72:bc:64:c7: f9:e8:49:90:e8:09:3e:62:f7:72:55:d5:21:cf:48:97:d6:d5: 41:07:01:53:37:d8:49:5b:a1:cf:3a:63:cc:1e:47:cc:68:e4: b2:6c:c8:c3:4d:34:59:e7:13:aa:58:17:12:a4:ba:16:2a:ac: fc:08:5c:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0moPxtJib95YSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YWFkOTg0MTgtY2FlNS00NTljLTlmNTEtMDY0NjcyZjA5MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzqXdc8h+pW2npGqH+6rOyuoRQjpe+oVyNYc L42e18O48bx2NykHt14VF5NzsYvebJv5RCeSEwMWrwPa+HWpLVMFnYhbZQC89ZKX B3pRTxh1WPQ2D632sE7pW2p3zW8OzlA7lXnVJKoF1zpGyUZTQNCXyRqsCBWDy1tX a9y6ZQLgjUA5iYRxfgoJzJkmeK4mIlnkQfU5pfOf3gLfp5//OQXIQSWalkDmuSOB ZIhFnnFmRuVGMM1YThfPd5vJbR3qTf0CMW+Rx5OkrZu88yj+/RgIO19W5knOFUL2 6fIZYT1mo+b66GDRXy5TgbPIfvr2BVBL13CeyKYfpmePn4QD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA4CjVSfDEmYUxk7iUBU/AvGjk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmQ4MDcxZGMtZDg2OC0z ZjkxLWE0YmMtODIyMjI0YTJlMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRpiVbNKH1cdXGiGOYjX0/6/VKBiFcMgzuCD0iP+g7NnTQW/N0voKgn o9NnSd2Mqqlf3RMlxSVLFyWozkETcecs4Ye+3yN4z34ltZcNIpf5si0Ugl9QCghE ags1tG3l+rxfU0HPHgogwCcPm4RUHQ3174f4VlvvewRpA+Q0X3WM1b2ya8RjqpFz 5PEI6cyqQhr4QChbk4cZOOF0yicNjxxUUr9eepsxtMnxh23Fndf7M04nd8iCpK5G p1W86IuyR4ZNcrxkx/noSZDoCT5i93JV1SHPSJfW1UEHAVM32Elboc86Y8weR8xo 5LJsyMNNNFnnE6pYFxKkuhYqrPwIXDo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:01:58 2025 by rpki-client