$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa File: 16f0dc12-1d8d-394f-9b50-2a3247b35075.roa (raw, json) Hash identifier: IDZe2HJTZKa+A9CnlxPnyu/0Po+hfmSYOQ1OLqf753Q= Subject key identifier: 8F:AC:B0:47:6D:B4:37:E5:CF:6E:57:A8:58:3A:8A:09:F1:A9:90:0B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7E41B6CAAC09A1242F40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7e:41:b6:ca:ac:09:a1:24:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=40509c4c-da9f-47f2-8741-62e17d8350ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:f1:d8:0b:d3:3b:71:41:55:0c:dd:d0:b7: 01:e9:92:0b:11:7e:96:1b:84:d9:9d:69:2e:45:7b: ef:32:98:78:3b:d1:a6:22:57:1f:d1:63:94:86:82: f4:cb:a6:12:fd:b7:f3:2d:0d:1f:cb:d4:f7:8f:bf: c9:a6:84:34:db:25:03:19:8e:c3:d5:71:4f:2d:df: 2e:0a:76:c4:2a:2e:1b:88:fb:49:39:64:c6:e0:e1: 7d:c9:20:24:f0:88:a9:19:3d:54:50:17:ce:84:1a: 12:52:60:ad:b8:ae:a1:cc:41:4c:81:5f:34:c5:cb: 25:13:12:fd:50:38:62:10:a5:a1:70:ce:d8:53:c5: e9:27:9a:30:3a:d8:92:af:c9:a1:f8:be:30:1d:70: 27:e6:ee:d9:98:6b:aa:4d:78:d8:60:17:5a:12:23: b2:e5:f1:37:e5:a8:af:2f:b0:22:c1:06:90:26:fc: f2:db:95:55:e7:16:36:f5:fa:59:9f:c6:29:86:09: c9:6c:f8:17:e1:fa:94:97:26:28:ea:b9:9b:8c:31: a5:a6:75:16:73:54:2c:8f:ce:5b:91:82:7c:32:c9: 63:72:d8:29:01:94:c7:bf:a5:e7:fe:d5:a7:5b:20: 37:89:8b:62:46:8a:13:6e:01:4c:d8:7f:86:4d:de: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AC:B0:47:6D:B4:37:E5:CF:6E:57:A8:58:3A:8A:09:F1:A9:90:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ec:f1:d1:c9:63:ad:bb:1d:a6:2c:42:22:2c:8e:79:3c:7f: ff:de:53:ee:af:20:c6:ef:d9:00:f2:98:b3:4a:de:8f:94:44: 74:f9:89:24:da:0f:a6:83:43:7e:d5:ca:16:f1:b6:40:a3:f4: 93:3c:df:94:4c:c8:d0:91:2e:a6:f2:9a:8e:9a:33:86:19:88: 57:4f:9c:6c:52:0a:ce:7a:a5:07:57:79:29:b5:fe:c7:24:71: fe:56:43:ce:ed:d8:9f:1b:0f:c1:ea:60:e4:0e:0c:46:c2:4a: 95:b8:1f:3b:10:ff:5a:1d:16:23:99:28:ca:93:96:06:7d:91: ea:b4:8b:e6:b0:f0:a0:e4:de:eb:4b:ad:73:72:e6:6b:6c:60: 2d:9e:8e:4c:de:75:ba:60:0b:0f:7f:34:b3:e6:f4:ee:3a:1a: 1d:ef:a9:0d:f5:c1:ed:b3:75:2a:b3:68:1b:29:1e:fb:05:c4: 5e:23:ef:52:11:17:b3:0f:85:cc:80:1a:4e:75:49:72:aa:86: 97:33:15:a5:b8:eb:76:e6:44:f6:5e:26:88:ec:35:58:33:1b: f3:cb:4e:1f:35:28:a1:c5:7c:e2:44:92:f3:6b:1e:66:59:37: 56:2e:36:9a:f3:ca:64:90:26:99:d0:b9:2a:29:71:2e:aa:99: 21:e2:15:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDH5BtsqsCaEkL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NDA1MDljNGMtZGE5Zi00N2YyLTg3NDEtNjJlMTdkODM1MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWHx2AvTO3FBVQzd0LcB6ZILEX6WG4TZnWku RXvvMph4O9GmIlcf0WOUhoL0y6YS/bfzLQ0fy9T3j7/JpoQ02yUDGY7D1XFPLd8u CnbEKi4biPtJOWTG4OF9ySAk8IipGT1UUBfOhBoSUmCtuK6hzEFMgV80xcslExL9 UDhiEKWhcM7YU8XpJ5owOtiSr8mh+L4wHXAn5u7ZmGuqTXjYYBdaEiOy5fE35aiv L7AiwQaQJvzy25VV5xY29fpZn8YphgnJbPgX4fqUlyYo6rmbjDGlpnUWc1Qsj85b kYJ8MsljctgpAZTHv6Xn/tWnWyA3iYtiRooTbgFM2H+GTd6SFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+ssEdttDflz25XqFg6ignxqZALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTZmMGRjMTItMWQ4ZC0z OTRmLTliNTAtMmEzMjQ3YjM1MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzs8dHJY627HaYsQiIsjnk8f//eU+6vIMbv2QDymLNK3o+URHT5iSTa D6aDQ37VyhbxtkCj9JM835RMyNCRLqbymo6aM4YZiFdPnGxSCs56pQdXeSm1/sck cf5WQ87t2J8bD8HqYOQODEbCSpW4HzsQ/1odFiOZKMqTlgZ9keq0i+aw8KDk3utL rXNy5mtsYC2ejkzedbpgCw9/NLPm9O46Gh3vqQ31we2zdSqzaBspHvsFxF4j71IR F7MPhcyAGk51SXKqhpczFaW463bmRPZeJojsNVgzG/PLTh81KKHFfOJEkvNrHmZZ N1YuNprzymSQJpnQuSopcS6qmSHiFfE= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:23 2025 by rpki-client