$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa File: 4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa (raw, json) Hash identifier: NeqTQYh6m9ljIgaaaTERTZT7FNO8786AWsJyzVUYedY= Subject key identifier: 8D:A8:1F:DC:7E:F1:87:FB:AB:1A:9C:4E:9E:61:C2:5F:51:7D:A5:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D67442150EFB65255788 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d6:74:42:15:0e:fb:65:25:57:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=33171964-4efe-46d0-adb1-8114e030026b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:aa:35:56:61:c4:e1:c4:b2:b1:27:7c:bc: 4f:28:50:05:a4:ea:5d:ad:e3:dd:f3:f5:93:d8:e8: bf:1d:25:0d:7a:14:a2:bc:de:2d:69:43:3a:d5:ac: 80:fa:ac:93:63:a8:c4:f3:f6:ab:46:48:fe:67:69: 84:6a:a4:8f:52:83:3b:82:07:5b:77:55:b8:2a:0a: fa:76:02:b5:0c:d9:73:87:77:25:ef:41:39:02:88: 70:6b:44:05:d8:28:98:fd:c1:78:5a:ce:d9:0a:09: 10:f4:fe:fa:37:1f:6f:9b:5d:9b:da:db:39:5b:63: a4:2e:94:be:6a:08:6b:bd:94:dc:b9:47:84:98:63: 75:ec:8d:9c:89:1e:19:55:5d:05:9a:e1:a6:f3:be: fd:bb:09:20:92:62:d3:c8:d9:bc:d0:81:2a:2e:c7: d1:85:a4:22:6d:d4:ab:59:f8:05:d6:24:7d:d8:75: df:db:c5:45:de:dd:08:e2:3a:40:d2:8b:23:22:1e: 89:9d:23:c8:0e:fb:e8:10:0e:36:c1:a1:b5:d4:2f: 60:97:0e:ff:9e:b2:b0:f4:29:07:eb:52:25:cf:2f: 63:61:d8:94:80:66:3e:c2:51:20:92:b1:91:53:00: 0b:96:63:63:af:ef:4b:14:13:dd:3b:30:ce:ff:e0: d6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A8:1F:DC:7E:F1:87:FB:AB:1A:9C:4E:9E:61:C2:5F:51:7D:A5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4601a33b-b8b7-387f-8b24-a4e437e9c2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:11:73:39:c9:7d:eb:e6:04:d1:05:fa:cf:78:e7:46:97:c6: 31:40:a4:0b:39:ea:f9:4d:1d:19:c4:ef:82:23:ee:c7:0c:a3: b3:f7:c6:64:94:c1:14:8c:2c:37:15:8b:8b:83:96:5a:24:67: 9f:30:ed:a1:e8:ce:b7:e2:c4:e2:24:1b:98:c1:83:12:aa:8c: f0:e9:ea:35:9d:1c:2b:83:69:d3:99:a7:e5:2c:e2:98:e5:64: d4:18:21:51:ba:66:88:cd:c7:bf:7a:f8:c1:98:a4:01:81:62: 23:2d:85:b1:5c:6d:58:ab:66:7c:1e:e3:18:35:cf:02:c6:a2: 96:65:11:b1:64:e0:1b:c3:87:18:a1:dd:73:67:04:47:79:73: 24:4a:04:b5:f9:bd:99:76:ef:20:47:d7:c9:07:ba:f2:e3:2d: 1b:66:ad:41:be:b8:e0:30:88:11:c4:43:79:ec:07:f0:39:b1: e8:12:31:21:bd:e8:6f:53:29:59:ee:84:db:ec:3e:2c:3e:ed: ac:2c:b5:38:d6:f6:e2:29:0d:58:1f:7f:ff:3c:cc:3f:03:7e: b8:97:ae:55:9d:81:9d:20:b3:48:77:ea:1b:4c:19:af:e9:e4: fb:38:20:d1:13:47:f6:c9:82:ca:13:56:12:df:b1:35:30:4f: c0:31:37:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdZ0QhUO+2UlV4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MzMxNzE5NjQtNGVmZS00NmQwLWFkYjEtODExNGUwMzAwMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRCqNVZhxOHEsrEnfLxPKFAFpOpdrePd8/WT 2Oi/HSUNehSivN4taUM61ayA+qyTY6jE8/arRkj+Z2mEaqSPUoM7ggdbd1W4Kgr6 dgK1DNlzh3cl70E5Aohwa0QF2CiY/cF4Ws7ZCgkQ9P76Nx9vm12b2ts5W2OkLpS+ aghrvZTcuUeEmGN17I2ciR4ZVV0FmuGm8779uwkgkmLTyNm80IEqLsfRhaQibdSr WfgF1iR92HXf28VF3t0I4jpA0osjIh6JnSPIDvvoEA42waG11C9glw7/nrKw9CkH 61Ilzy9jYdiUgGY+wlEgkrGRUwALlmNjr+9LFBPdOzDO/+DWUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2oH9x+8Yf7qxqcTp5hwl9RfaVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDYwMWEzM2ItYjhiNy0z ODdmLThiMjQtYTRlNDM3ZTljMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQRcznJfevmBNEF+s9450aXxjFApAs56vlNHRnE74Ij7scMo7P3xmSU wRSMLDcVi4uDllokZ58w7aHozrfixOIkG5jBgxKqjPDp6jWdHCuDadOZp+Us4pjl ZNQYIVG6ZojNx796+MGYpAGBYiMthbFcbVirZnwe4xg1zwLGopZlEbFk4BvDhxih 3XNnBEd5cyRKBLX5vZl27yBH18kHuvLjLRtmrUG+uOAwiBHEQ3nsB/A5segSMSG9 6G9TKVnuhNvsPiw+7awstTjW9uIpDVgff/88zD8DfriXrlWdgZ0gs0h36htMGa/p 5Ps4INETR/bJgsoTVhLfsTUwT8AxN/8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:14 2025 by rpki-client