$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b803bd3-c1cf-339e-9368-880d31d8be70.roa File: 0b803bd3-c1cf-339e-9368-880d31d8be70.roa (raw, json) Hash identifier: AH/BiLN4SfNbg48cZjTKFAyttgN4jqfgwjpdqvjUQI4= Subject key identifier: 10:71:0A:20:D0:8E:92:23:81:AF:51:26:F9:F3:1E:1D:CD:F3:51:D7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8DDBE8C964D1A0597A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b803bd3-c1cf-339e-9368-880d31d8be70.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8d:db:e8:c9:64:d1:a0:59:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=59595d96-4489-43e1-b5a8-033c10bcb841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:c6:f5:5e:00:11:93:10:d6:48:2b:46:ea: 9e:98:a7:78:60:69:37:e2:47:e3:93:4b:aa:45:e3: 57:e4:10:e7:35:54:71:e5:60:64:3f:12:68:c3:4c: cc:db:3f:62:a7:0c:33:a6:a8:a6:66:f2:bb:3e:3f: 6e:ae:b1:79:30:98:00:97:1d:98:5a:b3:a5:b2:9a: 53:9c:fb:97:6e:b6:7b:de:50:c0:f1:51:f4:44:ac: 34:71:e0:71:36:9b:6f:95:db:53:2f:06:de:72:29: bc:15:a1:b2:3f:25:c5:45:bf:31:1b:e6:51:d0:fa: b3:9d:ea:bc:30:74:04:a6:ca:c6:7c:4d:38:f3:2b: a3:07:ba:d2:34:62:3b:7f:a4:9c:b2:de:9d:cf:f0: 69:ea:a9:6a:9f:cc:01:f6:a6:d2:95:70:14:a2:3e: 98:53:42:44:55:fb:70:53:7e:4e:e4:32:c5:74:93: a8:78:50:4e:02:04:f9:94:a3:de:ff:94:c2:8b:00: 15:d4:e6:83:d3:5e:70:f3:04:54:0c:50:1d:c5:bf: 2a:de:f7:5a:e8:7e:b4:d4:13:8c:4d:cc:3f:42:5d: c9:60:a9:dc:eb:ca:dd:1b:60:ef:22:7d:63:2f:14: 14:45:71:d6:93:83:e5:42:4e:3b:37:4a:3a:3a:df: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:0A:20:D0:8E:92:23:81:AF:51:26:F9:F3:1E:1D:CD:F3:51:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b803bd3-c1cf-339e-9368-880d31d8be70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:10:49:91:4f:a9:aa:ef:b0:b0:4a:35:18:29:df:06:00:3b: 41:85:0a:fd:6f:74:0d:b5:62:5e:a4:fe:61:66:fd:2e:2b:6d: 19:b5:04:c8:78:b8:ec:45:0c:1d:80:1f:67:2b:77:ad:0a:01: ed:49:84:bd:46:7e:3a:a3:4e:93:10:36:fc:69:f0:85:5a:64: 21:f5:fb:e9:ee:67:8c:0c:22:a5:36:7f:3a:8a:71:60:30:36: 17:9d:f8:b1:2b:a4:a3:4f:88:16:92:48:be:75:8a:56:c2:34: 2f:32:78:76:ee:a6:32:d5:97:dd:9a:ec:11:76:87:66:80:78: 38:81:a4:10:39:8b:a3:cc:fc:bc:cf:70:c1:53:5c:5a:7e:76: 79:96:6a:01:48:33:ad:79:bf:e2:7e:6f:34:58:ae:96:4f:79: 0a:6c:2a:d8:d1:55:d5:69:16:94:6e:45:41:d9:0b:55:2d:c5: b4:da:ff:b6:4f:97:e6:fc:a1:e9:5f:ab:71:5e:62:55:8a:f3: b0:e0:f9:0d:09:a9:e8:39:ac:15:d0:0f:e7:b6:de:0a:1c:32: 30:08:f3:61:57:62:01:a4:45:10:6c:01:fa:3b:70:fc:d9:7a: 12:1e:43:9a:ec:4e:af:9e:78:46:a7:71:cc:ec:ed:5f:f7:6a: a7:87:0f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDI3b6Mlk0aBZegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NTk1OTVkOTYtNDQ4OS00M2UxLWI1YTgtMDMzYzEwYmNiODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjHG9V4AEZMQ1kgrRuqemKd4YGk34kfjk0uq ReNX5BDnNVRx5WBkPxJow0zM2z9ipwwzpqimZvK7Pj9urrF5MJgAlx2YWrOlsppT nPuXbrZ73lDA8VH0RKw0ceBxNptvldtTLwbecim8FaGyPyXFRb8xG+ZR0Pqzneq8 MHQEpsrGfE048yujB7rSNGI7f6Scst6dz/Bp6qlqn8wB9qbSlXAUoj6YU0JEVftw U35O5DLFdJOoeFBOAgT5lKPe/5TCiwAV1OaD015w8wRUDFAdxb8q3vda6H601BOM Tcw/Ql3JYKnc68rdG2DvIn1jLxQURXHWk4PlQk47N0o6Ot8HqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBxCiDQjpIjga9RJvnzHh3N81HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGI4MDNiZDMtYzFjZi0z MzllLTkzNjgtODgwZDMxZDhiZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4QSZFPqarvsLBKNRgp3wYAO0GFCv1vdA21Yl6k/mFm/S4rbRm1BMh4 uOxFDB2AH2crd60KAe1JhL1GfjqjTpMQNvxp8IVaZCH1++nuZ4wMIqU2fzqKcWAw Nhed+LErpKNPiBaSSL51ilbCNC8yeHbupjLVl92a7BF2h2aAeDiBpBA5i6PM/LzP cMFTXFp+dnmWagFIM615v+J+bzRYrpZPeQpsKtjRVdVpFpRuRUHZC1UtxbTa/7ZP l+b8oelfq3FeYlWK87Dg+Q0Jqeg5rBXQD+e23gocMjAI82FXYgGkRRBsAfo7cPzZ ehIeQ5rsTq+eeEancczs7V/3aqeHD5E= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:21 2025 by rpki-client