$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0a5cc3-909e-3380-9c6c-7add307408c9.roa File: 5c0a5cc3-909e-3380-9c6c-7add307408c9.roa (raw, json) Hash identifier: 9CrcY5rT0M5Y5pxhj7alPi1f00hH1TkqB3zu+4cIA5M= Subject key identifier: F6:45:38:B7:4A:A4:01:D0:F2:B4:D9:2E:EA:DC:B3:9A:21:99:80:C9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8CE17EA5944B83FB1380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0a5cc3-909e-3380-9c6c-7add307408c9.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8c:e1:7e:a5:94:4b:83:fb:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=0423a5fd-6a92-4c1d-a3ad-478224f2668a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f2:92:84:de:57:53:82:03:90:3d:c0:f8:fc: 0a:52:ee:03:ef:fe:cb:1f:38:69:23:9f:7a:ae:ad: 6d:0e:f2:48:7f:51:0e:8b:72:60:31:e5:0d:23:21: 8b:18:8b:fa:6d:e1:72:e8:d0:1b:01:24:54:65:5e: c8:75:90:8c:42:06:b7:0c:46:43:50:c3:8d:24:0d: 07:e3:af:f7:b9:32:45:b4:37:77:c3:fa:64:de:88: f9:c1:aa:a1:cf:f7:e4:e2:88:bc:e2:f4:80:c4:10: 77:cf:6f:f1:77:81:43:02:75:79:08:77:95:bd:73: 0d:c3:e6:1c:b1:ec:cd:4b:eb:f5:f6:53:bf:de:6e: b6:b3:8a:8f:68:29:cd:a7:a9:51:81:01:88:49:4e: 30:24:f5:da:a5:4a:ea:5f:63:9a:0d:af:15:83:b3: a9:9b:f7:38:1c:6e:ec:2c:85:d6:0c:40:46:71:1e: ad:42:6e:c9:2b:53:f1:31:e3:0b:56:cc:0c:37:6c: f3:12:8d:6d:72:02:39:f0:be:b3:28:dc:37:49:01: f6:5c:73:52:04:d2:d1:a8:a5:25:76:df:02:93:ee: 69:d5:20:fc:1c:96:80:0f:da:a2:67:2d:82:30:5c: ad:be:a2:e9:c3:42:ca:db:0a:cb:13:47:86:97:5d: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:38:B7:4A:A4:01:D0:F2:B4:D9:2E:EA:DC:B3:9A:21:99:80:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5c0a5cc3-909e-3380-9c6c-7add307408c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bc:a4:ce:6b:cd:1a:74:5d:55:0c:c0:7d:51:74:ad:ac:c7: 6d:67:18:bb:fc:44:d9:cc:cd:2e:8d:a4:99:82:c7:1f:b6:54: 0e:95:58:59:39:5d:8d:3c:80:6d:8d:5d:8a:13:cc:05:1f:b9: cd:a4:a5:de:4c:91:76:63:b5:74:b0:56:98:6e:a3:63:17:72: 83:5b:05:78:2d:7e:34:8d:4d:ae:4f:8c:4d:68:9b:ed:68:4e: d4:89:53:15:a3:79:11:6d:df:6e:30:0d:14:89:ca:65:e9:a7: 92:0a:da:de:2f:e2:43:a8:3b:af:98:e8:38:92:56:a4:24:9b: c2:91:f4:03:02:f1:4b:ce:6c:bd:2c:cc:e9:a9:cc:dd:71:c5: 54:0e:e5:6e:99:57:28:de:53:58:68:3a:a9:ab:e6:97:45:80: 24:93:d2:f7:9f:d2:aa:4a:dd:5c:31:87:17:6b:0f:8d:bb:cc: 33:9d:88:da:ef:29:3f:b4:1a:21:94:b2:ff:7b:51:4b:03:58: 1d:3b:e2:1e:ff:7b:ce:83:49:d1:a9:ed:7e:b4:7e:98:78:5e: 6d:c8:64:8d:f7:56:4c:54:31:62:e4:d0:4e:7a:4f:6d:82:7a: d4:a0:0e:2f:5a:1c:f2:67:95:ca:87:c2:f2:85:0d:25:df:cf: c0:3d:91:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIzhfqWUS4P7E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MDQyM2E1ZmQtNmE5Mi00YzFkLWEzYWQtNDc4MjI0ZjI2NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vKShN5XU4IDkD3A+PwKUu4D7/7LHzhpI596 rq1tDvJIf1EOi3JgMeUNIyGLGIv6beFy6NAbASRUZV7IdZCMQga3DEZDUMONJA0H 46/3uTJFtDd3w/pk3oj5waqhz/fk4oi84vSAxBB3z2/xd4FDAnV5CHeVvXMNw+Yc sezNS+v19lO/3m62s4qPaCnNp6lRgQGISU4wJPXapUrqX2OaDa8Vg7Opm/c4HG7s LIXWDEBGcR6tQm7JK1PxMeMLVswMN2zzEo1tcgI58L6zKNw3SQH2XHNSBNLRqKUl dt8Ck+5p1SD8HJaAD9qiZy2CMFytvqLpw0LK2wrLE0eGl128bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZFOLdKpAHQ8rTZLurcs5ohmYDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWMwYTVjYzMtOTA5ZS0z MzgwLTljNmMtN2FkZDMwNzQwOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS8pM5rzRp0XVUMwH1RdK2sx21nGLv8RNnMzS6NpJmCxx+2VA6VWFk5 XY08gG2NXYoTzAUfuc2kpd5MkXZjtXSwVphuo2MXcoNbBXgtfjSNTa5PjE1om+1o TtSJUxWjeRFt324wDRSJymXpp5IK2t4v4kOoO6+Y6DiSVqQkm8KR9AMC8UvObL0s zOmpzN1xxVQO5W6ZVyjeU1hoOqmr5pdFgCST0vef0qpK3VwxhxdrD427zDOdiNrv KT+0GiGUsv97UUsDWB074h7/e86DSdGp7X60fph4Xm3IZI33VkxUMWLk0E56T22C etSgDi9aHPJnlcqHwvKFDSXfz8A9kV4= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:14 2025 by rpki-client