$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b856268b-ff78-3ab6-9a1f-510b2315d43c.roa File: b856268b-ff78-3ab6-9a1f-510b2315d43c.roa (raw, json) Hash identifier: 4Cf5SKLGVeqrFw9VAXYrCJ4cP9GI8bDpIL/WRrt2bUo= Subject key identifier: 38:22:01:DF:2A:3C:4D:B1:60:1C:11:85:FF:E8:CD:9B:17:F5:48:BE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C9701C8C94BC0D4D968C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b856268b-ff78-3ab6-9a1f-510b2315d43c.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:97:01:c8:c9:4b:c0:d4:d9:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=bf215489-ac24-448a-8612-0868574183fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:3a:16:3c:7b:39:bc:bf:69:0e:48:69:47: 8b:95:c7:61:08:34:8b:b5:94:e8:5f:be:d9:41:58: f6:4c:68:3e:b8:a8:b0:5e:f2:8c:a6:a3:cc:3c:b5: c3:0a:39:da:e7:fa:c5:d1:92:45:bd:ef:05:50:13: d0:d7:0c:81:b3:66:fb:87:06:10:f0:dc:dc:86:a0: f2:a0:69:67:dd:41:99:fe:dd:cb:5d:4c:f0:6b:2e: c2:f7:56:4e:e3:8a:59:a9:59:8e:ea:4f:5f:39:58: 55:eb:b2:39:1e:78:ff:9b:aa:17:91:8a:39:a0:d7: 70:c7:cc:8b:6c:81:37:be:22:6a:aa:30:07:4e:a5: f4:14:40:dd:1d:e5:bd:10:1a:ce:90:9f:3e:ed:6c: 55:46:7a:5c:b3:a7:43:5b:59:7f:2c:23:f5:06:32: dc:f2:3b:ad:c3:ea:a0:4f:10:b8:8a:60:ac:01:e4: c4:67:b2:ab:82:fe:1a:1f:35:78:96:52:6b:a0:ba: 39:3f:f1:23:d1:e2:16:ee:8e:e2:fb:09:cf:0e:13: 9b:83:fd:09:1a:a4:a5:25:2b:f6:ac:6c:6f:06:42: 03:7c:6b:dc:1d:a9:eb:20:b5:9a:73:b9:63:4f:d4: cf:23:31:8f:58:5f:a7:e4:eb:80:b0:6a:37:d3:9b: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:01:DF:2A:3C:4D:B1:60:1C:11:85:FF:E8:CD:9B:17:F5:48:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b856268b-ff78-3ab6-9a1f-510b2315d43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:08:92:a1:db:97:25:d3:12:e4:58:b7:46:c5:ed:5e:5c:b5: 41:03:5b:d5:3a:4a:02:5b:92:e6:77:d1:82:08:a0:bb:40:70: 0c:bb:fa:db:36:29:d5:6a:74:98:77:23:90:ff:c5:c2:c5:1a: 23:ac:14:88:4c:17:d4:8c:bf:43:61:d9:66:e0:70:fe:f7:8d: 6a:f6:e5:2e:b4:be:a0:8d:65:2b:e9:8d:ce:ec:1b:7a:14:a9: 5c:50:44:d9:c2:18:7a:a7:24:4b:70:a9:48:76:f1:f2:45:b4: 64:6e:85:7b:17:f8:2e:89:7b:4d:31:92:42:0b:6a:fd:66:b5: a1:0e:1b:6e:4f:00:6d:05:5d:f0:16:e0:23:8f:2a:f6:4d:de: b3:98:8b:9d:c4:00:c5:1d:f7:44:ad:4d:4f:4f:17:30:3c:d1: 53:0f:d2:d5:ff:e0:26:13:c7:e1:83:f2:34:be:ac:6b:37:8e: 6c:9f:ec:f4:89:5d:0d:17:c6:2f:58:d3:5a:44:7d:40:67:45: e0:57:e8:34:65:5c:28:44:64:e3:ec:d3:a4:b7:69:2e:d5:2d: 75:e2:93:f6:9f:38:ff:e6:2f:10:0d:71:a0:8a:3f:66:85:e2: ee:d9:8b:a3:5c:8f:f5:9b:44:9d:0b:43:00:27:c7:1d:d8:cc: 30:ea:f2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJcByMlLwNTZaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmYyMTU0ODktYWMyNC00NDhhLTg2MTItMDg2ODU3NDE4M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLA6Fjx7Oby/aQ5IaUeLlcdhCDSLtZToX77Z QVj2TGg+uKiwXvKMpqPMPLXDCjna5/rF0ZJFve8FUBPQ1wyBs2b7hwYQ8NzchqDy oGln3UGZ/t3LXUzway7C91ZO44pZqVmO6k9fOVhV67I5Hnj/m6oXkYo5oNdwx8yL bIE3viJqqjAHTqX0FEDdHeW9EBrOkJ8+7WxVRnpcs6dDW1l/LCP1BjLc8jutw+qg TxC4imCsAeTEZ7Krgv4aHzV4llJroLo5P/Ej0eIW7o7i+wnPDhObg/0JGqSlJSv2 rGxvBkIDfGvcHanrILWac7ljT9TPIzGPWF+n5OuAsGo305uSXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgiAd8qPE2xYBwRhf/ozZsX9Ui+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjg1NjI2OGItZmY3OC0z YWI2LTlhMWYtNTEwYjIzMTVkNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0IkqHblyXTEuRYt0bF7V5ctUEDW9U6SgJbkuZ30YIIoLtAcAy7+ts2 KdVqdJh3I5D/xcLFGiOsFIhMF9SMv0Nh2WbgcP73jWr25S60vqCNZSvpjc7sG3oU qVxQRNnCGHqnJEtwqUh28fJFtGRuhXsX+C6Je00xkkILav1mtaEOG25PAG0FXfAW 4COPKvZN3rOYi53EAMUd90StTU9PFzA80VMP0tX/4CYTx+GD8jS+rGs3jmyf7PSJ XQ0Xxi9Y01pEfUBnReBX6DRlXChEZOPs06S3aS7VLXXik/afOP/mLxANcaCKP2aF 4u7Zi6Ncj/WbRJ0LQwAnxx3YzDDq8kQ= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:08 2025 by rpki-client