$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3c14a2ab-091d-38de-8d6f-00406b989839.roa File: 3c14a2ab-091d-38de-8d6f-00406b989839.roa (raw, json) Hash identifier: vvC5cznnZZeAwUD5QFE0IGfE5fKR9LHxVK1pv+39XHI= Subject key identifier: 83:72:E1:7D:0D:EB:43:BD:FE:EF:A5:9F:5C:1B:88:C3:E5:F9:2D:65 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8CBF533FA4949A844000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3c14a2ab-091d-38de-8d6f-00406b989839.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8c:bf:53:3f:a4:94:9a:84:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=8b10e731-7cc4-4b29-b332-5687c38bb6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:19:ed:bb:1d:d0:96:0f:d4:46:34:c0:9b: 6b:37:1b:c6:ac:8f:b3:8e:6c:02:cd:45:a3:27:ff: 8e:46:58:e9:29:d3:1f:9b:62:4e:ca:95:1a:03:b7: 7b:59:36:79:41:a9:5f:0c:ee:a0:f9:38:ce:e1:28: 79:3a:32:e3:ab:d7:f0:ce:90:15:03:a4:31:b3:ee: f8:b0:a8:a2:b7:7b:8d:54:56:f5:54:1d:fa:1b:87: 53:40:fa:26:70:38:f8:f9:89:e2:84:67:c4:41:39: c2:b7:a1:52:b5:4f:57:9b:a2:48:48:14:63:a1:05: a5:b9:3a:2f:f5:4b:52:7c:c7:cc:85:86:7f:dc:b6: ca:81:c6:86:3a:e8:8d:93:ed:43:16:9b:3e:c7:85: 6e:39:d7:18:72:f3:a8:8e:0c:34:89:47:a3:f1:0a: 55:7c:85:ce:ff:a3:d8:22:73:0d:15:d5:e2:c2:3d: a0:be:ab:53:3d:f9:df:d9:d3:9a:0f:fb:f8:d8:d0: 24:3a:28:42:de:a2:1d:aa:29:a9:d8:fc:c5:6a:15: 91:b8:a2:b1:27:37:00:23:17:ac:91:55:30:a6:2d: 2e:81:3c:84:4b:05:11:70:ba:04:dd:8d:a0:71:dc: 3c:17:8c:87:65:8f:07:dd:90:ac:ac:98:75:ab:6d: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:72:E1:7D:0D:EB:43:BD:FE:EF:A5:9F:5C:1B:88:C3:E5:F9:2D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3c14a2ab-091d-38de-8d6f-00406b989839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:67:43:5d:cd:f6:c1:83:66:21:50:66:20:78:1a:d5:4b:23: 0e:7a:df:24:9e:07:74:47:8f:0e:21:24:40:44:38:cd:44:14: d0:60:5d:9c:4e:d0:6d:da:67:fb:09:b1:de:8a:cc:7e:be:59: 65:c6:8e:50:64:fa:4f:33:c9:e5:c8:37:a9:ee:5d:3e:7a:9b: cd:68:e0:ab:f2:90:40:5c:d1:de:d6:9b:57:28:9f:34:4e:60: 56:77:b0:88:52:67:15:57:40:76:4c:9a:b7:7e:14:24:8e:28: 66:29:5f:c9:b4:94:f9:53:25:6b:df:da:4d:f2:f9:9d:b4:81: 8c:2b:a2:d4:f1:05:1c:07:6b:87:43:b6:6f:20:40:8d:1c:47: 83:16:61:06:08:6c:f1:c5:6c:1d:6a:a9:83:b1:a3:ff:20:da: cd:8a:b4:64:f8:60:ee:71:dc:e4:ec:e2:fe:69:03:ca:1b:04: 84:fa:cf:c3:23:85:20:f6:55:07:dc:e8:b7:ba:ea:0c:9a:a8: 58:99:d2:cd:b2:55:72:f1:62:b6:ab:3f:3e:4d:fc:47:0c:f9: 46:71:2b:23:df:2a:bc:9d:c5:ab:68:03:6c:2d:b3:88:0d:8b: cd:32:6d:98:94:0b:27:6f:10:1f:4f:90:d5:e0:8a:89:3a:8d: fc:fb:31:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIy/Uz+klJqEQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk OGIxMGU3MzEtN2NjNC00YjI5LWIzMzItNTY4N2MzOGJiNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj4Z7bsd0JYP1EY0wJtrNxvGrI+zjmwCzUWj J/+ORljpKdMfm2JOypUaA7d7WTZ5QalfDO6g+TjO4Sh5OjLjq9fwzpAVA6Qxs+74 sKiit3uNVFb1VB36G4dTQPomcDj4+YnihGfEQTnCt6FStU9Xm6JISBRjoQWluTov 9UtSfMfMhYZ/3LbKgcaGOuiNk+1DFps+x4VuOdcYcvOojgw0iUej8QpVfIXO/6PY InMNFdXiwj2gvqtTPfnf2dOaD/v42NAkOihC3qIdqimp2PzFahWRuKKxJzcAIxes kVUwpi0ugTyESwURcLoE3Y2gcdw8F4yHZY8H3ZCsrJh1q22hMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINy4X0N60O9/u+ln1wbiMPl+S1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2MxNGEyYWItMDkxZC0z OGRlLThkNmYtMDA0MDZiOTg5ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpnQ13N9sGDZiFQZiB4GtVLIw563ySeB3RHjw4hJEBEOM1EFNBgXZxO 0G3aZ/sJsd6KzH6+WWXGjlBk+k8zyeXIN6nuXT56m81o4KvykEBc0d7Wm1conzRO YFZ3sIhSZxVXQHZMmrd+FCSOKGYpX8m0lPlTJWvf2k3y+Z20gYwrotTxBRwHa4dD tm8gQI0cR4MWYQYIbPHFbB1qqYOxo/8g2s2KtGT4YO5x3OTs4v5pA8obBIT6z8Mj hSD2VQfc6Le66gyaqFiZ0s2yVXLxYrarPz5N/EcM+UZxKyPfKrydxatoA2wts4gN i80ybZiUCydvEB9PkNXgiok6jfz7MaQ= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:08 2025 by rpki-client