$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61d2ee20-112c-3dde-ad10-b128663e53a2.roa File: 61d2ee20-112c-3dde-ad10-b128663e53a2.roa (raw, json) Hash identifier: 10Ic5GyllSkHyYjR2f/eSlFi70L3GQXTQxBmz5RNrmo= Subject key identifier: 10:31:71:D7:9A:84:5B:96:52:11:FA:30:C4:CD:BE:FA:A8:64:F0:BC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C90A89628CD0712644980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61d2ee20-112c-3dde-ad10-b128663e53a2.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:90:a8:96:28:cd:07:12:64:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=0d787aab-7495-4a9a-b093-4e5011c16f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:40:3a:7a:2f:1c:73:0e:85:b9:56:b0:51: bc:aa:d3:c1:c6:87:df:04:ed:6f:6c:89:3c:82:ce: 20:e5:5b:cc:69:2e:1d:5c:91:21:4e:75:7d:ab:b0: 5f:d2:ca:fb:57:37:79:6d:45:3e:9a:17:45:89:a0: dd:7a:b6:2e:a3:a4:e9:fc:bb:d3:9e:e0:f8:c0:c3: cc:b7:b1:c1:eb:ec:79:6f:ae:79:e7:b6:56:56:fa: a6:24:e2:7a:52:10:aa:e2:a7:c0:8a:d7:5f:b7:f9: 43:f1:73:cb:33:83:9c:35:0e:44:e0:68:91:a5:d6: d3:69:fe:c6:07:8f:c4:70:31:a5:ed:30:c0:c6:06: 84:97:5a:80:ab:54:f9:68:99:0b:d9:c4:59:f6:ef: 80:de:80:ed:e8:55:1c:cf:e7:cd:a9:b9:16:a2:44: c1:1b:00:22:98:6e:42:f0:67:18:3a:27:7e:5d:74: 35:06:f9:ce:4c:88:32:ec:df:0f:60:a9:a4:ee:ad: 5b:70:7d:13:9c:17:7d:36:b6:40:28:3f:65:82:a2: 3e:25:5e:48:e9:c9:ee:f3:e3:cb:53:7a:6d:38:ab: 03:f2:44:26:a7:64:1c:86:f2:03:12:a7:1e:fb:c8: fe:91:66:09:ab:e1:63:b6:ba:3c:b9:a6:8d:06:1c: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:71:D7:9A:84:5B:96:52:11:FA:30:C4:CD:BE:FA:A8:64:F0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61d2ee20-112c-3dde-ad10-b128663e53a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:74:63:5a:1d:a5:39:1c:3b:5d:cf:f3:78:d2:89:9a:e4:d7: ca:2c:2e:6d:9c:f5:d8:5e:8a:98:02:55:80:38:19:c3:24:08: c0:0d:2d:41:19:f0:da:22:6a:b0:bd:2b:b3:24:ef:85:33:fc: d9:9e:95:3c:69:a6:28:06:3d:99:a9:aa:0f:f4:6a:9b:f7:27: fc:65:69:cd:c0:cd:9c:30:f1:5b:db:98:7f:3c:9e:41:5b:1b: 6a:57:fe:f0:d7:d8:07:c7:ab:a6:21:e9:bf:a9:85:fd:44:90: f0:21:ef:59:b5:76:38:a3:0a:90:b8:5f:5c:a7:2a:ea:62:a4: 3f:2d:6e:26:9c:2b:b4:af:8e:4d:20:fe:b5:2f:e2:04:b0:3d: 39:0a:01:d2:85:41:ee:e7:38:14:7b:57:9c:a3:45:44:da:ef: 6c:2e:c1:8e:1f:78:12:ce:ee:40:59:2a:ef:7b:19:95:23:8f: 85:1f:07:d9:08:0b:d7:02:68:d2:25:07:3c:ed:01:42:f6:e6: a7:e6:a3:4e:26:e6:c5:8b:20:37:3f:4f:e1:05:aa:21:b0:16: be:b8:5f:1d:1a:5b:37:2b:9e:ef:23:7d:5b:f9:b3:fe:8a:0d: 9d:16:c6:2c:32:e5:7b:e6:fe:5f:1f:33:18:1d:ae:f5:d3:af: b9:49:1b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJColijNBxJkSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MGQ3ODdhYWItNzQ5NS00YTlhLWIwOTMtNGU1MDExYzE2ZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYlAOnovHHMOhblWsFG8qtPBxoffBO1vbIk8 gs4g5VvMaS4dXJEhTnV9q7Bf0sr7Vzd5bUU+mhdFiaDderYuo6Tp/LvTnuD4wMPM t7HB6+x5b65557ZWVvqmJOJ6UhCq4qfAitdft/lD8XPLM4OcNQ5E4GiRpdbTaf7G B4/EcDGl7TDAxgaEl1qAq1T5aJkL2cRZ9u+A3oDt6FUcz+fNqbkWokTBGwAimG5C 8GcYOid+XXQ1BvnOTIgy7N8PYKmk7q1bcH0TnBd9NrZAKD9lgqI+JV5I6cnu8+PL U3ptOKsD8kQmp2QchvIDEqce+8j+kWYJq+Fjtro8uaaNBhyqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAxcdeahFuWUhH6MMTNvvqoZPC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjFkMmVlMjAtMTEyYy0z ZGRlLWFkMTAtYjEyODY2M2U1M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV0Y1odpTkcO13P83jSiZrk18osLm2c9dheipgCVYA4GcMkCMANLUEZ 8NoiarC9K7Mk74Uz/NmelTxppigGPZmpqg/0apv3J/xlac3AzZww8VvbmH88nkFb G2pX/vDX2AfHq6Yh6b+phf1EkPAh71m1djijCpC4X1ynKupipD8tbiacK7Svjk0g /rUv4gSwPTkKAdKFQe7nOBR7V5yjRUTa72wuwY4feBLO7kBZKu97GZUjj4UfB9kI C9cCaNIlBzztAUL25qfmo04m5sWLIDc/T+EFqiGwFr64Xx0aWzcrnu8jfVv5s/6K DZ0Wxiwy5Xvm/l8fMxgdrvXTr7lJGzA= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:31 2025 by rpki-client