$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa File: 934900f6-3393-3f77-a474-3b0867fbee72.roa (raw, json) Hash identifier: k4hTtfcdXzQK8nP5m2xyeQNB/PP7VE+IKlB+sGWVwvY= Subject key identifier: 5D:46:78:D3:E7:59:36:E8:D0:9F:9F:58:61:1F:70:87:EC:EC:53:20 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141D9D0922C22E9D3313EC2 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d9:d0:92:2c:22:e9:d3:31:3e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=6a33beb8-0130-4286-a045-e6cf111a467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:3e:21:48:50:2f:dd:a6:f0:00:26:92:88: bd:3e:4c:02:ac:6a:89:47:3e:ac:03:61:25:86:91: 3e:15:8b:87:94:dd:ac:a1:b3:eb:05:c4:f6:02:4a: 96:c7:1f:f1:a5:cd:26:1c:58:d8:46:54:0e:fe:98: 14:c3:fb:39:3a:11:26:5c:b2:3f:03:3f:53:43:5d: 66:07:04:a2:60:96:03:02:fb:03:c6:38:f4:e3:fc: 72:7f:fe:27:e2:ec:34:29:b2:77:87:a8:61:a9:5a: 79:45:0a:82:25:1f:a7:89:5d:ba:69:41:0d:ca:91: 89:87:75:ee:bc:e8:3b:13:80:97:b7:c3:ea:a2:7a: 4c:ec:dd:75:be:9b:75:6e:00:32:34:29:95:58:12: a9:10:b9:5e:9f:4d:23:cf:21:f1:b6:ff:d0:b9:60: 31:07:b3:08:34:74:7f:a6:db:cb:06:af:0f:52:cb: a7:7b:65:57:a9:f1:54:d3:33:57:aa:1f:c5:13:98: 9e:1b:9d:59:ae:d7:40:3c:ad:cc:98:e2:a9:ff:e1: ff:39:90:fd:a6:d1:d7:e8:96:b9:c8:8a:d7:ae:c5: d5:bb:d4:04:0e:f1:65:e8:2a:32:da:01:f8:85:d7: 40:27:d4:4c:07:91:12:7a:06:01:43:51:af:ad:99: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:46:78:D3:E7:59:36:E8:D0:9F:9F:58:61:1F:70:87:EC:EC:53:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/934900f6-3393-3f77-a474-3b0867fbee72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:51:8e:1f:2a:2f:3c:c8:eb:c1:73:0c:18:14:e9:64:14:ec: d5:bb:20:43:0e:5d:55:dc:23:c6:9d:c4:36:27:74:5c:20:c4: 00:1a:17:5f:ad:26:12:e5:a8:fc:87:52:4e:2d:3e:36:7d:84: 29:dc:2e:25:3a:d6:86:af:31:ed:57:a4:ce:03:e6:b1:bf:09: c0:c5:32:75:b7:ce:6b:41:91:d5:33:95:63:46:52:8f:f0:6c: 84:5f:a6:5a:8d:7a:1d:5f:de:8f:96:3d:1c:56:d8:36:0e:fe: a2:e3:58:38:72:4f:c7:d9:16:4b:74:e8:c8:40:86:c1:cc:07: a0:70:e6:82:7d:d4:4f:a7:e7:64:2f:64:cc:9b:7f:8f:0f:6f: 18:f6:f8:4e:f9:63:74:50:45:a1:ed:8e:c9:c2:8a:44:cc:30: 42:56:66:aa:0a:50:93:86:40:ec:c2:24:93:12:ce:33:24:2c: eb:43:5b:af:57:63:61:0f:a8:79:85:20:7f:8e:9d:f8:71:7d: 16:51:db:4a:e2:08:b9:35:2d:56:76:cc:2e:91:da:95:ce:61: 70:29:51:57:f6:6c:6f:48:42:69:1d:e3:b0:c9:3b:d8:af:ea: 46:e2:b1:8d:bb:a2:70:02:2f:69:f1:15:c7:55:47:46:ce:75: 6c:ff:b4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdnQkiwi6dMxPsIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NmEzM2JlYjgtMDEzMC00Mjg2LWEwNDUtZTZjZjExMWE0NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig0+IUhQL92m8AAmkoi9PkwCrGqJRz6sA2El hpE+FYuHlN2sobPrBcT2AkqWxx/xpc0mHFjYRlQO/pgUw/s5OhEmXLI/Az9TQ11m BwSiYJYDAvsDxjj04/xyf/4n4uw0KbJ3h6hhqVp5RQqCJR+niV26aUENypGJh3Xu vOg7E4CXt8PqonpM7N11vpt1bgAyNCmVWBKpELlen00jzyHxtv/QuWAxB7MINHR/ ptvLBq8PUsune2VXqfFU0zNXqh/FE5ieG51ZrtdAPK3MmOKp/+H/OZD9ptHX6Ja5 yIrXrsXVu9QEDvFl6Coy2gH4hddAJ9RMB5ESegYBQ1GvrZmsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1GeNPnWTbo0J+fWGEfcIfs7FMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTM0OTAwZjYtMzM5My0z Zjc3LWE0NzQtM2IwODY3ZmJlZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVRjh8qLzzI68FzDBgU6WQU7NW7IEMOXVXcI8adxDYndFwgxAAaF1+t JhLlqPyHUk4tPjZ9hCncLiU61oavMe1XpM4D5rG/CcDFMnW3zmtBkdUzlWNGUo/w bIRfplqNeh1f3o+WPRxW2DYO/qLjWDhyT8fZFkt06MhAhsHMB6Bw5oJ91E+n52Qv ZMybf48Pbxj2+E75Y3RQRaHtjsnCikTMMEJWZqoKUJOGQOzCJJMSzjMkLOtDW69X Y2EPqHmFIH+OnfhxfRZR20riCLk1LVZ2zC6R2pXOYXApUVf2bG9IQmkd47DJO9iv 6kbisY27onACL2nxFcdVR0bOdWz/tFw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:41 2025 by rpki-client