$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa File: 187c7be3-3ba2-3c18-9c42-498f367717b1.roa (raw, json) Hash identifier: vHbkO3jVE4dbjejPYQl98IX4MjvfmvWQUESrTRjbyG8= Subject key identifier: 11:69:92:D9:6C:7E:C1:52:40:A6:CA:EA:1A:64:36:90:06:47:5D:0D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C94CFA28FDBFA6D3C5900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:94:cf:a2:8f:db:fa:6d:3c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=ff11139b-7381-4a1e-b644-a8887f4b075f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:a3:8b:34:38:43:f0:58:d1:e7:3b:6d:08: 48:9a:5e:a6:e3:51:8c:56:2a:aa:9a:8e:0e:b8:bb: 8d:61:64:e1:b8:f4:66:a1:1e:14:2a:d8:09:3e:41: f4:ca:6e:cb:c4:2e:0a:34:20:87:07:a0:66:3a:52: be:53:80:3b:07:5c:5f:20:93:01:09:ac:7d:99:d2: ba:c2:82:92:cc:e9:6f:fd:68:30:dd:b7:83:c3:bf: 93:08:ba:dd:0a:0f:ee:0a:93:a6:ef:b5:4d:2d:0e: 14:56:a8:00:c2:77:4d:08:e7:38:0e:8b:45:14:21: b4:9d:8c:df:e2:60:37:6a:cc:7d:ac:30:e0:94:d6: d4:e0:5a:ea:c5:d1:e0:d5:13:e8:b3:f6:34:c7:98: 7c:cd:ea:8e:8e:68:5b:52:db:3e:89:a3:1b:81:a8: 9a:9f:cd:5a:9a:44:b9:b7:fb:5f:ab:5b:5d:a9:be: 4e:b7:47:25:d3:23:df:d2:1a:72:31:19:6d:f9:ee: f1:c8:0a:78:ee:0e:fe:1f:d4:36:df:2d:45:43:cd: 2b:e6:24:a7:b7:7f:4c:fa:9e:5c:7e:06:00:48:26: 82:2a:5e:74:ab:21:48:84:e5:9c:59:2e:47:15:ca: bb:23:ca:43:26:20:76:4a:35:2d:f8:1f:c7:6f:25: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:69:92:D9:6C:7E:C1:52:40:A6:CA:EA:1A:64:36:90:06:47:5D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:14:69:17:7b:81:8f:d2:85:9b:97:79:91:34:37:d0:28:71: e7:32:06:ef:6d:f3:a7:99:42:36:0d:65:87:89:79:80:44:a3: 9a:94:5d:ad:2f:6a:d2:7c:ee:c5:de:6b:d6:aa:37:01:1b:d7: 20:f9:21:94:0d:dc:da:30:f2:d1:30:e4:b9:1a:1b:49:16:65: 81:e8:90:c9:f4:ac:f6:56:e7:60:3e:a9:cc:8e:1e:b5:8b:87: 26:ab:28:3f:92:e6:1e:bc:3f:09:c0:9a:8e:64:d1:e5:bd:46: df:2b:a7:81:85:9d:57:bd:4b:35:1c:c3:9d:58:77:83:22:4c: ca:4c:28:9d:b6:08:49:62:54:87:34:d0:3f:f8:40:17:55:5a: 95:a3:2f:10:74:5c:ce:17:93:34:f4:58:37:78:67:d9:c2:96: fc:d4:f1:6f:60:ba:20:5e:d3:b5:5a:48:b1:98:53:50:c1:46: 57:59:cb:54:bc:38:d0:75:fa:30:52:6a:8b:d3:f5:f5:0a:3b: d4:a5:da:b9:91:fc:e4:9d:2f:50:a6:f6:1e:fe:e6:2e:44:1b: d9:fd:a3:5b:b6:5c:d6:39:3a:87:4a:be:0d:1f:52:cb:9e:05: 25:81:85:b1:01:b9:ae:15:c7:e0:c4:b0:36:17:e7:c9:ec:dd: 30:d5:c9:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJTPoo/b+m08WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmYxMTEzOWItNzM4MS00YTFlLWI2NDQtYTg4ODdmNGIwNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMyjizQ4Q/BY0ec7bQhIml6m41GMViqqmo4O uLuNYWThuPRmoR4UKtgJPkH0ym7LxC4KNCCHB6BmOlK+U4A7B1xfIJMBCax9mdK6 woKSzOlv/Wgw3beDw7+TCLrdCg/uCpOm77VNLQ4UVqgAwndNCOc4DotFFCG0nYzf 4mA3asx9rDDglNbU4FrqxdHg1RPos/Y0x5h8zeqOjmhbUts+iaMbgaian81amkS5 t/tfq1tdqb5Ot0cl0yPf0hpyMRlt+e7xyAp47g7+H9Q23y1FQ80r5iSnt39M+p5c fgYASCaCKl50qyFIhOWcWS5HFcq7I8pDJiB2SjUt+B/HbyVHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFpktlsfsFSQKbK6hpkNpAGR10NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTg3YzdiZTMtM2JhMi0z YzE4LTljNDItNDk4ZjM2NzcxN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwUaRd7gY/ShZuXeZE0N9AocecyBu9t86eZQjYNZYeJeYBEo5qUXa0v atJ87sXea9aqNwEb1yD5IZQN3Now8tEw5LkaG0kWZYHokMn0rPZW52A+qcyOHrWL hyarKD+S5h68PwnAmo5k0eW9Rt8rp4GFnVe9SzUcw51Yd4MiTMpMKJ22CEliVIc0 0D/4QBdVWpWjLxB0XM4XkzT0WDd4Z9nClvzU8W9guiBe07VaSLGYU1DBRldZy1S8 ONB1+jBSaovT9fUKO9Sl2rmR/OSdL1Cm9h7+5i5EG9n9o1u2XNY5OodKvg0fUsue BSWBhbEBua4Vx+DEsDYX58ns3TDVySQ= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:17 2025 by rpki-client