$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa File: d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa (raw, json) Hash identifier: czNUrOTpY9BCkwRsuEI8QSiop/AfMN5AeTgfM/SjIao= Subject key identifier: F8:EF:75:AA:B9:12:F6:39:D4:96:D2:33:75:E9:62:F0:CE:4B:72:6B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7E8D99C1BB23D8609A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7e:8d:99:c1:bb:23:d8:60:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=56b269e9-ee86-4a2a-a1e6-ce50c932b93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:2e:9d:91:af:30:2f:21:96:89:ff:8a:96: 08:fa:f5:a0:ff:55:6b:35:5b:e9:b2:7e:6e:91:6d: a4:90:b7:35:10:8d:ed:ff:ca:46:ac:61:5d:18:84: 0f:58:4d:03:3c:70:af:59:19:84:de:59:f2:79:aa: 57:f2:81:17:e7:fa:de:60:58:bc:31:b7:a8:33:32: af:f8:25:9d:4d:84:c2:d1:bf:e9:bb:6c:8e:c7:e6: 85:88:52:29:e2:b4:5f:b2:39:5f:65:0d:65:30:06: 25:90:56:59:41:10:0f:73:ef:9b:fb:a5:f3:c5:b9: bf:14:06:7f:10:12:3b:a2:68:b8:36:58:8e:9d:25: f4:92:dc:04:cc:ec:fe:61:50:76:39:a1:3a:78:2a: 1f:57:90:67:ae:cd:e8:3b:d5:01:f4:b8:88:fa:f5: 18:82:01:ed:22:1b:06:6d:a5:30:60:86:43:77:02: ef:17:ec:eb:b3:f4:cf:1f:b7:01:fa:57:1a:71:b2: 50:4a:92:c4:8a:73:38:a6:e5:49:b1:34:65:2d:74: fc:b0:24:91:9a:29:b7:6e:b0:31:05:a5:34:ae:b6: 70:9f:19:84:f2:cd:48:16:31:31:e5:1b:37:3c:c7: 1b:09:9c:3f:f0:63:93:8a:75:28:ea:7b:f9:b2:e6: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EF:75:AA:B9:12:F6:39:D4:96:D2:33:75:E9:62:F0:CE:4B:72:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f2:57:ed:04:8f:29:7e:74:ad:41:69:99:28:56:f1:4a:8f: 98:a0:d5:ab:72:44:21:45:7a:62:4d:9d:1d:19:f6:31:b0:df: 71:3f:f2:6e:a5:7d:bd:6b:f6:71:3d:2a:78:dd:ed:3b:8f:89: 6a:36:78:5d:22:ca:18:44:b3:7a:5a:79:11:d3:b5:4e:2e:55: 74:6a:18:fb:e8:29:81:dd:21:45:f3:e9:c4:bf:2c:81:54:5e: 72:fa:6e:4e:eb:e6:63:d3:2b:f9:a2:c7:19:b6:cb:2e:7b:b4: 79:af:ad:c3:7c:cc:a2:1f:ad:c7:4e:eb:4c:4e:7a:9c:11:86: 0c:ab:39:6e:42:d1:e3:54:fb:60:05:c5:64:ed:01:e7:fb:ea: e5:31:5a:17:4f:4e:1a:81:7b:9f:d8:28:db:7f:34:a9:56:13: ea:42:29:06:82:6b:99:58:5a:ad:29:f5:05:b6:b9:b6:e7:3b: 11:d5:74:80:c7:f4:26:4b:b4:05:c7:dd:36:2e:d2:ca:d4:a9: 4a:bc:65:98:0e:8a:64:76:50:3d:57:49:be:87:3f:8a:17:47: 94:1f:23:94:87:66:81:2f:ce:da:c9:f3:af:76:be:65:cd:f2: ae:2f:09:e8:db:09:31:5d:44:6c:6f:c4:89:cc:95:e1:59:e5: a1:da:0d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDH6NmcG7I9hgmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NTZiMjY5ZTktZWU4Ni00YTJhLWExZTYtY2U1MGM5MzJiOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmgunZGvMC8hlon/ipYI+vWg/1VrNVvpsn5u kW2kkLc1EI3t/8pGrGFdGIQPWE0DPHCvWRmE3lnyeapX8oEX5/reYFi8MbeoMzKv +CWdTYTC0b/pu2yOx+aFiFIp4rRfsjlfZQ1lMAYlkFZZQRAPc++b+6Xzxbm/FAZ/ EBI7omi4NliOnSX0ktwEzOz+YVB2OaE6eCofV5Bnrs3oO9UB9LiI+vUYggHtIhsG baUwYIZDdwLvF+zrs/TPH7cB+lcacbJQSpLEinM4puVJsTRlLXT8sCSRmim3brAx BaU0rrZwnxmE8s1IFjEx5Rs3PMcbCZw/8GOTinUo6nv5subrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjvdaq5EvY51JbSM3XpYvDOS3JrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDQ4ZWQ4NzItZDZhNC0z ZjNmLWJjYzMtNGRlNGQyZTcxNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHyV+0Ejyl+dK1BaZkoVvFKj5ig1atyRCFFemJNnR0Z9jGw33E/8m6l fb1r9nE9Knjd7TuPiWo2eF0iyhhEs3paeRHTtU4uVXRqGPvoKYHdIUXz6cS/LIFU XnL6bk7r5mPTK/mixxm2yy57tHmvrcN8zKIfrcdO60xOepwRhgyrOW5C0eNU+2AF xWTtAef76uUxWhdPThqBe5/YKNt/NKlWE+pCKQaCa5lYWq0p9QW2ubbnOxHVdIDH 9CZLtAXH3TYu0srUqUq8ZZgOimR2UD1XSb6HP4oXR5QfI5SHZoEvztrJ8692vmXN 8q4vCejbCTFdRGxvxInMleFZ5aHaDfU= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:29 2025 by rpki-client