$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9653ff01-b7b6-3277-b216-90c106ebb5bd.roa File: 9653ff01-b7b6-3277-b216-90c106ebb5bd.roa (raw, json) Hash identifier: kWEPE0PoFf5iaeCrdE7fNfuRMKeNYm0LbTZBp1PRQ0E= Subject key identifier: 0E:43:A1:3B:26:B2:A7:30:79:73:72:FB:83:83:E8:16:63:D9:40:E7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B4E7728B16095302084F19480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9653ff01-b7b6-3277-b216-90c106ebb5bd.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:28:b1:60:95:30:20:84:f1:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=77d9207d-bac3-4427-a085-d7aea8dd079a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:6d:6f:84:77:18:e7:f2:b4:ec:1f:f5:2e: fb:cf:1c:4b:f2:5e:b4:a9:29:78:b7:3b:f5:9e:fc: 7c:19:50:1f:64:aa:91:8f:1d:89:0f:15:f6:2d:71: c2:8d:26:50:f4:dd:8c:24:2e:2e:62:08:cf:3d:b3: db:d6:e4:f6:84:54:b5:52:5c:d2:01:99:c1:3c:d8: 9c:71:d6:c0:d2:bf:a3:db:83:b1:45:98:66:9a:e8: 6e:75:0d:3e:a5:54:3c:63:72:97:12:76:f7:60:88: f8:4e:b7:fc:a4:f0:b0:55:7a:35:97:12:d6:cc:6d: 02:df:03:fc:38:87:54:02:c9:d3:67:0a:a3:fe:a1: 3a:3d:53:f1:d1:69:66:33:23:8c:ea:4e:bd:b2:97: 68:b6:31:eb:ec:eb:2d:99:57:9b:6d:93:d1:db:e4: bd:5f:14:d2:6f:c4:1e:68:8a:c4:a1:2c:89:c1:d2: 03:e0:55:0d:32:ba:4a:1e:c8:bc:2e:58:28:9a:a8: e7:2a:f9:02:22:da:24:7f:d2:c9:a1:5b:cf:d3:da: 7c:b8:4e:89:ec:3a:1b:d2:70:a5:43:46:a8:11:05: 08:35:6b:81:c3:e2:2a:a3:61:eb:c0:8d:11:c2:f9: fc:84:3f:5e:d4:e4:5f:f9:29:56:55:6a:6c:ba:4f: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:43:A1:3B:26:B2:A7:30:79:73:72:FB:83:83:E8:16:63:D9:40:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9653ff01-b7b6-3277-b216-90c106ebb5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:66:9c:48:57:a0:27:a5:eb:50:8c:78:69:77:09:11:f4:f1: 1e:c0:05:68:a5:8c:80:1c:4b:ee:af:28:27:2a:c3:27:76:56: 35:87:90:97:11:eb:9b:15:b6:12:0c:85:79:3f:36:16:bb:a9: c5:4e:1f:5f:50:17:eb:90:31:52:fd:e8:22:c4:f5:7a:a2:9f: dc:30:7d:03:37:e6:6c:a2:18:8a:3f:95:f0:e8:89:7d:c3:90: 92:92:a7:84:a4:3e:3f:18:44:30:18:39:b4:d2:84:57:c3:19: 01:32:17:8c:1c:e3:cd:df:25:57:d7:44:b8:da:3c:67:58:d1: ef:a0:56:ad:1b:8f:a4:d6:2f:03:90:86:6b:9a:7f:9e:1f:ee: 9f:4b:1c:cf:c2:a7:86:fc:d5:3a:ff:91:7d:a7:89:71:b8:a6: dd:06:ed:f2:a0:28:f2:c4:b8:1c:11:c3:6a:95:c8:b9:69:bc: 77:f0:f3:5a:0b:5d:c1:e6:60:1a:a9:6d:f8:0a:1b:d8:42:31: 2e:2b:38:b1:f8:33:a6:70:b9:e4:01:9c:68:89:cb:70:26:07: e2:dd:45:f5:28:ca:f8:f3:2a:d2:e0:2b:08:ed:05:2f:72:de: 50:c9:48:ca:dd:94:e1:cc:8e:09:10:d8:78:6d:cb:92:e9:80: 8b:18:26:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyixYJUwIITxlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NzdkOTIwN2QtYmFjMy00NDI3LWEwODUtZDdhZWE4ZGQwNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPZtb4R3GOfytOwf9S77zxxL8l60qSl4tzv1 nvx8GVAfZKqRjx2JDxX2LXHCjSZQ9N2MJC4uYgjPPbPb1uT2hFS1UlzSAZnBPNic cdbA0r+j24OxRZhmmuhudQ0+pVQ8Y3KXEnb3YIj4Trf8pPCwVXo1lxLWzG0C3wP8 OIdUAsnTZwqj/qE6PVPx0WlmMyOM6k69spdotjHr7OstmVebbZPR2+S9XxTSb8Qe aIrEoSyJwdID4FUNMrpKHsi8LlgomqjnKvkCItokf9LJoVvP09p8uE6J7Dob0nCl Q0aoEQUINWuBw+Iqo2HrwI0Rwvn8hD9e1ORf+SlWVWpsuk+LNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5DoTsmsqcweXNy+4OD6BZj2UDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTY1M2ZmMDEtYjdiNi0z Mjc3LWIyMTYtOTBjMTA2ZWJiNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5mnEhXoCel61CMeGl3CRH08R7ABWiljIAcS+6vKCcqwyd2VjWHkJcR 65sVthIMhXk/Nha7qcVOH19QF+uQMVL96CLE9Xqin9wwfQM35myiGIo/lfDoiX3D kJKSp4SkPj8YRDAYObTShFfDGQEyF4wc483fJVfXRLjaPGdY0e+gVq0bj6TWLwOQ hmuaf54f7p9LHM/Cp4b81Tr/kX2niXG4pt0G7fKgKPLEuBwRw2qVyLlpvHfw81oL XcHmYBqpbfgKG9hCMS4rOLH4M6ZwueQBnGiJy3AmB+LdRfUoyvjzKtLgKwjtBS9y 3lDJSMrdlOHMjgkQ2Hhty5LpgIsYJt8= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:13 2025 by rpki-client