$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa File: ba1f3a5b-949d-32e0-9caa-442464bb6521.roa (raw, json) Hash identifier: Gpdf0ZX+CCjsLHL6HfxX5OZ9D4PXk7T91EA3aDOJXCQ= Subject key identifier: D4:34:B8:2D:21:E4:6B:80:4E:9C:8C:41:68:4E:96:0D:46:3B:C9:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7ADBA6295F647F379AC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7a:db:a6:29:5f:64:7f:37:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=d0306c42-ca72-4191-bb57-4b2d8f7c9771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:da:01:f2:d2:90:f1:b6:04:73:59:a9:84: 93:89:9f:fc:78:44:78:36:16:29:34:45:3c:ab:7c: c0:82:74:a8:75:18:70:2a:46:ce:be:17:b6:41:6e: c6:b4:d0:8a:0d:28:6a:f2:71:bd:73:7f:b1:69:f4: 40:5e:57:f2:70:a8:10:f3:48:43:0a:67:96:59:d1: aa:b6:b7:57:ac:7a:ef:1c:9a:80:a2:86:ca:c0:92: 7d:45:0f:da:8a:aa:7a:46:69:7a:18:ae:87:f8:39: c3:a7:67:ca:b9:12:bd:62:e0:d5:b1:a1:45:c1:1c: b5:96:62:dd:15:c9:ff:f7:71:39:8d:16:da:0e:c2: b2:84:ae:e2:36:1a:b5:0d:0c:2e:d1:f5:ff:46:7c: 73:2a:64:e3:12:29:47:37:8a:e7:a2:e5:fc:66:87: 1d:8b:b9:65:e9:81:91:98:1f:e6:3c:19:03:4c:a0: b1:5e:d4:e2:2d:18:bb:12:23:2a:0a:4b:b6:d8:d1: 65:ff:99:5d:34:03:a8:09:13:92:f2:3e:b8:b9:23: 5a:22:71:d4:ba:fc:f6:20:e7:b8:ca:c9:b7:f7:8a: e9:15:fd:7e:9a:4b:ae:4a:f4:15:c3:01:05:cf:ee: 86:30:8c:e0:83:91:b2:73:cc:40:3f:d6:4a:12:f3: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:B8:2D:21:E4:6B:80:4E:9C:8C:41:68:4E:96:0D:46:3B:C9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1f3a5b-949d-32e0-9caa-442464bb6521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f3:da:17:5b:16:13:d3:8c:ce:bf:c8:11:fa:b0:23:22:14: 55:8b:1a:18:19:d7:9e:24:48:6b:f3:b4:96:58:71:24:8a:4a: 8b:fc:f6:03:06:ab:a8:b3:18:19:6a:84:b9:f2:aa:2f:05:88: e1:bb:34:87:b1:a3:02:a9:56:8b:2d:41:6c:04:03:3a:4e:f4: 3e:1f:72:bd:94:c7:80:9f:5c:5e:50:42:2d:b9:d8:cc:79:ce: f3:cb:a2:b4:bd:4a:9d:3e:2f:99:5e:4b:2c:f5:5e:ce:6a:5e: dd:17:03:65:f9:80:68:84:8b:69:3e:bf:22:fa:70:78:93:56: 8b:b7:f3:16:47:c3:4c:4a:4a:49:2b:ef:d3:22:ce:a7:36:10: 6e:c0:1a:4f:fc:a3:5d:0f:a1:37:8e:c3:5f:09:2a:14:fb:a0: 87:60:fd:54:5e:09:24:6a:07:ea:a5:fc:2c:d9:ca:41:e7:c5: 8b:e9:75:0f:2b:86:8b:47:c0:4d:1c:cb:f3:50:fd:d5:5b:f4: 8d:37:8c:a4:e1:13:77:2c:a2:96:a1:7f:45:48:3d:16:fa:7a: 5d:fb:9b:3a:a5:33:58:a5:92:9c:b6:08:a3:34:4c:0f:03:2b: 60:a5:ca:97:8f:4e:1a:f9:e2:a1:22:06:c0:a8:7a:d8:71:73: 67:f5:d7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHrbpilfZH83msAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDAzMDZjNDItY2E3Mi00MTkxLWJiNTctNGIyZDhmN2M5NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/aAfLSkPG2BHNZqYSTiZ/8eER4NhYpNEU8 q3zAgnSodRhwKkbOvhe2QW7GtNCKDShq8nG9c3+xafRAXlfycKgQ80hDCmeWWdGq trdXrHrvHJqAoobKwJJ9RQ/aiqp6Rml6GK6H+DnDp2fKuRK9YuDVsaFFwRy1lmLd Fcn/93E5jRbaDsKyhK7iNhq1DQwu0fX/RnxzKmTjEilHN4rnouX8Zocdi7ll6YGR mB/mPBkDTKCxXtTiLRi7EiMqCku22NFl/5ldNAOoCROS8j64uSNaInHUuvz2IOe4 ysm394rpFf1+mkuuSvQVwwEFz+6GMIzgg5Gyc8xAP9ZKEvNcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ0uC0h5GuATpyMQWhOlg1GO8m7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmExZjNhNWItOTQ5ZC0z MmUwLTljYWEtNDQyNDY0YmI2NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjz2hdbFhPTjM6/yBH6sCMiFFWLGhgZ154kSGvztJZYcSSKSov89gMG q6izGBlqhLnyqi8FiOG7NIexowKpVostQWwEAzpO9D4fcr2Ux4CfXF5QQi252Mx5 zvPLorS9Sp0+L5leSyz1Xs5qXt0XA2X5gGiEi2k+vyL6cHiTVou38xZHw0xKSkkr 79Mizqc2EG7AGk/8o10PoTeOw18JKhT7oIdg/VReCSRqB+ql/CzZykHnxYvpdQ8r hotHwE0cy/NQ/dVb9I03jKThE3csopahf0VIPRb6el37mzqlM1ilkpy2CKM0TA8D K2ClypePThr54qEiBsCoethxc2f11/o= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:16 2025 by rpki-client