$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa File: d6d3afbf-f6e2-312e-b299-feebdb230800.roa (raw, json) Hash identifier: panKiZP0TcI05T8XWN77gdACrNV/FjGiuwl2Ud4bt7o= Subject key identifier: B1:7F:66:77:AD:06:78:42:B9:02:6E:0D:A8:FF:4C:3A:8F:2C:21:FA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C74B21E6762521644DE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:74:b2:1e:67:62:52:16:44:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=a4b6e004-69a9-4d03-8e79-311770f48133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:20:cb:0c:5c:f6:f4:aa:ef:c6:4f:a2:13: a3:52:e5:cb:df:55:0b:c4:fe:e8:52:d7:e0:44:19: eb:86:1c:46:13:a9:8e:86:52:48:4c:97:87:70:f9: cc:5f:d1:09:b0:f7:31:d1:5a:82:18:fe:31:0d:13: b5:bd:a1:fc:12:3e:89:12:26:be:ee:ce:00:5a:9a: 0d:c8:bf:d8:d8:6b:55:c1:e6:c0:fa:b0:2e:68:f9: 17:f8:33:d0:b0:ec:88:07:56:9c:00:22:fb:ff:45: 02:ac:32:d9:a0:b8:fc:73:e4:56:76:02:9f:6f:c1: 04:fd:eb:5c:91:d5:e7:3f:2a:bf:cf:cd:b2:79:4d: 9e:03:aa:19:9a:56:92:a2:15:40:5e:c0:88:05:82: dd:fa:40:ea:73:db:ed:82:b4:b9:12:ae:28:00:f2: d8:49:69:d5:c9:d3:cf:57:7c:89:1b:d2:36:0e:28: 6b:b0:e0:c5:e2:11:66:13:df:c9:08:7c:df:3f:5a: cc:53:51:6e:4f:e9:23:31:f4:32:67:19:cb:6d:58: 2f:bf:b4:32:69:03:62:67:30:97:b3:ea:c1:ce:e6: 8a:c4:14:05:4d:b1:ec:6c:08:0c:31:d1:bf:fb:e0: 17:80:ec:59:15:32:6f:0f:71:a8:df:b3:e0:56:9d: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:66:77:AD:06:78:42:B9:02:6E:0D:A8:FF:4C:3A:8F:2C:21:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:dc:00:7a:e4:b4:a3:2d:89:8b:2d:8e:86:b2:b9:04:d0:de: 77:0f:33:f8:a1:b9:bf:7f:3c:74:0b:53:d5:1e:8e:75:e3:95: 62:05:59:ec:29:37:99:38:30:18:c9:27:bc:ca:88:46:c1:7c: c0:99:01:fc:a6:68:de:5a:bf:7e:3e:41:cf:ea:c4:8f:88:f6: 2b:85:10:e1:13:0c:a6:9f:f1:ba:06:3c:78:f4:6e:c5:c3:cc: 9b:d7:dd:44:94:c6:e5:39:2c:c8:95:1b:d5:5c:67:d1:f0:f9: 60:a0:6c:8c:1f:bc:90:84:cd:58:3c:0a:1e:a9:b5:79:21:ee: 95:ef:42:d3:0e:7e:e3:89:dc:d9:15:12:c8:fc:bb:24:2d:d8: 99:c6:79:f6:e8:ac:9d:62:eb:6b:b7:67:20:27:26:e8:31:cd: 31:a4:ef:7d:56:34:b1:dc:16:5d:fe:bf:89:16:8a:f6:0b:04: 3f:41:64:30:e8:b5:77:a9:b7:e2:05:a9:a4:f9:30:af:fa:a6: 89:e9:9e:04:f8:85:ce:6e:16:93:d5:b3:73:08:39:b3:e5:e6: 83:b1:18:24:47:57:42:dd:d9:22:63:d5:33:2b:0a:f4:a7:55: 87:02:5e:66:28:b0:23:38:ef:85:ae:ef:7e:79:96:39:fc:2f: b8:37:8c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHSyHmdiUhZE3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YTRiNmUwMDQtNjlhOS00ZDAzLThlNzktMzExNzcwZjQ4MTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcggywxc9vSq78ZPohOjUuXL31ULxP7oUtfg RBnrhhxGE6mOhlJITJeHcPnMX9EJsPcx0VqCGP4xDRO1vaH8Ej6JEia+7s4AWpoN yL/Y2GtVwebA+rAuaPkX+DPQsOyIB1acACL7/0UCrDLZoLj8c+RWdgKfb8EE/etc kdXnPyq/z82yeU2eA6oZmlaSohVAXsCIBYLd+kDqc9vtgrS5Eq4oAPLYSWnVydPP V3yJG9I2DihrsODF4hFmE9/JCHzfP1rMU1FuT+kjMfQyZxnLbVgvv7QyaQNiZzCX s+rBzuaKxBQFTbHsbAgMMdG/++AXgOxZFTJvD3Go37PgVp1IOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF/ZnetBnhCuQJuDaj/TDqPLCH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDZkM2FmYmYtZjZlMi0z MTJlLWIyOTktZmVlYmRiMjMwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7cAHrktKMtiYstjoayuQTQ3ncPM/ihub9/PHQLU9UejnXjlWIFWewp N5k4MBjJJ7zKiEbBfMCZAfymaN5av34+Qc/qxI+I9iuFEOETDKaf8boGPHj0bsXD zJvX3USUxuU5LMiVG9VcZ9Hw+WCgbIwfvJCEzVg8Ch6ptXkh7pXvQtMOfuOJ3NkV Esj8uyQt2JnGefborJ1i62u3ZyAnJugxzTGk731WNLHcFl3+v4kWivYLBD9BZDDo tXept+IFqaT5MK/6ponpngT4hc5uFpPVs3MIObPl5oOxGCRHV0Ld2SJj1TMrCvSn VYcCXmYosCM474Wu7355ljn8L7g3jCw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:39 2025 by rpki-client