$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa File: 3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa (raw, json) Hash identifier: XGo3F/y3/3vLrj/ElH0rfQG/2rLrBcFX1/GZxjIYxw4= Subject key identifier: DD:C3:04:A9:3A:7C:1A:05:93:BF:2B:18:67:03:FC:31:C6:53:3F:7D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C742E6D7F2823D018F600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:74:2e:6d:7f:28:23:d0:18:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=869dc276-5c2f-4893-bed0-71a584bca21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:fd:6d:30:4f:2b:2a:f8:12:77:89:d0:a6: 2b:a0:48:36:e3:64:11:c2:e9:78:5a:b6:91:ba:36: b8:63:d3:41:71:fa:60:b0:aa:91:65:d1:44:87:87: 41:62:3d:b0:19:b0:c9:c9:0a:85:43:ab:f2:6b:9b: ae:b2:5d:4a:5b:1c:4a:59:09:e7:6a:c2:25:ce:63: 9d:29:44:fa:ee:9a:cc:b8:bd:e1:11:73:7c:a7:56: e3:96:b2:82:f2:46:35:b1:85:11:65:91:00:25:b2: 72:4a:45:d7:d0:ae:a4:04:56:10:5d:33:8f:87:8d: b0:b6:37:f7:8f:44:9f:f6:66:f1:4d:33:d6:7a:7a: 55:a3:13:54:8b:42:85:51:38:ee:3b:1c:cb:a5:f7: 77:87:40:4e:e9:22:aa:63:dc:07:e4:38:08:19:ed: 4e:f6:ef:c9:78:b2:2b:55:26:0c:47:57:8e:29:a2: 75:f8:f1:90:54:f6:91:2a:b4:0c:8c:1d:8d:e8:64: 0b:49:aa:94:8e:00:77:7c:97:09:03:8d:f8:a7:34: b6:aa:02:ba:59:71:33:83:47:8e:15:2e:4f:4f:52: e7:84:d9:88:cd:43:05:a8:fb:34:57:d5:b0:0f:99: 27:9b:76:22:ac:74:31:53:54:10:83:eb:cf:55:b0: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:04:A9:3A:7C:1A:05:93:BF:2B:18:67:03:FC:31:C6:53:3F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:13:f3:fd:ac:52:85:58:8e:86:f3:c8:e1:b5:5d:a5:a1:75: fb:7e:ec:dd:82:55:82:e8:12:dd:46:c2:52:8f:f8:6b:39:98: 8a:47:1a:b8:58:e5:03:76:15:00:28:d5:00:87:0d:ab:87:b1: 36:64:bb:88:5e:54:b4:fc:11:97:0c:9e:3a:5a:7f:cd:d6:97: ac:49:11:1b:54:72:ea:4b:53:34:aa:e6:ad:94:43:c0:50:58: 70:48:0b:3a:8d:f3:66:62:7e:61:2e:c7:66:91:39:3c:f7:50: 15:b1:5b:60:da:92:60:a0:d0:d8:9e:44:08:89:b3:d7:6d:e5: 2f:dc:87:7c:68:ac:4a:27:f2:60:e5:bb:d7:3e:bc:5e:2b:30: 61:2b:ff:72:03:a3:ee:dd:60:da:26:0c:29:62:14:bb:10:80: a5:e4:2c:c5:0c:9d:96:09:95:75:5e:4a:ce:27:13:87:eb:c6: 5f:2c:d7:cd:95:c0:a0:fd:24:a0:1c:63:7d:3e:a9:dc:28:9a: a0:b3:25:a1:a0:9b:ca:b0:01:66:b6:4a:61:a6:96:1b:b4:d6: ae:28:58:ed:29:5d:70:93:6c:ba:4b:d8:a9:20:e8:82:ba:52: 9d:6b:7e:c8:34:55:f1:44:bb:2c:f4:39:07:f6:d8:31:ce:d8: 6e:be:bd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHQubX8oI9AY9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODY5ZGMyNzYtNWMyZi00ODkzLWJlZDAtNzFhNTg0YmNhMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTX9bTBPKyr4EneJ0KYroEg242QRwul4WraR uja4Y9NBcfpgsKqRZdFEh4dBYj2wGbDJyQqFQ6vya5uusl1KWxxKWQnnasIlzmOd KUT67prMuL3hEXN8p1bjlrKC8kY1sYURZZEAJbJySkXX0K6kBFYQXTOPh42wtjf3 j0Sf9mbxTTPWenpVoxNUi0KFUTjuOxzLpfd3h0BO6SKqY9wH5DgIGe1O9u/JeLIr VSYMR1eOKaJ1+PGQVPaRKrQMjB2N6GQLSaqUjgB3fJcJA434pzS2qgK6WXEzg0eO FS5PT1LnhNmIzUMFqPs0V9WwD5knm3YirHQxU1QQg+vPVbCyHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3DBKk6fBoFk78rGGcD/DHGUz99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2JmOTJiYWItZGM4My0z NWNkLWIwYTAtOWI3ODA4ZWVhOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsT8/2sUoVYjobzyOG1XaWhdft+7N2CVYLoEt1GwlKP+Gs5mIpHGrhY 5QN2FQAo1QCHDauHsTZku4heVLT8EZcMnjpaf83Wl6xJERtUcupLUzSq5q2UQ8BQ WHBICzqN82ZifmEux2aROTz3UBWxW2DakmCg0NieRAiJs9dt5S/ch3xorEon8mDl u9c+vF4rMGEr/3IDo+7dYNomDCliFLsQgKXkLMUMnZYJlXVeSs4nE4frxl8s182V wKD9JKAcY30+qdwomqCzJaGgm8qwAWa2SmGmlhu01q4oWO0pXXCTbLpL2Kkg6IK6 Up1rfsg0VfFEuyz0OQf22DHO2G6+vVk= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:50 2025 by rpki-client