$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa File: d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa (raw, json) Hash identifier: xd8tCvWDCo1rLw2HZj5HbU8DZMgMQjV+x8mCmcDdZAs= Subject key identifier: 0B:A9:3F:94:60:CB:A5:91:15:D8:E2:E9:83:ED:7E:36:44:22:95:61 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7F88A0127BDA847B5A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7f:88:a0:12:7b:da:84:7b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c1331665-8ccd-47e3-bb40-7b435d76223b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:84:b0:d9:9b:1e:3f:77:3d:f6:45:7a:cc: 19:fe:64:60:ec:c4:b9:12:68:73:fa:6b:1b:5d:c7: ca:3b:2a:28:ea:c5:68:69:43:ff:b4:98:de:d2:84: 4b:56:09:96:06:97:ad:4a:17:98:22:ec:dd:59:de: 6f:89:be:04:0c:d2:1d:c5:14:2c:7a:76:4c:53:36: 9e:e2:b9:bd:54:89:c4:d6:cb:a4:8a:cd:75:3b:90: 2e:ec:a9:d3:03:b5:0c:9b:3f:dd:8d:f7:63:cb:51: b1:18:7e:43:c0:7e:ce:90:37:11:0a:a6:de:a7:67: fd:41:b2:fa:3c:95:21:db:c8:f7:8d:0b:34:d8:a8: d9:0e:2b:cd:02:50:e9:52:1b:fc:9c:56:45:42:6c: 90:37:42:6e:25:d5:b3:a4:06:ed:56:65:2f:89:65: 41:00:04:54:21:7b:6e:9d:5d:17:f7:65:a6:b0:ee: 68:23:6f:02:10:b4:e8:33:2c:95:35:c3:65:55:53: da:a3:ff:3a:c5:33:46:64:ca:35:af:37:a1:f3:a5: 35:d7:71:d7:b8:20:e0:e7:fd:8b:bc:a3:17:74:f9: fe:b1:46:5b:c2:e0:9a:93:88:cb:bf:14:ab:7a:6b: b3:a6:77:50:71:81:e8:22:85:54:30:26:cd:f5:45: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A9:3F:94:60:CB:A5:91:15:D8:E2:E9:83:ED:7E:36:44:22:95:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1a:24:19:0a:19:b4:7a:f3:ab:b9:b5:f7:7c:94:26:3b:48: 3d:56:2c:59:af:14:dd:b8:43:1d:8c:30:47:9b:77:ec:3b:bf: 10:c1:a4:9f:3f:ab:4d:48:07:aa:fc:c5:00:f6:51:91:75:a0: 11:c2:2d:66:80:4a:e9:66:96:39:bf:09:85:a8:d0:72:f3:5e: d8:db:5e:e3:20:15:52:f2:46:38:ca:6b:9d:a1:25:40:36:0b: 1b:35:2a:43:c1:d9:6b:d1:41:1f:ed:86:18:2b:c8:66:65:c2: 1b:59:d0:5b:ab:d2:a2:c1:8b:b6:10:38:92:f8:ce:fa:e6:8b: b5:86:cc:a3:6d:91:2e:56:7b:2d:3f:60:13:dc:55:7b:d1:8c: 58:c6:de:66:47:db:89:f4:97:26:11:ef:1b:93:a2:07:63:fd: 10:58:bf:38:7a:44:46:7c:39:65:02:61:e1:f2:23:12:cf:f2: 8d:89:5f:56:8f:c8:84:50:eb:ab:2f:a5:76:a1:cb:13:a1:a1: 22:d4:f4:c2:03:e3:ec:c4:39:7b:83:c0:a5:3b:f2:23:f6:0e: 97:27:bf:0d:cb:ce:bf:c5:01:83:df:e5:3a:8c:7d:85:a9:c8: 26:6b:cf:16:80:9a:ea:92:f1:ee:3b:a3:95:5a:79:56:76:de: 14:35:a5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDH+IoBJ72oR7WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzEzMzE2NjUtOGNjZC00N2UzLWJiNDAtN2I0MzVkNzYyMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT+EsNmbHj93PfZFeswZ/mRg7MS5Emhz+msb XcfKOyoo6sVoaUP/tJje0oRLVgmWBpetSheYIuzdWd5vib4EDNIdxRQsenZMUzae 4rm9VInE1sukis11O5Au7KnTA7UMmz/djfdjy1GxGH5DwH7OkDcRCqbep2f9QbL6 PJUh28j3jQs02KjZDivNAlDpUhv8nFZFQmyQN0JuJdWzpAbtVmUviWVBAARUIXtu nV0X92WmsO5oI28CELToMyyVNcNlVVPao/86xTNGZMo1rzeh86U113HXuCDg5/2L vKMXdPn+sUZbwuCak4jLvxSremuzpndQcYHoIoVUMCbN9UVpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAupP5Rgy6WRFdji6YPtfjZEIpVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDFjOGI0YmUtMmM1YS0z OGEzLWI1NmMtZTYzZWQ2NDJmOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcaJBkKGbR686u5tfd8lCY7SD1WLFmvFN24Qx2MMEebd+w7vxDBpJ8/ q01IB6r8xQD2UZF1oBHCLWaASulmljm/CYWo0HLzXtjbXuMgFVLyRjjKa52hJUA2 Cxs1KkPB2WvRQR/thhgryGZlwhtZ0Fur0qLBi7YQOJL4zvrmi7WGzKNtkS5Wey0/ YBPcVXvRjFjG3mZH24n0lyYR7xuTogdj/RBYvzh6REZ8OWUCYeHyIxLP8o2JX1aP yIRQ66svpXahyxOhoSLU9MID4+zEOXuDwKU78iP2Dpcnvw3Lzr/FAYPf5TqMfYWp yCZrzxaAmuqS8e47o5VaeVZ23hQ1pXM= -----END CERTIFICATE-----Generated at Thu Oct 9 20:04:36 2025 by rpki-client