$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa File: 35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa (raw, json) Hash identifier: vOukSGKl8g7MvpwnjZUB0ZJaMjd4yXouK0+E74xtF/Y= Subject key identifier: 78:D9:13:F0:71:F9:CF:BB:FD:5D:7E:70:A1:E8:49:44:80:36:DC:C4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C73642DC151C46854BA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:73:64:2d:c1:51:c4:68:54:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c654f991-b2ec-4a05-9da1-a52c83f99ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:47:16:63:1f:2b:5a:4f:7d:3a:4c:97:22: 89:51:b0:f3:39:8a:bf:9b:f2:29:e0:95:13:a5:f5: 68:ab:2b:f8:32:1d:bc:6d:52:d7:94:f0:7f:87:1c: 88:bc:1c:23:6a:bc:e4:5a:e0:02:f3:63:b3:a5:c8: d8:30:bb:35:f2:4e:ea:d4:24:45:73:6b:7b:9b:70: e5:d6:a7:d8:0c:ad:37:7e:ac:3b:82:ce:db:2e:02: 3f:6c:60:fd:85:bf:d5:f3:6c:c8:6c:be:02:13:ae: 5d:66:17:5d:8f:ad:8a:6d:1d:fb:3b:d1:e5:8c:e4: 6d:44:e1:2c:1f:bd:9c:5d:fa:af:29:10:a2:20:1a: b6:dc:b3:6c:55:f7:cb:f7:ee:20:01:ed:5e:a2:7c: 77:a6:08:cd:4d:5b:db:46:8a:37:06:d5:e9:7e:c0: 02:6d:56:8a:10:10:4d:17:0d:2e:f5:2f:84:20:1e: 95:0f:26:e8:a8:6d:4d:9b:8c:13:7a:af:71:a7:ed: 9e:4d:5d:b4:ae:af:eb:b9:1a:af:d3:95:1f:23:68: 1f:3d:17:c7:5b:f0:b8:76:61:cd:87:49:28:82:b6: 70:d1:05:73:03:e1:59:73:34:df:df:54:4b:99:c3: 94:3d:f9:6e:a9:6b:40:c5:f2:40:d6:a0:c1:22:c6: fc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D9:13:F0:71:F9:CF:BB:FD:5D:7E:70:A1:E8:49:44:80:36:DC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f7:47:41:e7:61:c5:50:14:a3:4c:ba:ed:9a:f5:17:c3:92: 3f:db:54:78:05:ce:70:03:68:f5:3b:a3:e9:a1:8a:eb:0d:ae: 2b:50:07:0a:d3:79:5f:87:49:ae:b3:7a:ac:50:3d:22:15:62: 80:71:4e:68:fc:ec:fa:49:8e:05:f5:66:0e:ff:04:89:1b:f1: 97:72:b9:e0:2c:71:58:82:c1:26:d0:0d:76:a1:c0:30:c8:b0: 97:1b:17:ad:65:80:20:a3:4f:a6:6d:c2:1a:60:07:eb:f8:db: fe:74:21:12:bb:de:07:82:b6:9f:b7:47:87:3a:f5:e5:04:0d: 05:de:1c:6e:59:cb:3d:52:8d:ba:03:de:3b:22:31:9c:17:48: 9f:5a:19:c8:77:e8:40:59:99:13:22:74:d4:49:ef:5e:31:6e: c0:20:33:cb:00:a8:97:d3:34:ce:ed:99:fe:09:82:b3:dd:38: fc:ae:d8:93:6e:0f:09:3a:c5:bb:9b:7f:30:e4:bf:0f:ba:7b: be:67:46:20:d4:67:be:2b:81:83:ae:4a:be:a4:45:64:07:39: 18:fa:a9:fc:c2:57:9f:99:ca:67:cf:fb:11:f5:1d:6a:0d:36: 1c:29:8a:ae:4f:10:eb:a3:3b:31:e2:5e:4b:e8:79:e6:5b:00: bf:77:69:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHNkLcFRxGhUugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzY1NGY5OTEtYjJlYy00YTA1LTlkYTEtYTUyYzgzZjk5ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdtHFmMfK1pPfTpMlyKJUbDzOYq/m/Ip4JUT pfVoqyv4Mh28bVLXlPB/hxyIvBwjarzkWuAC82OzpcjYMLs18k7q1CRFc2t7m3Dl 1qfYDK03fqw7gs7bLgI/bGD9hb/V82zIbL4CE65dZhddj62KbR37O9HljORtROEs H72cXfqvKRCiIBq23LNsVffL9+4gAe1eonx3pgjNTVvbRoo3BtXpfsACbVaKEBBN Fw0u9S+EIB6VDyboqG1Nm4wTeq9xp+2eTV20rq/ruRqv05UfI2gfPRfHW/C4dmHN h0kogrZw0QVzA+FZczTf31RLmcOUPfluqWtAxfJA1qDBIsb8UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjZE/Bx+c+7/V1+cKHoSUSANtzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU5ODljOWEtZDE0ZS0z ZTNiLWE0YzgtN2E1OTEwNTVlYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL3R0HnYcVQFKNMuu2a9RfDkj/bVHgFznADaPU7o+mhiusNritQBwrT eV+HSa6zeqxQPSIVYoBxTmj87PpJjgX1Zg7/BIkb8ZdyueAscViCwSbQDXahwDDI sJcbF61lgCCjT6ZtwhpgB+v42/50IRK73geCtp+3R4c69eUEDQXeHG5Zyz1SjboD 3jsiMZwXSJ9aGch36EBZmRMidNRJ714xbsAgM8sAqJfTNM7tmf4JgrPdOPyu2JNu Dwk6xbubfzDkvw+6e75nRiDUZ74rgYOuSr6kRWQHORj6qfzCV5+ZymfP+xH1HWoN Nhwpiq5PEOujOzHiXkvoeeZbAL93aZU= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:02 2025 by rpki-client