$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa File: ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa (raw, json) Hash identifier: 3CKxSqdT+ZadEPXEYjKShfbf0MwDuKq48/5JCPhWJcI= Subject key identifier: 0E:92:64:AD:D7:5B:5F:1C:FD:BD:C8:48:16:DD:11:84:AB:F5:6D:F5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C777C98A25831054CD340 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:77:7c:98:a2:58:31:05:4c:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=84f8a54d-4057-4e14-b1b0-63b3fbf02468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:a2:03:a5:dc:e4:1c:6f:f2:52:a2:1c:1d: e5:0f:28:6e:12:8d:f4:0a:7b:be:b1:d5:74:ac:80: 70:d5:95:97:e3:8a:b4:ef:01:57:ce:03:0f:d1:92: ae:90:84:7b:4f:84:a8:e4:1e:65:69:bf:f7:1c:9e: 91:8a:1b:fc:c1:a2:d2:0d:95:6a:ca:da:54:fd:73: 6a:95:fe:25:f6:27:05:ec:7b:83:ce:bf:ea:d9:4e: 18:6c:ef:56:5c:82:e5:4f:a7:cb:23:c9:85:e5:dc: 85:66:10:c2:bd:cf:86:c3:a7:2f:17:34:5b:87:34: 85:e2:24:fd:1b:ee:b1:16:d0:10:b8:f4:a5:d8:0b: 0c:69:b8:8b:9c:4d:dc:53:ed:cc:42:a6:bb:5e:c8: 42:00:c7:b0:6c:32:cb:fe:4d:d0:8f:73:c7:fd:3a: 80:04:f6:c8:74:f0:8f:84:b7:96:9d:84:c3:82:45: 2a:0f:fd:0b:65:3c:21:17:80:a2:6d:91:66:7c:6b: 8f:4f:a0:42:72:e9:67:3c:60:a3:a0:1e:47:67:f5: 70:fa:7b:67:cf:c1:5e:02:50:bf:d9:94:e8:5c:af: 07:71:fd:07:71:99:01:65:d6:2c:d3:d5:87:ac:b0: 40:ee:f7:a1:f1:76:4d:ee:22:ca:44:69:88:04:dd: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:92:64:AD:D7:5B:5F:1C:FD:BD:C8:48:16:DD:11:84:AB:F5:6D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac8a68c8-f73d-3a7b-86e6-c84d48243acc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8b:56:d2:59:8c:32:f0:c5:47:6e:6c:d5:2a:c2:a3:14:4c: bf:c8:e9:06:7d:9f:4c:98:b8:da:f7:e1:7d:28:01:2a:76:9b: 0b:5a:ed:a2:dd:19:60:d5:4e:1b:ae:7a:38:aa:63:4b:dd:e7: 9c:74:e4:1d:8a:d1:73:da:3c:94:9f:54:f3:d7:e2:7d:6b:97: ea:0a:a6:91:0d:c8:07:d7:7b:3f:61:a2:39:98:21:0a:58:1f: 1b:d5:0f:40:d4:a6:6a:6f:5d:78:8e:1a:33:aa:b6:54:c5:95: 22:40:29:3f:01:1d:2f:d4:54:35:b1:c0:f3:f3:a7:cb:f1:7a: b4:65:3c:45:f2:28:d4:b9:7c:56:3f:c8:89:83:ad:5b:2c:30: 3b:40:99:c5:54:04:f5:af:b9:e7:b2:45:44:d1:3e:d8:4a:0c: 8f:19:d5:df:c4:c9:d0:f4:f5:0b:3d:26:1b:d2:40:f8:10:c9: 57:b0:81:39:1e:d5:c5:2c:c0:70:d9:62:b0:dd:80:0b:75:c7: a3:8a:d7:58:3b:d7:4e:43:69:27:65:a3:80:0e:22:5d:a4:60: f7:1b:17:f5:54:fc:72:0a:fe:bf:ff:da:ec:b7:26:10:f9:af: 80:59:26:73:21:d1:43:31:38:bd:42:9f:48:55:31:cf:25:44: 2c:42:c2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHd8mKJYMQVM00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODRmOGE1NGQtNDA1Ny00ZTE0LWIxYjAtNjNiM2ZiZjAyNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pmiA6Xc5Bxv8lKiHB3lDyhuEo30Cnu+sdV0 rIBw1ZWX44q07wFXzgMP0ZKukIR7T4So5B5lab/3HJ6Rihv8waLSDZVqytpU/XNq lf4l9icF7HuDzr/q2U4YbO9WXILlT6fLI8mF5dyFZhDCvc+Gw6cvFzRbhzSF4iT9 G+6xFtAQuPSl2AsMabiLnE3cU+3MQqa7XshCAMewbDLL/k3Qj3PH/TqABPbIdPCP hLeWnYTDgkUqD/0LZTwhF4CibZFmfGuPT6BCculnPGCjoB5HZ/Vw+ntnz8FeAlC/ 2ZToXK8Hcf0HcZkBZdYs09WHrLBA7veh8XZN7iLKRGmIBN0g8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6SZK3XW18c/b3ISBbdEYSr9W31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWM4YTY4YzgtZjczZC0z YTdiLTg2ZTYtYzg0ZDQ4MjQzYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKLVtJZjDLwxUdubNUqwqMUTL/I6QZ9n0yYuNr34X0oASp2mwta7aLd GWDVThuuejiqY0vd55x05B2K0XPaPJSfVPPX4n1rl+oKppENyAfXez9hojmYIQpY HxvVD0DUpmpvXXiOGjOqtlTFlSJAKT8BHS/UVDWxwPPzp8vxerRlPEXyKNS5fFY/ yImDrVssMDtAmcVUBPWvueeyRUTRPthKDI8Z1d/EydD09Qs9JhvSQPgQyVewgTke 1cUswHDZYrDdgAt1x6OK11g7105DaSdlo4AOIl2kYPcbF/VU/HIK/r//2uy3JhD5 r4BZJnMh0UMxOL1Cn0hVMc8lRCxCwrM= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:33 2025 by rpki-client