$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6d017b1-da50-3eb1-8380-73d534666bb3.roa File: a6d017b1-da50-3eb1-8380-73d534666bb3.roa (raw, json) Hash identifier: GLg2DYQyH2CCkVY/+CfN68Q4VyaY1ZMJAMPuKINusgs= Subject key identifier: 9D:80:21:8A:1C:11:69:83:75:48:DD:09:09:D7:AD:D9:A2:3D:85:8E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C9023BD11E9EBBCEBFF90 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6d017b1-da50-3eb1-8380-73d534666bb3.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:90:23:bd:11:e9:eb:bc:eb:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=ed62e184-e35b-437a-bc9f-4dbdd53fa24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:88:fa:1d:51:61:9d:6a:af:52:3e:66:ed: 4a:55:d2:0f:4d:ee:24:d8:a8:40:a9:45:6a:b2:b0: e4:5d:53:39:c9:a1:6c:6b:78:22:ac:60:72:d2:f3: ff:25:2f:70:31:9e:7c:ee:d3:15:03:5a:92:8e:7e: 7a:70:ec:dc:5a:e4:69:7e:89:24:c7:6a:34:de:df: e8:85:fc:d0:c5:59:42:8a:85:30:bc:12:a2:a1:9a: f2:b0:a5:e9:94:66:c5:08:01:b9:ac:1d:17:1a:9c: 05:2b:1b:45:b5:f2:57:03:3f:35:12:91:47:9d:7b: 76:6e:7d:a4:95:a2:8e:eb:8a:c4:a3:34:94:49:2c: a4:80:e0:fa:e7:d4:77:88:12:c4:77:64:85:be:1c: 27:22:85:7b:65:8a:f0:6e:77:f7:9f:04:c3:b7:c4: 2b:04:93:53:6e:64:50:e2:89:3a:ca:27:65:14:7d: 73:ce:a4:a4:d2:e1:17:4d:b4:6c:e4:9e:ba:b0:2e: a5:8b:fe:0b:64:9e:6d:2c:e5:8b:4f:e5:a0:04:1f: 9f:5e:52:76:cb:54:d2:b3:4d:ce:92:17:4f:0a:14: b7:46:31:23:68:b9:73:84:88:d0:dd:33:2e:3c:82: f7:55:32:c0:ce:80:59:e6:ef:fa:4d:46:6f:58:b5: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:80:21:8A:1C:11:69:83:75:48:DD:09:09:D7:AD:D9:A2:3D:85:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6d017b1-da50-3eb1-8380-73d534666bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d7:32:7e:0c:71:35:54:07:1d:75:9e:41:df:0d:f7:f2:e7: 51:49:17:d8:a8:e1:82:b6:2c:f4:46:1a:63:7a:68:26:9a:18: bd:9e:cc:fd:a9:0a:08:8d:5c:4c:8b:ef:f7:86:95:f7:2a:08: 97:d3:12:ca:e2:a8:12:2d:f2:7e:80:3b:9e:11:c9:e4:0a:0e: 39:04:3d:18:7a:68:05:bb:ae:cc:a5:a9:cd:0c:ef:ba:6a:6c: 0b:23:48:21:e3:3d:be:48:fd:25:72:a0:5b:0c:86:02:2c:31: 67:bf:d1:22:e2:e7:3a:5b:72:e1:f7:aa:ab:06:9e:bf:db:ac: 12:bb:e8:82:4a:c3:33:f4:37:6e:bf:1b:58:34:d7:2f:06:ab: 0c:1f:29:e4:de:95:98:87:e3:3c:ab:15:b6:a8:13:a4:30:cc: ce:7f:ef:58:f1:ae:0f:23:57:13:fd:73:cd:af:ae:ec:34:27: ca:9e:48:2f:7e:2f:c7:0f:fe:f8:17:4c:9f:d5:11:76:d2:14: 39:0a:d5:6b:7a:f1:4c:3c:a7:e5:4f:87:81:9e:a5:76:db:7c: a2:b9:84:ed:6c:64:e1:0e:13:a7:16:7b:0d:04:2f:05:6b:8d: 1e:9b:7e:d3:a7:fc:29:2a:8b:43:39:eb:41:0f:6e:96:29:02: 73:d5:1b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJAjvRHp67zr/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ2MmUxODQtZTM1Yi00MzdhLWJjOWYtNGRiZGQ1M2ZhMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7yI+h1RYZ1qr1I+Zu1KVdIPTe4k2KhAqUVq srDkXVM5yaFsa3girGBy0vP/JS9wMZ587tMVA1qSjn56cOzcWuRpfokkx2o03t/o hfzQxVlCioUwvBKioZrysKXplGbFCAG5rB0XGpwFKxtFtfJXAz81EpFHnXt2bn2k laKO64rEozSUSSykgOD659R3iBLEd2SFvhwnIoV7ZYrwbnf3nwTDt8QrBJNTbmRQ 4ok6yidlFH1zzqSk0uEXTbRs5J66sC6li/4LZJ5tLOWLT+WgBB+fXlJ2y1TSs03O khdPChS3RjEjaLlzhIjQ3TMuPIL3VTLAzoBZ5u/6TUZvWLUnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2AIYocEWmDdUjdCQnXrdmiPYWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTZkMDE3YjEtZGE1MC0z ZWIxLTgzODAtNzNkNTM0NjY2YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/XMn4McTVUBx11nkHfDffy51FJF9io4YK2LPRGGmN6aCaaGL2ezP2p CgiNXEyL7/eGlfcqCJfTEsriqBIt8n6AO54RyeQKDjkEPRh6aAW7rsylqc0M77pq bAsjSCHjPb5I/SVyoFsMhgIsMWe/0SLi5zpbcuH3qqsGnr/brBK76IJKwzP0N26/ G1g01y8GqwwfKeTelZiH4zyrFbaoE6QwzM5/71jxrg8jVxP9c82vruw0J8qeSC9+ L8cP/vgXTJ/VEXbSFDkK1Wt68Uw8p+VPh4GepXbbfKK5hO1sZOEOE6cWew0ELwVr jR6bftOn/Ckqi0M560EPbpYpAnPVG3k= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:43 2025 by rpki-client