$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa File: ca8061fc-b111-30d3-af87-544970b8a9eb.roa (raw, json) Hash identifier: 5r5yk4ucxsgJmghjk7FFipN3QDzr2ePMn2jfpy5zf3Y= Subject key identifier: A2:94:ED:F6:3C:F2:B8:E2:91:0D:DB:01:2B:95:92:0D:BD:67:8C:E1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F376546A950E2983720C680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:65:46:a9:50:e2:98:37:20:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f2258876-cfd0-4f6b-b8f1-a5bddf907942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:6d:6a:20:de:e7:0c:08:a2:a2:28:c4:3a: 00:53:59:9a:75:f6:30:8a:d9:24:73:25:c3:f9:d7: c9:7d:21:3a:33:4b:27:65:46:8c:76:33:74:2d:07: 38:dd:b6:eb:ec:ce:fb:2b:d7:e0:b5:bd:ae:79:cd: 5c:34:7f:87:0c:77:b9:97:85:6a:dd:be:96:c5:76: 2e:0c:56:9c:1f:62:95:b8:14:26:3e:61:32:12:f3: d2:90:ed:dd:d2:35:60:01:6c:df:de:ec:1c:d3:02: f3:13:79:ca:38:01:8d:fe:04:a1:d7:d1:1d:e2:c1: f6:61:8e:47:b9:39:1c:ea:6b:a0:08:67:61:4c:1e: 71:d3:21:b9:5e:5b:d7:07:46:91:e0:06:fb:04:de: e2:d5:e7:2a:72:98:b2:74:19:b6:39:df:7b:d9:19: c4:3a:62:0e:21:76:4d:4a:20:da:17:12:c4:08:38: 1b:d2:e2:7f:46:9f:ce:1e:3c:49:c5:ae:ce:7b:da: cd:6c:24:70:a1:93:60:10:d2:b9:32:1f:e9:9a:4f: 54:c9:55:5a:9a:f9:37:12:ba:61:6a:77:73:60:81: 35:11:62:4e:f3:45:8c:1b:cf:01:32:1c:40:df:13: 02:81:0d:7b:58:c0:16:18:6a:b2:07:89:32:a9:a6: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:94:ED:F6:3C:F2:B8:E2:91:0D:DB:01:2B:95:92:0D:BD:67:8C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ca8061fc-b111-30d3-af87-544970b8a9eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a3:88:86:4a:bf:6b:f7:b1:3f:35:b6:63:a7:05:94:18:1a: 87:6e:e5:03:83:72:8d:4d:05:28:12:2c:4f:50:9f:ae:27:e0: 4b:f0:b7:4a:2f:1e:e9:7e:1b:c7:ed:41:53:63:cc:b5:a0:7f: 40:4b:10:50:2e:91:a8:d2:a5:52:12:d7:9d:24:f0:99:84:c1: 89:e7:45:fd:7b:e4:ca:35:58:13:d2:fd:e5:8a:04:2f:1c:d2: 36:7d:7c:5d:6b:a4:28:be:4f:ed:d7:f4:53:da:27:36:cd:53: 31:b8:0b:f5:35:03:7f:7b:70:48:3e:1b:77:be:4b:6b:8d:ea: c0:f6:07:4f:97:a2:66:13:ef:09:f1:da:e4:c2:a5:15:0b:41: 77:62:17:02:17:06:61:ac:71:76:37:44:08:6b:bf:40:ea:5c: 9b:e6:ea:d8:da:55:09:ae:bb:26:92:7c:e0:c8:87:79:0e:34: b8:30:9c:5e:98:c5:32:b4:44:71:d1:11:5e:88:36:c0:4e:67: 0b:53:78:41:bf:b5:3f:df:1a:41:1e:fd:03:33:4a:6b:27:65: a0:69:12:c2:a6:9a:f6:51:de:ab:2d:af:3a:b6:5c:f0:2f:2b: c8:bb:0e:a8:d3:dd:11:a6:10:77:b9:a4:3d:ab:62:04:95:54: 95:74:f8:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2VGqVDimDcgxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjIyNTg4NzYtY2ZkMC00ZjZiLWI4ZjEtYTViZGRmOTA3OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthFtaiDe5wwIoqIoxDoAU1madfYwitkkcyXD +dfJfSE6M0snZUaMdjN0LQc43bbr7M77K9fgtb2uec1cNH+HDHe5l4Vq3b6WxXYu DFacH2KVuBQmPmEyEvPSkO3d0jVgAWzf3uwc0wLzE3nKOAGN/gSh19Ed4sH2YY5H uTkc6mugCGdhTB5x0yG5XlvXB0aR4Ab7BN7i1ecqcpiydBm2Od972RnEOmIOIXZN SiDaFxLECDgb0uJ/Rp/OHjxJxa7Oe9rNbCRwoZNgENK5Mh/pmk9UyVVamvk3Erph andzYIE1EWJO80WMG88BMhxA3xMCgQ17WMAWGGqyB4kyqabMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKU7fY88rjikQ3bASuVkg29Z4zhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2E4MDYxZmMtYjExMS0z MGQzLWFmODctNTQ0OTcwYjhhOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKjiIZKv2v3sT81tmOnBZQYGodu5QODco1NBSgSLE9Qn64n4Evwt0ov Hul+G8ftQVNjzLWgf0BLEFAukajSpVIS150k8JmEwYnnRf175Mo1WBPS/eWKBC8c 0jZ9fF1rpCi+T+3X9FPaJzbNUzG4C/U1A397cEg+G3e+S2uN6sD2B0+XomYT7wnx 2uTCpRULQXdiFwIXBmGscXY3RAhrv0DqXJvm6tjaVQmuuyaSfODIh3kONLgwnF6Y xTK0RHHREV6INsBOZwtTeEG/tT/fGkEe/QMzSmsnZaBpEsKmmvZR3qstrzq2XPAv K8i7DqjT3RGmEHe5pD2rYgSVVJV0+O0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:37 2025 by rpki-client