$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa File: 971c0aba-2882-33af-b5c2-5d49fdd45247.roa (raw, json) Hash identifier: 9+7bcST7LHyx+kjdPkzM5dIsEikhGw6M0R1+5sBpDCQ= Subject key identifier: 4E:7D:D4:3F:33:16:64:06:CF:D2:82:5C:BC:E8:34:BF:E2:39:C4:CE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C78DC77EAB90A4BD97800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:78:dc:77:ea:b9:0a:4b:d9:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=fda06668-8360-484f-9151-aa38d4dd4225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:a7:52:57:13:2c:76:f3:f9:c2:1a:d6:02: ea:68:7a:04:5c:e3:70:8b:84:4d:af:99:83:ad:85: 61:78:7d:f4:9a:ca:c5:bf:97:07:da:32:35:89:8e: 4c:64:67:2c:6b:f2:6b:0c:c7:01:81:ad:49:ba:78: 46:32:3e:7f:c7:74:e6:6e:21:1a:d4:32:b9:cc:1c: f3:6d:d1:6e:21:2b:dc:c9:65:18:fd:19:f6:01:ae: a7:b9:0e:6a:d4:b3:a7:25:f1:e6:1c:8e:9a:72:19: ec:db:91:13:59:df:0d:5c:e8:a7:99:a8:06:dc:f0: 0f:ff:d1:23:eb:d8:13:d6:8d:f0:c8:42:bc:7b:c1: 1b:bf:ac:1e:1f:e7:31:60:78:d2:fc:41:89:2d:b4: 9a:fc:05:6d:08:38:49:0d:22:1c:04:25:f4:14:2e: 2f:48:47:6a:86:f1:fe:ff:d1:ce:63:2e:80:15:b9: 04:e2:c9:a3:2f:79:28:f9:49:53:dc:b7:ab:fc:95: 34:04:fd:73:e1:06:ea:9e:f0:03:8b:77:c5:2a:e1: 39:0e:d7:c1:b4:d7:4f:af:d9:35:91:0c:5c:c1:ca: 72:2f:1f:29:50:9a:6c:9d:42:8d:92:2e:0f:5d:51: 61:dc:82:d3:60:3a:3f:fd:24:7a:d9:76:19:37:54: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:D4:3F:33:16:64:06:CF:D2:82:5C:BC:E8:34:BF:E2:39:C4:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:59:ce:a6:a4:71:b3:2f:b6:90:3d:b3:4b:85:61:f1:ce:c2: 7b:a4:70:23:c5:77:67:9e:a7:8f:87:7f:5b:b0:e2:f7:c1:47: 84:8c:8e:f5:02:fa:aa:54:b2:d2:2a:aa:8c:33:3d:3c:14:bb: cd:87:bd:54:3d:0f:5f:eb:cb:1c:f1:f7:2e:f7:df:99:7e:e0: 6d:53:d8:ce:10:da:b9:bc:11:6e:b1:97:d1:75:3f:af:66:ce: 55:7a:55:87:d4:9f:4b:8a:71:1c:d2:f1:a3:13:34:e8:66:1c: 53:8f:00:83:9c:a8:b3:ed:bf:83:44:82:9a:ea:06:2c:8a:40: 82:27:7b:3e:e2:47:c2:8d:41:78:e8:08:9a:ec:c7:01:0a:25: e8:12:82:93:8e:c5:9d:93:a2:21:2d:28:33:68:cc:b4:7d:28: e4:d7:b4:8e:b8:0f:d2:45:67:6a:7d:dc:6d:05:15:55:a8:37: 04:0f:61:fe:02:23:05:a9:20:c1:87:63:94:9d:86:86:5a:73: c3:cf:36:19:44:b1:79:a6:4f:18:43:d8:f7:be:cd:3c:bb:75: 8e:42:3f:ed:c0:b9:4b:2b:ff:64:cb:db:62:64:87:be:4f:da: 00:10:3c:b1:5b:7a:58:e7:fb:bf:21:cc:97:26:a5:8e:5f:ef: a9:88:b7:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHjcd+q5CkvZeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmRhMDY2NjgtODM2MC00ODRmLTkxNTEtYWEzOGQ0ZGQ0MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9GnUlcTLHbz+cIa1gLqaHoEXONwi4RNr5mD rYVheH30msrFv5cH2jI1iY5MZGcsa/JrDMcBga1JunhGMj5/x3TmbiEa1DK5zBzz bdFuISvcyWUY/Rn2Aa6nuQ5q1LOnJfHmHI6achns25ETWd8NXOinmagG3PAP/9Ej 69gT1o3wyEK8e8Ebv6weH+cxYHjS/EGJLbSa/AVtCDhJDSIcBCX0FC4vSEdqhvH+ /9HOYy6AFbkE4smjL3ko+UlT3Ler/JU0BP1z4QbqnvADi3fFKuE5DtfBtNdPr9k1 kQxcwcpyLx8pUJpsnUKNki4PXVFh3ILTYDo//SR62XYZN1TAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE591D8zFmQGz9KCXLzoNL/iOcTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTcxYzBhYmEtMjg4Mi0z M2FmLWI1YzItNWQ0OWZkZDQ1MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJZzqakcbMvtpA9s0uFYfHOwnukcCPFd2eep4+Hf1uw4vfBR4SMjvUC +qpUstIqqowzPTwUu82HvVQ9D1/ryxzx9y7335l+4G1T2M4Q2rm8EW6xl9F1P69m zlV6VYfUn0uKcRzS8aMTNOhmHFOPAIOcqLPtv4NEgprqBiyKQIInez7iR8KNQXjo CJrsxwEKJegSgpOOxZ2ToiEtKDNozLR9KOTXtI64D9JFZ2p93G0FFVWoNwQPYf4C IwWpIMGHY5SdhoZac8PPNhlEsXmmTxhD2Pe+zTy7dY5CP+3AuUsr/2TL22Jkh75P 2gAQPLFbeljn+78hzJcmpY5f76mIt9k= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:38 2025 by rpki-client