$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa File: 712ce186-3f65-3b01-bf97-438903031744.roa (raw, json) Hash identifier: rHtXiKMzMXntgMsBkZWtb7dzrVot82rpGJionEm87Vs= Subject key identifier: 74:3A:45:C6:FC:6A:84:8D:45:75:F1:09:0B:F6:6F:68:92:B6:B4:DC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C951C12ADF484B0D72C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:95:1c:12:ad:f4:84:b0:d7:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=7cb264ca-b1b3-4386-a0ec-21d0c2498c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:97:99:5c:63:8e:40:dd:a5:2a:6a:f4:24: 4d:1e:74:d8:ca:93:d0:7f:84:8a:9a:fa:0f:0c:eb: cf:dd:e8:2a:97:9a:d2:ea:9a:63:ae:28:21:c0:8c: 1d:bd:da:ba:b4:33:b4:3c:09:d5:b1:8b:52:70:91: 7c:34:d7:93:3d:1f:5e:24:36:e5:39:99:a7:23:9d: 78:ab:8d:c9:d9:34:bf:74:26:15:2e:4a:c4:d9:20: 96:1b:f7:6d:c8:06:29:34:bb:4a:08:0c:e1:d3:43: b5:75:14:b6:fd:7b:5b:4b:4d:d5:db:db:60:b2:24: 68:cd:36:29:60:96:ca:64:df:1f:8d:b2:5f:63:1b: 0e:56:79:67:07:33:79:fa:be:ab:36:2a:b9:30:ee: a6:2a:98:34:06:92:37:bb:79:c9:c7:d4:2d:ea:7a: 59:0d:ce:28:59:a9:9f:29:49:35:24:38:bc:33:54: cc:80:3c:b5:40:bd:81:63:e3:70:04:c0:6c:8c:0f: b1:bf:5d:3c:be:78:17:ba:c0:0c:9f:68:e5:be:cc: a4:b2:5a:9d:0b:9b:79:4a:20:b6:9a:ef:ad:e1:a2: 02:74:13:b1:c1:4c:c7:07:07:35:8e:fd:44:2d:3b: 8f:7d:cd:e8:7e:fc:24:a2:0b:a1:35:48:36:4a:f3: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:45:C6:FC:6A:84:8D:45:75:F1:09:0B:F6:6F:68:92:B6:B4:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:c3:53:0a:4d:4e:34:79:86:92:85:15:6c:75:f8:5b:68:4c: ff:45:d8:4c:ab:97:85:bf:ea:61:0f:a6:27:06:c0:b7:d2:4b: 7b:2b:af:77:e2:70:0d:66:b7:77:ac:db:41:d7:e0:ac:d7:13: 97:7a:1f:c2:ad:90:7c:3f:6b:2e:bc:dd:76:a6:b3:a4:5f:02: 94:a9:ae:05:f1:7a:b1:a3:6a:1d:c5:20:97:9e:2c:93:32:fd: 9f:a9:4c:3b:0d:96:b6:fe:cc:54:08:7a:46:a6:ae:95:43:eb: 48:e6:1d:50:e8:2c:52:c5:b2:f4:b0:f1:c5:44:89:09:fd:90: ad:2f:8d:9e:d9:ad:e6:db:57:be:3f:49:70:70:35:56:fe:fa: 19:46:8f:a6:24:f5:5e:c9:af:23:69:af:67:bf:cf:fe:11:3d: a6:d7:00:30:39:47:13:8c:6e:a5:fe:85:39:90:79:44:36:4a: f6:6c:8f:a2:8a:61:87:b9:4b:05:e8:c5:ab:ca:bd:f8:20:88: df:c5:aa:9a:32:2d:fb:7d:98:20:35:b1:f8:c7:6b:0d:c6:58: 69:84:b3:42:e8:f3:38:c3:8f:fd:5d:f2:0e:bc:ac:9d:9c:cf: b1:12:a7:50:a6:96:c4:be:fc:e4:20:96:6d:4f:ef:a7:d0:33: 10:d8:25:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJUcEq30hLDXLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk N2NiMjY0Y2EtYjFiMy00Mzg2LWEwZWMtMjFkMGMyNDk4YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUmXmVxjjkDdpSpq9CRNHnTYypPQf4SKmvoP DOvP3egql5rS6ppjrighwIwdvdq6tDO0PAnVsYtScJF8NNeTPR9eJDblOZmnI514 q43J2TS/dCYVLkrE2SCWG/dtyAYpNLtKCAzh00O1dRS2/XtbS03V29tgsiRozTYp YJbKZN8fjbJfYxsOVnlnBzN5+r6rNiq5MO6mKpg0BpI3u3nJx9Qt6npZDc4oWamf KUk1JDi8M1TMgDy1QL2BY+NwBMBsjA+xv108vngXusAMn2jlvsykslqdC5t5SiC2 mu+t4aICdBOxwUzHBwc1jv1ELTuPfc3ofvwkoguhNUg2SvM/7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ6Rcb8aoSNRXXxCQv2b2iStrTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzEyY2UxODYtM2Y2NS0z YjAxLWJmOTctNDM4OTAzMDMxNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnDUwpNTjR5hpKFFWx1+FtoTP9F2Eyrl4W/6mEPpicGwLfSS3srr3fi cA1mt3es20HX4KzXE5d6H8KtkHw/ay683Xams6RfApSprgXxerGjah3FIJeeLJMy /Z+pTDsNlrb+zFQIekamrpVD60jmHVDoLFLFsvSw8cVEiQn9kK0vjZ7ZrebbV74/ SXBwNVb++hlGj6Yk9V7JryNpr2e/z/4RPabXADA5RxOMbqX+hTmQeUQ2SvZsj6KK YYe5SwXoxavKvfggiN/FqpoyLft9mCA1sfjHaw3GWGmEs0Lo8zjDj/1d8g68rJ2c z7ESp1CmlsS+/OQglm1P76fQMxDYJRA= -----END CERTIFICATE-----Generated at Thu Oct 9 20:00:59 2025 by rpki-client