$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa File: aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa (raw, json) Hash identifier: /nzPsa9zf2YPl8meDDk0ZCGskg/wX0J5AlyZhyjLI7s= Subject key identifier: 58:45:13:FF:B9:06:2C:6B:1A:BF:61:13:5D:35:EC:E5:95:EF:73:1E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8F3CCF17F593E3B80EC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8f:3c:cf:17:f5:93:e3:b8:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=be72e00a-3db9-46a5-becf-21f466f5a97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:71:d1:49:47:87:ed:4f:cc:29:2d:63:d6: c9:0a:51:5d:0c:58:db:40:9d:41:46:11:75:58:41: db:55:d4:6d:01:8f:9b:10:18:44:f3:8f:9b:9d:b8: a9:e3:ac:a1:0d:08:c4:01:29:b5:9d:90:63:a6:59: c8:30:23:6c:54:8f:4c:5d:e4:eb:bc:9c:75:93:ef: d8:17:1a:f5:e9:b9:8f:de:8c:2e:fd:a3:8e:3a:90: 2e:45:c5:5b:da:30:0c:93:87:40:bc:51:03:62:06: fb:3c:6e:dc:cd:b1:c5:64:0a:3a:d5:c3:4f:aa:00: e5:c9:84:bc:27:f0:78:d1:fa:0b:d3:3b:ed:86:29: 8b:db:a5:22:ba:ec:29:34:59:56:ac:68:c6:20:f7: e7:53:05:37:88:f7:dc:63:ca:44:a1:20:f3:04:8f: d6:19:31:3e:45:da:38:4a:8d:4e:7e:8e:8a:f5:b9: 81:b8:a0:f0:40:ef:fd:41:09:27:94:e8:ee:ac:22: c2:fd:42:d2:07:9f:be:b2:19:09:d2:e9:c3:83:c3: 43:62:a2:ae:f1:e6:34:27:2a:cb:9d:72:45:25:0f: 97:73:25:3d:99:16:bd:b7:ff:88:d7:e4:a1:f4:ce: b8:5e:ab:e6:76:7b:7b:b5:8f:6f:e0:5f:c3:1c:11: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:45:13:FF:B9:06:2C:6B:1A:BF:61:13:5D:35:EC:E5:95:EF:73:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:0c:ea:aa:99:ca:20:08:17:71:67:99:2b:9f:5b:7c:70:6d: 06:01:f8:19:d9:46:f3:4e:29:d4:e0:3d:8b:6a:7e:0f:95:06: 09:03:d9:b0:15:07:6f:8e:df:4b:8a:26:08:60:65:b3:a3:e8: d2:ab:6f:9e:18:1f:f0:14:10:5a:55:80:75:89:89:5f:ff:29: ba:fe:21:ff:e5:a8:89:cd:ec:30:ca:f6:f5:62:31:90:72:96: b6:d3:c9:e2:07:68:da:e3:4f:c5:72:09:9e:09:41:0c:d5:64: c3:e4:73:ae:85:a1:00:d3:05:a1:4b:f1:a2:89:13:a4:bd:0a: cb:a7:0c:1b:24:a6:72:c2:da:3c:95:4e:82:bd:aa:d7:2d:16: a2:fc:af:21:00:bd:39:b7:d9:cb:c4:67:3f:e8:a4:0b:59:6d: 81:a1:72:d3:5c:35:56:fb:6f:99:35:37:39:b6:13:66:77:32: e6:5e:45:3a:e3:67:69:4d:e0:21:22:a6:39:41:45:ec:d5:0d: 9a:5f:26:f5:96:82:0a:80:ff:da:b2:75:ee:5e:52:eb:16:67: 2f:dc:9a:43:57:93:f4:7e:04:b0:3f:af:a0:90:7c:9e:9e:eb: 55:f1:f0:4b:45:b6:71:71:f4:5e:12:ef:df:c5:14:c3:ee:58: 01:37:da:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDI88zxf1k+O4DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmU3MmUwMGEtM2RiOS00NmE1LWJlY2YtMjFmNDY2ZjVhOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPhx0UlHh+1PzCktY9bJClFdDFjbQJ1BRhF1 WEHbVdRtAY+bEBhE84+bnbip46yhDQjEASm1nZBjplnIMCNsVI9MXeTrvJx1k+/Y Fxr16bmP3owu/aOOOpAuRcVb2jAMk4dAvFEDYgb7PG7czbHFZAo61cNPqgDlyYS8 J/B40foL0zvthimL26UiuuwpNFlWrGjGIPfnUwU3iPfcY8pEoSDzBI/WGTE+Rdo4 So1Ofo6K9bmBuKDwQO/9QQknlOjurCLC/ULSB5++shkJ0unDg8NDYqKu8eY0JyrL nXJFJQ+XcyU9mRa9t/+I1+Sh9M64Xqvmdnt7tY9v4F/DHBHojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhFE/+5BixrGr9hE1017OWV73MeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWE4ZDVhMTItNDhkZS0z MGYxLTkwZDAtZDY2MjI4MDdiMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUM6qqZyiAIF3FnmSufW3xwbQYB+BnZRvNOKdTgPYtqfg+VBgkD2bAV B2+O30uKJghgZbOj6NKrb54YH/AUEFpVgHWJiV//Kbr+If/lqInN7DDK9vViMZBy lrbTyeIHaNrjT8VyCZ4JQQzVZMPkc66FoQDTBaFL8aKJE6S9CsunDBskpnLC2jyV ToK9qtctFqL8ryEAvTm32cvEZz/opAtZbYGhctNcNVb7b5k1Nzm2E2Z3MuZeRTrj Z2lN4CEipjlBRezVDZpfJvWWggqA/9qyde5eUusWZy/cmkNXk/R+BLA/r6CQfJ6e 61Xx8EtFtnFx9F4S79/FFMPuWAE32hs= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:18 2025 by rpki-client