$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aae8fb29-3ef2-384b-a735-b66b837eca38.roa File: aae8fb29-3ef2-384b-a735-b66b837eca38.roa (raw, json) Hash identifier: e+ipJyU89cik7nZBd/sCRSZlZVXm1GJmBfbZpzQyFUg= Subject key identifier: 30:47:5E:7D:B5:F2:BC:82:51:FF:0A:F9:6A:36:99:79:12:14:D3:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C929F19478711954FA300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aae8fb29-3ef2-384b-a735-b66b837eca38.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:92:9f:19:47:87:11:95:4f:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=81658fb4-85c7-4cd3-afda-651b71635dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:c4:cb:11:24:08:5a:34:0c:f9:85:a5:21: e8:0b:c6:8d:b2:df:5d:ed:10:21:37:1d:8f:0b:ca: cb:77:5c:1a:23:c9:f4:7f:de:f2:5c:c9:d8:ca:31: 05:0b:54:08:f9:1e:2e:1a:fa:cb:d2:4c:c3:43:ed: 9c:a8:aa:6d:dc:78:f1:03:3f:8d:aa:91:d1:46:f6: 28:bd:3f:25:64:bb:4d:f7:c7:77:a5:66:8b:66:b0: 3b:9b:11:85:71:f7:46:0c:79:ad:ab:48:0e:6c:0e: bd:f6:f5:1d:33:a1:96:5e:9e:17:6f:77:88:ce:5c: 23:e7:39:1a:9d:e7:b3:11:c2:bb:73:6f:6d:a4:a3: 92:39:41:3f:54:2b:55:03:4f:d6:24:c5:98:29:10: 4e:1c:17:78:03:e5:bb:89:6e:40:13:7a:e0:c1:2f: 04:e2:86:bc:0f:68:ce:f0:97:91:e5:d9:6e:4a:59: e3:0e:ba:e3:db:1f:39:e5:f9:bf:08:6b:d0:85:f6: 2f:2c:e7:36:4f:59:d4:2c:2d:d6:d1:8f:90:c3:cd: 43:6c:01:c0:c2:99:68:c5:2a:1d:f0:aa:8e:2d:1b: df:93:ef:eb:da:59:30:3e:33:94:7b:ee:e6:8e:15: 9e:a5:a2:f4:2f:d7:0c:4c:e4:93:62:43:94:87:9d: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:5E:7D:B5:F2:BC:82:51:FF:0A:F9:6A:36:99:79:12:14:D3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aae8fb29-3ef2-384b-a735-b66b837eca38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:36:9a:04:33:ad:b5:b4:ed:1e:0d:1d:22:55:d0:c8:e4:6b: 91:58:be:8f:ee:fd:ba:a0:f2:27:12:2e:73:b7:b0:fe:62:de: 66:6d:cd:6f:b2:76:75:e6:7a:9b:2f:40:40:ea:78:b2:86:b6: b4:d3:0e:9e:a1:41:4f:59:a2:c9:0a:6b:df:4f:ce:6d:ef:d5: 73:0c:fb:8c:ba:b8:7b:8b:ee:a0:5b:a2:b9:0d:e4:55:2e:e6: 49:1e:77:c2:cc:d1:0d:22:9a:e9:d9:4f:69:1d:f2:11:fa:87: 5b:1f:ef:6a:ea:38:b6:43:43:de:ae:e5:19:2e:fa:b9:36:03: 80:7e:15:6c:62:3d:7e:d6:67:fc:da:66:fc:fa:2b:da:9c:eb: ba:77:a1:ec:26:1f:99:4c:93:fa:fb:6f:bc:0c:02:9b:b2:28: 10:74:cc:87:f5:6e:e8:1b:1a:48:e4:b6:f6:82:bd:89:32:fe: 23:7b:b5:3d:e5:53:28:bf:07:61:3d:fa:b8:00:3e:ac:4d:12: 20:e6:f9:48:58:a2:65:9f:3d:f3:a4:84:3d:08:3e:34:a2:1d: 5a:4a:48:35:87:95:74:d4:31:27:9e:00:8b:a8:91:09:64:d9: 68:5d:c9:6a:00:46:06:1d:0c:36:05:cd:0e:7b:72:c7:90:51: e3:8d:5a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJKfGUeHEZVPowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODE2NThmYjQtODVjNy00Y2QzLWFmZGEtNjUxYjcxNjM1ZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX3EyxEkCFo0DPmFpSHoC8aNst9d7RAhNx2P C8rLd1waI8n0f97yXMnYyjEFC1QI+R4uGvrL0kzDQ+2cqKpt3HjxAz+NqpHRRvYo vT8lZLtN98d3pWaLZrA7mxGFcfdGDHmtq0gObA699vUdM6GWXp4Xb3eIzlwj5zka neezEcK7c29tpKOSOUE/VCtVA0/WJMWYKRBOHBd4A+W7iW5AE3rgwS8E4oa8D2jO 8JeR5dluSlnjDrrj2x855fm/CGvQhfYvLOc2T1nULC3W0Y+Qw81DbAHAwploxSod 8KqOLRvfk+/r2lkwPjOUe+7mjhWepaL0L9cMTOSTYkOUh53QwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBHXn218ryCUf8K+Wo2mXkSFNNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWFlOGZiMjktM2VmMi0z ODRiLWE3MzUtYjY2YjgzN2VjYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH42mgQzrbW07R4NHSJV0Mjka5FYvo/u/bqg8icSLnO3sP5i3mZtzW+y dnXmepsvQEDqeLKGtrTTDp6hQU9ZoskKa99Pzm3v1XMM+4y6uHuL7qBborkN5FUu 5kked8LM0Q0imunZT2kd8hH6h1sf72rqOLZDQ96u5Rku+rk2A4B+FWxiPX7WZ/za Zvz6K9qc67p3oewmH5lMk/r7b7wMApuyKBB0zIf1bugbGkjktvaCvYky/iN7tT3l Uyi/B2E9+rgAPqxNEiDm+UhYomWfPfOkhD0IPjSiHVpKSDWHlXTUMSeeAIuokQlk 2WhdyWoARgYdDDYFzQ57cseQUeONWiQ= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:25 2025 by rpki-client