$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa File: b666c2f2-ac32-3f55-83e0-109befd67db5.roa (raw, json) Hash identifier: sHXkqbGIkh1WM9fH1gcHX6PnnWsvotxgcV3Bv0o+rJA= Subject key identifier: 28:87:3B:B0:9E:EE:F4:24:D2:30:E3:53:F9:30:50:5B:80:EE:E8:E2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141DDA42D0D6C2BBE518980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:dd:a4:2d:0d:6c:2b:be:51:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=6fc9c42f-2093-4f15-8082-34b4c3f4c982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:42:cc:10:63:56:d8:dd:63:1f:4c:3c:a7: 0f:68:6a:c9:48:7e:db:cc:b4:13:75:b7:af:bf:c6: eb:41:92:cb:17:83:73:09:cc:88:8e:e5:35:7e:77: 57:8f:ec:13:e8:71:05:49:fb:aa:a2:ab:ae:b4:5f: d2:7e:75:27:e6:40:79:7d:34:8d:4e:f8:39:1c:a0: c0:55:17:23:fe:74:03:0a:cb:b9:6d:21:f2:81:e9: fe:a4:3b:04:e1:76:52:96:c4:e8:7f:89:8d:47:8c: 57:92:ab:80:00:4a:59:95:fa:1d:95:05:6c:4b:74: 1e:0a:aa:71:b0:47:1e:bc:82:d2:a2:dd:12:62:6e: 45:b2:8d:33:31:f4:a9:97:1d:0b:c1:73:62:a2:cd: 42:fc:97:32:60:74:cc:52:74:0e:6a:17:ab:39:95: 98:e0:e0:7c:20:96:7c:9c:70:02:d6:3a:cd:44:2b: 60:57:55:85:a7:2f:b9:5b:f0:21:e9:6f:fd:d5:15: cc:c0:d2:97:cd:5c:70:80:d5:61:96:3d:f3:f8:d4: 09:40:2d:dc:3c:9f:34:21:5b:03:de:8e:ff:c4:c7: ce:c5:fc:e7:f5:10:5b:e9:64:a8:99:5b:c5:d0:ca: d2:2e:a5:cd:9d:97:7c:39:0e:58:59:7a:d1:ea:12: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:3B:B0:9E:EE:F4:24:D2:30:E3:53:F9:30:50:5B:80:EE:E8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:87:ea:29:06:8b:a4:5c:b9:4e:3e:0a:44:10:37:17:94:e3: 72:71:93:f6:17:66:8b:c4:4f:ad:23:70:93:bd:75:33:7c:bd: 84:c2:93:c3:b8:21:1b:d2:af:48:8b:61:e4:82:0e:c5:42:fa: 21:66:ac:5d:d4:82:04:64:d1:bd:3d:c9:45:d8:2a:08:60:19: 7b:22:21:a2:57:fb:a8:33:ed:f0:d6:13:cb:b4:52:7d:c2:01: da:e5:3e:f4:1b:cc:07:e0:44:7e:26:c3:74:c8:7f:5a:d7:a6: c4:f7:e4:2a:8a:f1:c6:b2:76:48:80:83:bd:df:cd:8e:b6:d4: e7:14:5b:e0:8d:b6:d5:55:34:55:61:79:7d:94:86:8c:7c:76: 48:ca:b9:cc:4e:df:53:41:72:0c:fc:68:aa:64:b7:f0:ae:26: 9f:1b:3a:c6:9c:27:99:a2:b4:fc:2d:ef:e2:0e:91:f8:de:16: 67:7e:c1:08:04:22:cf:ec:01:06:2d:51:5d:67:30:a2:fa:db: e9:fb:42:16:c4:51:23:1d:7f:9d:9d:1b:3d:33:96:e7:aa:45: 44:22:dc:c5:5a:c3:f3:af:d3:cc:f5:24:6e:89:72:70:ec:eb: 32:79:88:22:25:e3:f2:7c:69:06:7b:23:7f:e3:ad:53:24:a4: fd:ea:11:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQd2kLQ1sK75RiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NmZjOWM0MmYtMjA5My00ZjE1LTgwODItMzRiNGMzZjRjOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluBCzBBjVtjdYx9MPKcPaGrJSH7bzLQTdbev v8brQZLLF4NzCcyIjuU1fndXj+wT6HEFSfuqoquutF/SfnUn5kB5fTSNTvg5HKDA VRcj/nQDCsu5bSHygen+pDsE4XZSlsTof4mNR4xXkquAAEpZlfodlQVsS3QeCqpx sEcevILSot0SYm5Fso0zMfSplx0LwXNios1C/JcyYHTMUnQOaherOZWY4OB8IJZ8 nHAC1jrNRCtgV1WFpy+5W/Ah6W/91RXMwNKXzVxwgNVhlj3z+NQJQC3cPJ80IVsD 3o7/xMfOxfzn9RBb6WSomVvF0MrSLqXNnZd8OQ5YWXrR6hIm4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiHO7Ce7vQk0jDjU/kwUFuA7ujiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjY2NmMyZjItYWMzMi0z ZjU1LTgzZTAtMTA5YmVmZDY3ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuH6ikGi6RcuU4+CkQQNxeU43Jxk/YXZovET60jcJO9dTN8vYTCk8O4 IRvSr0iLYeSCDsVC+iFmrF3UggRk0b09yUXYKghgGXsiIaJX+6gz7fDWE8u0Un3C AdrlPvQbzAfgRH4mw3TIf1rXpsT35CqK8caydkiAg73fzY621OcUW+CNttVVNFVh eX2Uhox8dkjKucxO31NBcgz8aKpkt/CuJp8bOsacJ5mitPwt7+IOkfjeFmd+wQgE Is/sAQYtUV1nMKL62+n7QhbEUSMdf52dGz0zlueqRUQi3MVaw/Ov08z1JG6JcnDs 6zJ5iCIl4/J8aQZ7I3/jrVMkpP3qETM= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:53 2025 by rpki-client