$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa File: 31cb2788-4474-3889-9f7f-b65f7a61f692.roa (raw, json) Hash identifier: yiFqvUI37kjTWf0qeUWZxy5qCvWUzH7H718tTyg3IsY= Subject key identifier: 37:FB:30:5B:8B:28:0D:B5:1B:9B:93:3F:09:9E:F1:25:ED:CE:BB:80 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C9083280B0A2D08D58B20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:90:83:28:0b:0a:2d:08:d5:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=52c9743f-7450-4f06-8c17-69bc6d61f3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:be:38:b6:34:3f:1a:c7:65:3d:09:8f:1d: 32:40:07:67:3a:77:b7:56:c0:8c:5e:b6:86:4a:70: 92:08:40:d2:ba:30:ee:71:d7:93:63:59:02:86:08: 0f:eb:dc:e9:b0:17:0f:3c:a0:f9:2c:86:2d:3e:f0: c9:0c:26:32:56:18:1b:77:e5:52:90:6b:22:4e:86: 1d:3b:b9:d5:d3:ad:36:0f:95:39:d9:51:a7:48:9e: c2:52:ec:19:5f:84:41:1f:70:a0:b6:b5:bf:d5:db: e0:17:23:e4:38:65:91:93:a0:c2:b7:4b:24:27:66: fa:fb:d2:a8:6e:89:85:5c:5a:d7:e5:7f:cb:e5:45: 63:6b:f7:61:75:33:64:ec:e3:54:73:d7:ae:d2:d9: 3b:c1:d9:4f:90:b7:dd:11:92:2d:72:50:8f:5b:f4: 8e:12:66:13:12:a1:08:d5:5a:4d:43:6e:74:37:0a: 1b:57:1b:67:e4:34:85:dc:6d:7a:ae:0a:51:50:69: b7:77:dc:e4:d4:8c:a8:2f:56:bc:83:28:63:87:18: a1:93:c8:5f:88:2c:11:b8:32:fe:0e:25:9d:73:41: 59:2e:f8:72:c9:2b:2f:cb:a3:8a:1f:30:18:82:d9: bc:7f:cf:fb:5d:6e:3d:3b:59:a5:33:ce:e5:a8:12: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:30:5B:8B:28:0D:B5:1B:9B:93:3F:09:9E:F1:25:ED:CE:BB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:dc:0f:af:e2:73:5b:cc:b7:71:3c:43:6c:4c:13:aa:b0:bd: 06:f2:7c:3b:a1:3b:f7:ff:83:c1:c9:67:58:83:db:7b:03:40: 4c:b1:61:08:cc:96:4a:04:09:0f:90:fb:79:94:33:ab:59:35: 45:8d:8d:c5:05:e0:45:25:c3:c2:eb:ed:fe:cb:dd:65:b4:97: 01:80:0b:9f:4a:52:aa:96:0f:fb:33:33:fb:75:26:de:8f:ca: b0:61:eb:36:38:db:30:d8:2b:6b:37:9b:9d:15:b0:02:d1:2e: a4:2f:39:1f:e9:01:0f:d4:91:0d:9a:5a:b4:85:b3:2c:0c:65: b5:4a:49:1e:89:57:51:75:3e:6f:06:06:aa:72:18:40:f8:86: ae:7b:46:2a:25:9f:45:60:77:7b:b2:fe:bb:f4:89:46:ac:ba: e4:a5:84:35:6b:4d:b0:2c:a0:ba:93:dc:8d:f6:f9:4f:c9:b1: 09:94:2c:ac:29:36:d4:34:10:38:30:70:22:03:72:55:94:70: 69:2a:24:5b:6f:fa:15:25:a9:e7:bf:c3:a3:f5:b1:17:0b:c1: a8:1a:46:46:42:81:3a:cd:c8:29:d5:fd:ba:e8:40:e4:71:9b: 74:2f:5b:8b:be:c9:6b:51:3e:e0:53:a1:bc:e5:50:0b:27:0b: 44:65:ae:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJCDKAsKLQjViyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NTJjOTc0M2YtNzQ1MC00ZjA2LThjMTctNjliYzZkNjFmM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCW+OLY0PxrHZT0Jjx0yQAdnOne3VsCMXraG SnCSCEDSujDucdeTY1kChggP69zpsBcPPKD5LIYtPvDJDCYyVhgbd+VSkGsiToYd O7nV0602D5U52VGnSJ7CUuwZX4RBH3CgtrW/1dvgFyPkOGWRk6DCt0skJ2b6+9Ko bomFXFrX5X/L5UVja/dhdTNk7ONUc9eu0tk7wdlPkLfdEZItclCPW/SOEmYTEqEI 1VpNQ250NwobVxtn5DSF3G16rgpRUGm3d9zk1IyoL1a8gyhjhxihk8hfiCwRuDL+ DiWdc0FZLvhyySsvy6OKHzAYgtm8f8/7XW49O1mlM87lqBJrZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf7MFuLKA21G5uTPwme8SXtzruAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzFjYjI3ODgtNDQ3NC0z ODg5LTlmN2YtYjY1ZjdhNjFmNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHcD6/ic1vMt3E8Q2xME6qwvQbyfDuhO/f/g8HJZ1iD23sDQEyxYQjM lkoECQ+Q+3mUM6tZNUWNjcUF4EUlw8Lr7f7L3WW0lwGAC59KUqqWD/szM/t1Jt6P yrBh6zY42zDYK2s3m50VsALRLqQvOR/pAQ/UkQ2aWrSFsywMZbVKSR6JV1F1Pm8G BqpyGED4hq57Rioln0Vgd3uy/rv0iUasuuSlhDVrTbAsoLqT3I32+U/JsQmULKwp NtQ0EDgwcCIDclWUcGkqJFtv+hUlqee/w6P1sRcLwagaRkZCgTrNyCnV/broQORx m3QvW4u+yWtRPuBTobzlUAsnC0RlrrY= -----END CERTIFICATE-----Generated at Thu Oct 9 20:02:59 2025 by rpki-client