$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fc41368-956b-32a6-aa63-67503ce8f40c.roa File: 2fc41368-956b-32a6-aa63-67503ce8f40c.roa (raw, json) Hash identifier: f/E2GnmWWWMTgkTXtk/bpQxhrW5F/DQqKKYyMHF7rYM= Subject key identifier: B0:68:E8:64:5C:EF:71:5A:6F:99:8F:BC:93:63:D4:3C:99:38:77:6F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DED2AEE6CF8AF7E16B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fc41368-956b-32a6-aa63-67503ce8f40c.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:de:d2:ae:e6:cf:8a:f7:e1:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=e02839a9-3b04-4434-9cfb-530b4c0394d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:e0:e6:fe:49:d5:9e:c5:44:08:04:22:f1: ce:90:27:d3:4b:83:1f:00:06:7d:a4:d5:d7:83:bc: d5:24:d2:7a:b2:68:3b:03:4d:03:04:98:34:1b:40: 8d:3b:be:57:e0:07:1e:77:05:84:3b:01:51:60:32: f5:95:6f:59:76:6d:aa:d4:2c:ae:36:7d:5b:ea:9b: 8f:5e:ae:d5:b6:d7:03:b3:89:c5:43:d5:01:2d:0c: 4c:42:c5:53:d4:0c:6d:aa:a8:ad:86:bd:ed:b7:42: 19:75:0e:41:7a:b4:25:cb:99:05:33:16:85:e1:28: 56:20:3c:d5:cf:a7:50:b3:bf:5c:30:49:27:5f:da: 8c:0f:11:16:53:3f:87:d9:54:99:81:3c:78:bb:80: 46:ba:c9:fb:f8:e7:19:7a:b8:b6:e8:0b:33:65:cd: 3f:60:c2:da:f7:21:bc:38:1f:68:1a:5f:3b:71:42: ef:08:c0:dc:45:b0:b9:7a:b5:14:d7:2d:11:81:f8: 75:a9:fb:5f:6c:3a:39:5c:5d:67:97:0c:4d:c0:8d: 1d:af:d2:49:df:46:ab:67:43:6a:2b:b2:e8:4e:80: 16:f1:46:11:75:e2:eb:f7:cd:7b:e3:81:85:6d:c3: f7:be:c0:a6:23:7d:14:36:b5:1a:7b:d2:96:5f:94: e3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:E8:64:5C:EF:71:5A:6F:99:8F:BC:93:63:D4:3C:99:38:77:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fc41368-956b-32a6-aa63-67503ce8f40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ae:34:e1:a8:e4:f7:44:a2:50:b8:3f:ac:1d:b4:c3:b6:ab: 15:85:ee:68:1a:d7:ac:56:23:39:59:b7:fd:7f:52:42:ee:ba: 73:aa:84:41:75:3f:26:34:10:4e:bb:b9:a7:6f:12:58:a7:24: 4c:e7:52:04:02:db:34:73:a6:c4:09:e6:08:f6:f6:23:61:54: ec:98:6b:66:0d:d6:e5:6f:09:00:fc:24:bf:39:52:ad:f7:c2: ab:a1:09:44:2d:d8:ce:74:97:34:61:ec:6b:25:cb:0c:c6:c5: cb:7b:f4:3b:7d:37:a0:55:2b:1f:31:42:81:5e:a3:14:9c:fb: 8a:cd:b1:c3:ef:3b:a8:71:e1:71:aa:36:30:fb:2f:36:b2:73: 1a:52:ec:af:c0:dc:f1:94:d9:a9:bc:1a:a0:ab:8f:c6:b9:52: e8:2a:1c:46:a8:b3:2a:c7:b4:0b:23:60:9e:e2:23:af:69:c3: 98:88:47:1c:33:13:aa:1e:03:3e:c0:f6:66:fc:8f:78:04:0a: c0:9f:da:3b:9a:9b:f7:2a:10:23:0b:c0:76:e8:bb:b2:1a:a2: 1a:b2:21:8f:ef:79:ef:fd:48:9e:4e:4c:1c:68:f0:0d:b6:6c: 8b:1f:c1:ab:de:b4:76:e1:90:ee:a2:fe:4b:19:41:a6:53:97: 2f:60:1b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQd7SrubPivfhawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTAyODM5YTktM2IwNC00NDM0LTljZmItNTMwYjRjMDM5NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylDg5v5J1Z7FRAgEIvHOkCfTS4MfAAZ9pNXX g7zVJNJ6smg7A00DBJg0G0CNO75X4AcedwWEOwFRYDL1lW9Zdm2q1CyuNn1b6puP Xq7VttcDs4nFQ9UBLQxMQsVT1Axtqqithr3tt0IZdQ5BerQly5kFMxaF4ShWIDzV z6dQs79cMEknX9qMDxEWUz+H2VSZgTx4u4BGusn7+OcZeri26AszZc0/YMLa9yG8 OB9oGl87cULvCMDcRbC5erUU1y0Rgfh1qftfbDo5XF1nlwxNwI0dr9JJ30arZ0Nq K7LoToAW8UYRdeLr981744GFbcP3vsCmI30UNrUae9KWX5TjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBo6GRc73Fab5mPvJNj1DyZOHdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmZjNDEzNjgtOTU2Yi0z MmE2LWFhNjMtNjc1MDNjZThmNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeuNOGo5PdEolC4P6wdtMO2qxWF7mga16xWIzlZt/1/UkLuunOqhEF1 PyY0EE67uadvElinJEznUgQC2zRzpsQJ5gj29iNhVOyYa2YN1uVvCQD8JL85Uq33 wquhCUQt2M50lzRh7GslywzGxct79Dt9N6BVKx8xQoFeoxSc+4rNscPvO6hx4XGq NjD7LzaycxpS7K/A3PGU2am8GqCrj8a5UugqHEaosyrHtAsjYJ7iI69pw5iIRxwz E6oeAz7A9mb8j3gECsCf2juam/cqECMLwHbou7IaohqyIY/vee/9SJ5OTBxo8A22 bIsfwavetHbhkO6i/ksZQaZTly9gG+w= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:13 2025 by rpki-client