$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa File: ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa (raw, json) Hash identifier: ur8f4lBydyrcwd1q5BzGmIbiuixkLNRfk2rg9pXhMf4= Subject key identifier: 51:08:09:6F:83:F8:33:08:84:C0:EE:8B:43:26:81:B4:A8:01:C9:4F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C9716EE6CB7EA8CFE3640 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:97:16:ee:6c:b7:ea:8c:fe:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=e8ca147e-79de-48cb-9b9e-a432b7a2fe48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:0d:2b:e1:d3:51:d2:93:6f:e5:b1:b8:df: d4:03:7e:55:95:a5:fd:93:6b:63:5e:2b:7a:ff:42: c6:f1:87:f7:a8:d7:d2:a3:f6:b7:07:a3:b0:19:89: f3:8d:4a:df:a8:61:03:7f:31:75:86:57:25:db:15: ac:c7:13:df:77:a0:5a:17:67:55:65:b6:d1:2d:41: 22:a4:e4:a0:85:14:eb:49:ea:ec:a5:ca:09:e7:bd: 2a:1f:a4:5c:53:32:ec:f6:f1:2f:c2:8c:52:53:bf: fb:7a:45:56:04:86:54:12:fb:77:e2:bc:f8:5c:f7: dc:83:9e:cb:69:ac:3b:ee:d3:b2:d6:ed:dc:93:ad: 5b:35:fa:cf:78:e4:cb:4a:2c:e4:0d:6f:cc:75:7e: f8:87:7f:e8:a3:6c:e9:b7:aa:d6:df:63:14:99:a3: 5a:31:5c:f9:e3:1c:89:c6:e2:83:66:10:e0:33:4e: d7:d7:47:52:2e:80:43:80:8c:cf:d6:9c:3a:e3:fe: 23:fa:01:b8:89:0b:0e:3b:9f:76:7b:27:4c:c1:f8: 8a:c9:bc:88:ff:69:56:31:ad:cb:bc:9c:d9:9d:98: 03:89:9c:81:96:1d:92:3c:0e:21:5a:02:d3:47:f9: 77:3b:23:46:3d:98:dd:2e:2f:c1:ac:02:e8:54:a3: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:08:09:6F:83:F8:33:08:84:C0:EE:8B:43:26:81:B4:A8:01:C9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2a:1a:4c:15:50:fe:05:1d:1d:8b:96:3a:63:9e:9e:f4:f2: 76:83:ea:ab:a4:8e:04:db:19:b2:9e:82:e6:eb:45:da:2f:a2: 91:c4:23:f4:42:7d:bf:9e:bd:d6:0b:a0:35:9e:79:ec:f0:b5: 51:87:69:04:e8:dc:ae:f2:53:73:84:d5:7f:6a:07:37:ca:98: 98:81:a9:63:59:ea:81:fd:45:04:1d:c2:2b:c0:88:74:b4:77: cb:3c:11:c6:a8:86:76:6c:08:16:24:e7:4e:6f:a6:4e:8c:1d: ff:30:47:68:27:e2:db:c6:af:95:02:8a:1d:96:4d:d4:71:ab: 4d:1d:35:3c:ae:f1:c1:16:56:b1:84:88:af:b2:f8:27:cd:cd: c7:b4:b2:39:82:76:31:82:d9:6b:af:84:63:36:29:81:29:3a: e8:33:5a:88:e0:35:22:8d:81:d8:7b:94:5e:ff:10:f4:b9:d6: 38:d6:ad:5e:8d:c4:71:6c:76:8f:7e:fd:70:57:3d:a5:40:cb: bf:24:cc:11:8a:5e:fe:79:6f:00:d3:23:90:a4:75:82:24:6c: cd:77:bd:a0:15:36:b4:89:17:a3:63:c8:15:6f:91:f7:4f:7c: 3c:10:98:a9:a7:23:2d:61:0a:c5:ba:72:69:fe:d5:00:51:16: 8f:87:e8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJcW7my36oz+NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZThjYTE0N2UtNzlkZS00OGNiLTliOWUtYTQzMmI3YTJmZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10QNK+HTUdKTb+WxuN/UA35VlaX9k2tjXit6 /0LG8Yf3qNfSo/a3B6OwGYnzjUrfqGEDfzF1hlcl2xWsxxPfd6BaF2dVZbbRLUEi pOSghRTrSerspcoJ570qH6RcUzLs9vEvwoxSU7/7ekVWBIZUEvt34rz4XPfcg57L aaw77tOy1u3ck61bNfrPeOTLSizkDW/MdX74h3/oo2zpt6rW32MUmaNaMVz54xyJ xuKDZhDgM07X10dSLoBDgIzP1pw64/4j+gG4iQsOO592eydMwfiKybyI/2lWMa3L vJzZnZgDiZyBlh2SPA4hWgLTR/l3OyNGPZjdLi/BrALoVKMMTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEICW+D+DMIhMDui0MmgbSoAclPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWMyY2NkNjUtZjM3OC0z NjJkLWJiMmItMmU1NGFkNmNjZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoqGkwVUP4FHR2Lljpjnp708naD6qukjgTbGbKegubrRdovopHEI/RC fb+evdYLoDWeeezwtVGHaQTo3K7yU3OE1X9qBzfKmJiBqWNZ6oH9RQQdwivAiHS0 d8s8EcaohnZsCBYk505vpk6MHf8wR2gn4tvGr5UCih2WTdRxq00dNTyu8cEWVrGE iK+y+CfNzce0sjmCdjGC2WuvhGM2KYEpOugzWojgNSKNgdh7lF7/EPS51jjWrV6N xHFsdo9+/XBXPaVAy78kzBGKXv55bwDTI5CkdYIkbM13vaAVNrSJF6NjyBVvkfdP fDwQmKmnIy1hCsW6cmn+1QBRFo+H6Ms= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:33 2025 by rpki-client