$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5865d38b-20ff-3439-b315-e2a17a5ffbf4.roa File: 5865d38b-20ff-3439-b315-e2a17a5ffbf4.roa (raw, json) Hash identifier: 6YMycjwhjDg1SH185B9h0pVP0h7qWJsOSTO6M1142Vg= Subject key identifier: 2C:41:3E:60:53:26:87:6C:BA:80:DF:88:0E:B8:13:D9:0C:43:0C:AF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B8B5FCAAD6D81151FE1DAB0C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5865d38b-20ff-3439-b315-e2a17a5ffbf4.roa Signing time: Thu 16 Oct 2025 20:38:04 +0000 ROA not before: Thu 16 Oct 2025 20:38:04 +0000 ROA not after: Wed 14 Jan 2026 21:38:04 +0000 asID: 395973 IP address blocks: 104.134.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:5f:ca:ad:6d:81:15:1f:e1:da:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 16 20:38:04 2025 GMT Not After : Jan 14 21:38:04 2026 GMT Subject: CN=76693e89-7a2e-4889-a045-b87083d3d43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:fd:0c:ae:cf:18:1c:ba:db:fd:41:32:2e: aa:dc:c0:71:42:72:26:65:77:32:1a:92:ac:7f:30: 4b:3a:dd:8e:ff:36:1c:a7:30:24:b5:80:31:d3:7d: 35:9c:18:87:3e:88:6b:30:57:50:8f:df:73:77:f2: 5d:08:02:91:9c:73:6e:19:2e:62:fa:01:ca:60:e0: aa:9a:ba:46:80:d9:c7:ec:46:2e:5f:59:d5:d8:cb: 92:2c:54:c8:36:2a:84:51:d5:4b:66:12:b9:9a:51: c1:7f:e0:19:e7:ac:88:7b:de:41:00:9e:f2:73:8d: ab:2e:16:2e:c2:c3:52:77:cf:78:c6:07:f3:31:38: 60:59:de:23:0b:fb:07:01:32:2f:2f:cb:b5:04:ef: 92:59:33:f8:99:da:3e:8c:ef:5b:f5:b5:23:f8:71: 6c:ab:f2:fd:db:fc:49:e0:73:e7:ef:7e:ae:bc:c8: 21:65:11:a8:b8:1c:26:0b:8d:d6:e0:b1:3b:84:a5: 4c:7c:22:09:d4:d1:66:42:65:48:8f:a7:ac:ad:ac: 60:f0:f8:98:bb:9d:da:a1:ac:34:e6:60:d1:5c:ca: 0f:15:f0:ea:d3:02:fe:2c:91:45:a7:a8:d4:10:d4: d6:2e:05:c8:cd:fc:08:a2:f9:73:46:d6:f2:f5:06: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:3E:60:53:26:87:6C:BA:80:DF:88:0E:B8:13:D9:0C:43:0C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5865d38b-20ff-3439-b315-e2a17a5ffbf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:14:ee:21:d8:b6:de:a8:c3:56:a3:8d:0b:83:8e:4c:f5:eb: e6:da:8a:d7:07:87:a3:72:25:0b:0a:9a:95:e6:a5:0a:6e:eb: ee:7b:c3:4b:25:02:2d:8a:3b:b7:fd:37:71:2e:3a:d0:e5:84: 0e:3a:68:62:6b:69:30:1e:d8:23:36:18:75:01:1f:42:1f:df: a2:6b:a8:62:00:78:63:8d:97:c1:fa:5f:18:2e:82:93:52:56: 87:99:98:84:97:81:b5:6a:2b:28:94:65:da:b3:7b:64:b5:24: 25:d0:e2:6c:7a:d6:97:14:80:d5:f3:04:63:d3:36:2c:0f:33: 5b:8e:0a:b1:80:f5:5a:ed:f0:c3:f1:61:1c:fb:17:ac:8d:b5: 5e:f5:de:3a:ab:b2:f3:76:64:6b:40:2e:9b:1c:bf:b1:d3:75: b8:e4:4b:05:15:e2:d6:d1:af:4d:e2:d5:22:f7:70:b9:8a:e6: 80:2d:d0:08:74:51:61:87:a9:8e:43:44:7f:52:48:59:c4:71: 82:36:90:10:96:bf:9a:06:48:05:bc:80:9d:ba:03:e7:eb:fb: 18:04:4d:70:4e:3b:a1:0c:6e:50:fe:05:d6:ee:32:74:f6:9a: fb:9a:ba:8c:2e:d2:ca:40:16:f2:15:2f:df:ce:46:50:02:dd: dc:e5:14:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLX8qtbYEVH+HasMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAxNjIwMzgwNFoXDTI2MDExNDIxMzgwNFowLzEtMCsGA1UEAxMk NzY2OTNlODktN2EyZS00ODg5LWEwNDUtYjg3MDgzZDNkNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicH9DK7PGBy62/1BMi6q3MBxQnImZXcyGpKs fzBLOt2O/zYcpzAktYAx0301nBiHPohrMFdQj99zd/JdCAKRnHNuGS5i+gHKYOCq mrpGgNnH7EYuX1nV2MuSLFTINiqEUdVLZhK5mlHBf+AZ56yIe95BAJ7yc42rLhYu wsNSd894xgfzMThgWd4jC/sHATIvL8u1BO+SWTP4mdo+jO9b9bUj+HFsq/L92/xJ 4HPn736uvMghZRGouBwmC43W4LE7hKVMfCIJ1NFmQmVIj6esraxg8PiYu53aoaw0 5mDRXMoPFfDq0wL+LJFFp6jUENTWLgXIzfwIovlzRtby9QZdLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxBPmBTJodsuoDfiA64E9kMQwyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTg2NWQzOGItMjBmZi0z NDM5LWIzMTUtZTJhMTdhNWZmYmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsU7iHYtt6ow1ajjQuDjkz16+baitcHh6NyJQsKmpXmpQpu6+57w0sl Ai2KO7f9N3EuOtDlhA46aGJraTAe2CM2GHUBH0If36JrqGIAeGONl8H6XxgugpNS VoeZmISXgbVqKyiUZdqze2S1JCXQ4mx61pcUgNXzBGPTNiwPM1uOCrGA9Vrt8MPx YRz7F6yNtV713jqrsvN2ZGtALpscv7HTdbjkSwUV4tbRr03i1SL3cLmK5oAt0Ah0 UWGHqY5DRH9SSFnEcYI2kBCWv5oGSAW8gJ26A+fr+xgETXBOO6EMblD+BdbuMnT2 mvuauowu0spAFvIVL9/ORlAC3dzlFD8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:32 2025 by rpki-client