$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa File: 4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa (raw, json) Hash identifier: ANni/5IFT3+bxHif8WXFm4fLlp4onVnPCis4whjPyC8= Subject key identifier: AC:D1:5D:A7:2E:5D:9F:C5:E2:57:A9:96:D0:D5:14:7C:1B:AA:53:98 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C75D1FBBFC4EBE8F4B2C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:75:d1:fb:bf:c4:eb:e8:f4:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=fd20dfd6-2763-4d4f-93b1-deeb3f049344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:c1:dc:88:ea:fc:70:97:0c:28:9c:01:07: a6:4d:5b:27:c4:98:28:52:b7:e6:14:8a:27:bf:76: 24:e6:a2:23:28:a7:b1:65:98:ab:de:f5:77:76:8d: 36:37:e2:74:42:5e:a3:10:13:df:a3:5a:16:f9:7d: 14:e3:48:91:30:59:de:17:c9:4b:0d:42:a4:96:29: c6:f5:c3:89:2f:39:b8:84:45:46:b9:6f:5a:65:1b: c7:5b:dd:9c:6e:13:0e:18:40:b9:f2:86:42:09:eb: 09:a1:f8:ed:ce:41:a5:a5:bd:00:5f:e1:5f:21:65: b1:86:23:7f:35:43:ca:8b:e6:37:c1:a3:c8:29:0f: 39:2f:4b:ed:d8:fb:77:ab:45:6d:3f:fb:35:c3:2d: 38:4e:dd:6c:b9:a8:27:ee:ad:6c:36:58:4b:73:c5: 8e:62:29:e4:d7:2c:cf:e5:59:d8:03:5e:fd:b9:01: 75:13:a0:a1:0e:b8:03:a3:a7:83:41:21:08:81:87: 89:b0:da:c8:45:85:90:c2:a9:61:b4:3a:ed:9d:04: 0b:31:7c:67:e9:7c:18:83:6d:76:98:84:f9:b4:c5: 92:4d:4e:43:fd:d0:25:b4:a4:44:93:3e:5d:b4:01: a8:37:4a:5a:b6:bb:8b:91:f0:03:fb:b0:5c:b5:9a: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D1:5D:A7:2E:5D:9F:C5:E2:57:A9:96:D0:D5:14:7C:1B:AA:53:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f2:e6:0d:98:00:dc:6d:7c:dd:5c:db:70:bb:74:0b:18:4e: 84:c8:88:aa:d6:e9:81:8d:f0:34:d6:26:c3:e0:ad:97:f6:7c: 4a:86:89:ca:19:fe:da:9f:88:86:f7:3d:d5:4f:75:c7:be:f8: 37:c9:14:66:51:d8:e4:3b:e6:20:5a:1c:6d:e8:e3:39:ac:4e: cf:99:a8:be:fd:3c:fe:b6:13:84:b1:35:ac:bc:68:49:fd:fb: 93:35:80:a8:79:a1:1f:0d:26:ec:8d:e8:33:19:e7:e9:19:f9: 9b:92:52:af:dd:fc:8d:fc:db:6e:16:7d:6f:f9:78:66:bf:e0: 13:fb:18:75:b8:8d:b0:75:61:11:9b:e2:cb:d5:61:f1:02:d0: 79:e6:f2:e8:ff:fe:56:a7:68:6e:86:33:bd:6c:f1:05:3e:0c: 06:0e:5b:64:39:47:36:38:47:c2:31:ed:2a:02:19:43:64:47: 63:bc:61:59:1b:48:f7:1e:ab:c5:5c:45:f4:9c:e3:0b:4b:6d: cf:67:5e:46:a7:17:88:dd:fe:39:5a:ba:72:ec:d7:e4:01:04: ea:ec:5f:83:d0:b2:08:48:2d:81:fc:08:a0:37:4a:70:26:d0: 71:1b:d2:4c:a2:55:c4:40:13:17:fe:6e:20:09:97:f7:30:c7: e9:7d:5c:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHXR+7/E6+j0ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmQyMGRmZDYtMjc2My00ZDRmLTkzYjEtZGVlYjNmMDQ5MzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zHB3Ijq/HCXDCicAQemTVsnxJgoUrfmFIon v3Yk5qIjKKexZZir3vV3do02N+J0Ql6jEBPfo1oW+X0U40iRMFneF8lLDUKklinG 9cOJLzm4hEVGuW9aZRvHW92cbhMOGEC58oZCCesJofjtzkGlpb0AX+FfIWWxhiN/ NUPKi+Y3waPIKQ85L0vt2Pt3q0VtP/s1wy04Tt1suagn7q1sNlhLc8WOYink1yzP 5VnYA179uQF1E6ChDrgDo6eDQSEIgYeJsNrIRYWQwqlhtDrtnQQLMXxn6XwYg212 mIT5tMWSTU5D/dAltKREkz5dtAGoN0patruLkfAD+7BctZpDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzRXacuXZ/F4lepltDVFHwbqlOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGRhZjcwZWItZDU1MC0z MGNjLWE3NWEtMWUxZGIwYmNmOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABry5g2YANxtfN1c23C7dAsYToTIiKrW6YGN8DTWJsPgrZf2fEqGicoZ /tqfiIb3PdVPdce++DfJFGZR2OQ75iBaHG3o4zmsTs+ZqL79PP62E4SxNay8aEn9 +5M1gKh5oR8NJuyN6DMZ5+kZ+ZuSUq/d/I38224WfW/5eGa/4BP7GHW4jbB1YRGb 4svVYfEC0Hnm8uj//lanaG6GM71s8QU+DAYOW2Q5RzY4R8Ix7SoCGUNkR2O8YVkb SPceq8VcRfSc4wtLbc9nXkanF4jd/jlaunLs1+QBBOrsX4PQsghILYH8CKA3SnAm 0HEb0kyiVcRAExf+biAJl/cwx+l9XF4= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:09 2025 by rpki-client