$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa File: eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa (raw, json) Hash identifier: 0yHm+CpO6iz4E+0GnqPGa6ouElYuZEHIQCuFBLAY5+o= Subject key identifier: D3:41:45:C7:31:02:20:4D:69:4C:F2:87:4C:DD:8D:9B:7D:55:A9:D9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C73EA16F2A2C457C63740 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:73:ea:16:f2:a2:c4:57:c6:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=0c03fada-8eb4-49bd-b1ae-d074734f64f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:1e:bf:ae:7f:f7:df:df:93:76:3f:50:1a: 55:05:3e:8d:75:07:e5:b3:86:98:7f:68:27:43:e3: 15:dc:1c:36:45:b6:86:77:b7:b0:66:be:72:40:30: b1:db:91:1e:47:fa:15:16:29:c2:da:44:13:b2:90: 8c:a8:96:74:9a:17:09:b6:f6:1e:9d:29:d2:71:25: 8c:d3:17:57:83:13:b4:c4:7b:db:6c:29:e6:b6:2e: 2d:ea:e4:db:99:5c:9a:bc:ee:49:b3:4a:57:4f:ae: 8f:b9:ab:29:29:93:a2:4e:bb:18:0e:08:50:8f:ec: 3a:55:ac:59:61:ba:04:65:fc:31:33:a1:fb:ed:5d: 77:f1:3b:dc:37:c0:b0:ce:ea:bf:5c:ce:3c:44:96: 74:97:cf:4a:0f:3e:90:62:9d:ce:e6:b6:68:92:9a: a0:3d:58:53:14:3a:f5:d3:de:31:59:90:60:44:ea: 88:fc:1e:b9:ac:0c:c3:ee:d4:db:b9:11:cb:5c:68: a7:e1:69:a4:86:f9:4e:8f:6b:d2:ce:fd:d1:12:82: 49:ab:0a:3b:51:c9:d3:76:bf:57:9d:09:85:fe:d3: 48:14:f2:c1:92:25:9a:38:a3:d9:38:e3:03:4b:16: a4:33:dc:03:a0:c2:9d:73:a3:8a:06:f8:c3:49:f1: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:45:C7:31:02:20:4D:69:4C:F2:87:4C:DD:8D:9B:7D:55:A9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9d:dd:fb:2b:23:4b:a9:23:a1:cf:13:96:be:03:c4:9f:69: 27:0e:f9:d2:87:47:e8:f1:c4:b1:54:fd:7d:40:bb:c8:08:c4: fc:89:71:6d:cd:89:5c:f0:dd:9f:27:ef:c6:8a:39:97:cf:92: 73:78:92:29:03:25:30:dd:47:48:2e:5c:98:b6:13:3d:a5:7c: 6c:ac:aa:16:1c:4c:e0:86:c6:2d:97:17:bf:38:d0:57:4c:38: 63:b4:cc:13:60:2d:e2:05:93:be:01:ca:d4:af:d1:70:79:3c: 68:28:30:2f:3f:4c:68:9d:84:0e:7a:0e:e9:0f:cb:6a:27:66: cc:ab:fc:e8:80:94:7a:3b:44:64:27:c0:00:0a:0d:8e:8b:24: 38:49:ad:19:8f:19:34:8c:42:91:65:7b:c4:57:47:89:4e:45: 6a:94:5c:a6:c7:c6:38:68:17:95:e2:48:18:8c:5f:7f:0e:0b: ff:d1:7c:99:3c:8d:a3:98:73:a3:99:19:8f:c4:1d:56:99:e8: 42:fe:38:65:08:ac:1e:1c:4b:f6:dd:f8:d5:93:e1:05:5d:42: 97:79:aa:55:d4:16:4b:66:b3:3b:7f:89:c5:0d:14:d5:79:44: 8d:d0:46:ee:21:74:d0:8d:7c:02:e7:5f:d7:d7:94:e5:7b:99: c1:10:32:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHPqFvKixFfGN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MGMwM2ZhZGEtOGViNC00OWJkLWIxYWUtZDA3NDczNGY2NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+cev65/99/fk3Y/UBpVBT6NdQfls4aYf2gn Q+MV3Bw2RbaGd7ewZr5yQDCx25EeR/oVFinC2kQTspCMqJZ0mhcJtvYenSnScSWM 0xdXgxO0xHvbbCnmti4t6uTbmVyavO5Js0pXT66PuaspKZOiTrsYDghQj+w6VaxZ YboEZfwxM6H77V138TvcN8Cwzuq/XM48RJZ0l89KDz6QYp3O5rZokpqgPVhTFDr1 094xWZBgROqI/B65rAzD7tTbuRHLXGin4WmkhvlOj2vSzv3REoJJqwo7UcnTdr9X nQmF/tNIFPLBkiWaOKPZOOMDSxakM9wDoMKdc6OKBvjDSfHiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNBRccxAiBNaUzyh0zdjZt9VanZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWI3ZWFmN2YtZjQyNC0z MGU5LTk3ZmEtOTNlOGIyZmEzNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIad3fsrI0upI6HPE5a+A8SfaScO+dKHR+jxxLFU/X1Au8gIxPyJcW3N iVzw3Z8n78aKOZfPknN4kikDJTDdR0guXJi2Ez2lfGysqhYcTOCGxi2XF7840FdM OGO0zBNgLeIFk74BytSv0XB5PGgoMC8/TGidhA56DukPy2onZsyr/OiAlHo7RGQn wAAKDY6LJDhJrRmPGTSMQpFle8RXR4lORWqUXKbHxjhoF5XiSBiMX38OC//RfJk8 jaOYc6OZGY/EHVaZ6EL+OGUIrB4cS/bd+NWT4QVdQpd5qlXUFktmszt/icUNFNV5 RI3QRu4hdNCNfALnX9fXlOV7mcEQMp4= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:20 2025 by rpki-client