$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/95bb61cd-82ae-344b-8bab-de9dca859aa9.roa File: 95bb61cd-82ae-344b-8bab-de9dca859aa9.roa (raw, json) Hash identifier: h8c806j1tDhi3TxtYPHQbpjqdw7BhUQK6WrBkPLvbrs= Subject key identifier: 9D:9B:5C:F3:02:61:33:25:71:AD:77:57:5D:C6:E2:2E:B1:99:DF:20 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EDFDBCF75E5F4E1F4AC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/95bb61cd-82ae-344b-8bab-de9dca859aa9.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ed:fd:bc:f7:5e:5f:4e:1f:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=6a9d7a4e-c6ac-4e8e-b50b-056a94767b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:90:ee:f1:97:81:ca:1d:86:20:9c:a6:e2: ad:65:7b:42:1f:2b:cc:fc:18:51:b7:d6:ab:2f:80: 69:96:50:06:e3:99:9f:da:fb:d0:bf:e2:01:f8:4e: b0:ae:16:4f:f1:46:e7:1f:14:ea:c2:f3:84:34:0a: b4:56:9d:4f:df:b6:57:2e:fc:8a:ee:79:8c:e0:c5: ea:73:51:7b:a2:1f:52:e9:79:e0:60:5b:99:d2:2e: 8c:89:e8:72:f3:54:90:9d:fb:e7:61:77:ce:22:9f: 57:55:a1:31:19:fa:e2:e8:01:58:4a:f5:11:3c:2b: aa:4c:bc:c5:e7:e3:e3:f1:d7:a3:c5:db:8b:fe:3d: 29:d3:30:e5:c4:8e:a9:cc:76:e0:f1:d5:c3:ed:24: d6:e7:8a:f8:ab:dc:1b:0c:c7:df:f5:c5:f2:21:f6: 3b:30:f7:db:c6:6e:7f:7c:cc:a2:64:c4:5b:2b:45: b9:84:c9:8a:a4:be:34:7b:71:94:e3:90:ad:a8:42: 40:f8:2b:da:d1:fc:7f:2c:f7:4a:4c:01:3c:c0:c8: 42:05:9a:04:57:c1:92:7b:1a:e8:12:44:9d:3b:33: 19:7d:a8:1c:50:40:ab:8f:1c:b0:0f:f8:b1:f2:62: 19:09:2d:2b:b7:8c:ff:b6:ea:cb:29:02:20:48:58: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9B:5C:F3:02:61:33:25:71:AD:77:57:5D:C6:E2:2E:B1:99:DF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/95bb61cd-82ae-344b-8bab-de9dca859aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:07:d8:79:c7:81:54:51:c6:51:eb:7c:17:99:e7:8b:b9:34: 4f:65:46:05:c5:74:15:ca:26:6b:0a:30:ec:46:9d:5c:99:0e: bc:f6:55:19:fe:42:02:cc:7b:34:b9:9b:4c:1a:4f:7f:f9:d3: a5:c6:52:64:91:90:88:5e:72:f6:f7:8b:12:1b:b2:23:0c:ca: d1:dd:35:b5:b0:26:5b:b1:f7:8c:84:07:af:b5:b2:96:72:9f: e5:b1:50:35:fe:76:6b:c3:fe:ee:fa:b2:53:4c:fe:d2:9c:9e: 1b:f2:f5:f3:ce:f4:b4:fc:46:a9:bd:0b:ac:c8:7a:39:a7:98: 9e:bd:1d:44:d4:e9:01:d4:67:dc:16:17:96:58:80:1d:e8:10: 07:39:5a:df:1e:00:b8:d1:5a:12:11:64:e2:1e:87:33:1f:38: f9:71:71:39:00:aa:6b:8d:4c:69:aa:5b:79:97:0b:1d:2f:7e: 1a:e5:c1:6a:d0:da:00:83:5e:9e:d9:69:6c:9b:ff:ed:a4:1e: e8:66:a3:8e:5a:71:c6:36:85:e7:bf:d2:7d:26:a4:5b:f4:41: 80:41:55:20:79:95:67:b1:09:d2:c4:a6:a1:f2:d6:54:ac:cb: 81:71:c1:0f:3d:da:cf:d8:3e:98:2a:82:2e:a8:2a:f3:ac:68: ca:82:44:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe39vPdeX04fSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NmE5ZDdhNGUtYzZhYy00ZThlLWI1MGItMDU2YTk0NzY3YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXiQ7vGXgcodhiCcpuKtZXtCHyvM/BhRt9ar L4BpllAG45mf2vvQv+IB+E6wrhZP8UbnHxTqwvOENAq0Vp1P37ZXLvyK7nmM4MXq c1F7oh9S6XngYFuZ0i6Miehy81SQnfvnYXfOIp9XVaExGfri6AFYSvURPCuqTLzF 5+Pj8dejxduL/j0p0zDlxI6pzHbg8dXD7STW54r4q9wbDMff9cXyIfY7MPfbxm5/ fMyiZMRbK0W5hMmKpL40e3GU45CtqEJA+Cva0fx/LPdKTAE8wMhCBZoEV8GSexro EkSdOzMZfagcUECrjxywD/ix8mIZCS0rt4z/turLKQIgSFgtIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2bXPMCYTMlca13V13G4i6xmd8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTViYjYxY2QtODJhZS0z NDRiLThiYWItZGU5ZGNhODU5YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwH2HnHgVRRxlHrfBeZ54u5NE9lRgXFdBXKJmsKMOxGnVyZDrz2VRn+ QgLMezS5m0waT3/506XGUmSRkIhecvb3ixIbsiMMytHdNbWwJlux94yEB6+1spZy n+WxUDX+dmvD/u76slNM/tKcnhvy9fPO9LT8Rqm9C6zIejmnmJ69HUTU6QHUZ9wW F5ZYgB3oEAc5Wt8eALjRWhIRZOIehzMfOPlxcTkAqmuNTGmqW3mXCx0vfhrlwWrQ 2gCDXp7ZaWyb/+2kHuhmo45accY2hee/0n0mpFv0QYBBVSB5lWexCdLEpqHy1lSs y4FxwQ892s/YPpgqgi6oKvOsaMqCRMI= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:16 2025 by rpki-client