$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa File: 501e8e72-de2b-3185-a1ac-945d85083b8f.roa (raw, json) Hash identifier: c/hJEaCMKbOUFvep+YrCGESIB3eicaFOX8I0r+81jNo= Subject key identifier: 67:4B:F7:2A:28:16:38:D7:45:CF:DF:4B:D7:FB:AE:B1:35:B2:18:DE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C96A151EA443090004C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:96:a1:51:ea:44:30:90:00:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=d265f81d-0c43-4aa2-b9b0-2afea37ba60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:00:ed:58:69:f8:63:9c:3b:fb:93:f9:67: db:7f:78:76:8c:e7:c9:ec:5c:f6:f9:49:d2:80:4d: 33:ca:81:07:9f:3b:03:b5:c4:e1:c0:d0:bf:82:e8: fa:d1:3e:13:b7:07:ea:47:18:78:db:b5:21:84:82: 39:97:4f:3b:bf:c8:3f:d4:96:ee:28:13:b2:06:0d: d6:74:dd:7b:81:dd:02:c9:0a:f2:e3:a5:d2:f6:67: 56:b8:e9:b0:87:45:d0:5c:fe:7d:9b:6f:b2:d0:c8: 29:07:42:b3:15:0f:24:75:fd:6e:50:95:fa:a0:af: 72:eb:96:67:45:d6:84:f8:39:62:47:e2:d1:ed:69: c9:ce:73:51:b3:ec:f7:5f:dc:ed:d1:f7:81:a8:06: 89:bd:97:90:d1:2a:50:be:db:b2:7c:8d:b1:51:c8: a7:62:32:62:dc:cc:ef:7a:0f:59:6b:d3:cc:f2:02: c8:af:f8:90:29:a6:1a:23:1c:94:48:fd:ff:cd:cb: 68:41:3c:fd:e1:5a:bd:e3:28:d8:b1:da:80:7e:04: 34:0b:5f:db:16:0f:c5:53:7e:36:e3:84:86:7f:db: 7b:1c:e2:4c:81:86:fd:40:8b:3d:3b:0a:5a:02:1f: e6:81:c9:da:b7:ea:83:d4:c1:73:ae:59:40:76:d3: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:F7:2A:28:16:38:D7:45:CF:DF:4B:D7:FB:AE:B1:35:B2:18:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c9:2f:17:56:92:ae:00:fd:07:62:eb:09:76:c2:af:a8:f0: 67:20:b3:f0:8d:8a:ef:de:8f:74:dd:78:b0:bd:ef:dc:de:21: a3:7d:ec:50:d0:23:c8:68:f7:7b:24:30:77:57:62:23:a4:71: 36:6d:87:0e:fa:2e:05:30:66:08:54:f4:e2:92:fb:8b:4d:55: 22:2a:b9:90:2f:f6:fb:76:82:89:49:a9:0b:69:66:7b:0e:8d: e2:1d:2c:82:3e:bf:9c:c9:80:3c:f8:6e:7d:d6:58:22:39:61: 9f:12:0a:74:35:c0:ff:4d:4e:3c:5a:f1:5e:2d:ac:97:24:c7: 1f:5a:7c:7e:b5:af:c2:30:81:28:b5:e4:03:fc:e9:4d:37:9e: 33:dd:e4:2f:b7:f3:6d:29:1f:62:7b:4f:4e:8a:98:03:e0:dd: 8e:19:03:f8:55:9b:53:02:be:dd:fb:37:b9:b0:e0:8e:f4:4a: 8c:c6:47:eb:4b:66:f2:24:fb:59:6d:77:92:ba:6b:ee:b4:40: a6:eb:21:00:b0:fc:af:12:4a:68:63:8f:b2:ef:7a:96:34:38: f5:b3:f7:f5:d8:0f:40:de:93:19:59:4e:56:5c:0c:00:f9:1a: 6c:19:f9:4a:58:36:9a:9f:ad:2b:01:02:85:30:ce:b7:38:52: ea:62:45:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJahUepEMJAATAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDI2NWY4MWQtMGM0My00YWEyLWI5YjAtMmFmZWEzN2JhNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmwA7Vhp+GOcO/uT+Wfbf3h2jOfJ7Fz2+UnS gE0zyoEHnzsDtcThwNC/guj60T4TtwfqRxh427UhhII5l087v8g/1JbuKBOyBg3W dN17gd0CyQry46XS9mdWuOmwh0XQXP59m2+y0MgpB0KzFQ8kdf1uUJX6oK9y65Zn RdaE+DliR+LR7WnJznNRs+z3X9zt0feBqAaJvZeQ0SpQvtuyfI2xUcinYjJi3Mzv eg9Za9PM8gLIr/iQKaYaIxyUSP3/zctoQTz94Vq94yjYsdqAfgQ0C1/bFg/FU342 44SGf9t7HOJMgYb9QIs9OwpaAh/mgcnat+qD1MFzrllAdtPb3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdL9yooFjjXRc/fS9f7rrE1shjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTAxZThlNzItZGUyYi0z MTg1LWExYWMtOTQ1ZDg1MDgzYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvJLxdWkq4A/Qdi6wl2wq+o8Gcgs/CNiu/ej3TdeLC979zeIaN97FDQ I8ho93skMHdXYiOkcTZthw76LgUwZghU9OKS+4tNVSIquZAv9vt2golJqQtpZnsO jeIdLII+v5zJgDz4bn3WWCI5YZ8SCnQ1wP9NTjxa8V4trJckxx9afH61r8IwgSi1 5AP86U03njPd5C+3820pH2J7T06KmAPg3Y4ZA/hVm1MCvt37N7mw4I70SozGR+tL ZvIk+1ltd5K6a+60QKbrIQCw/K8SSmhjj7LvepY0OPWz9/XYD0DekxlZTlZcDAD5 GmwZ+UpYNpqfrSsBAoUwzrc4UupiRY0= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:29 2025 by rpki-client