$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa File: f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa (raw, json) Hash identifier: zGiXlJmXH2N9t16T5NTDL8B30aeKN7vtgiceEHaCSQI= Subject key identifier: 2B:E0:0A:2B:76:0D:63:DA:99:8A:04:55:87:68:49:B1:DB:34:64:61 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141EC8FCDD2AF5DB7625C20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ec:8f:cd:d2:af:5d:b7:62:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=d1e346e1-ba32-4cd3-83d5-8acf02a7f587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:3d:52:eb:9b:16:76:a4:79:28:0e:85:00: 90:30:92:c1:a1:2c:a2:74:f6:a5:5c:fb:9e:cf:27: a8:db:b3:c6:5b:12:ab:e6:91:18:ab:da:0b:38:1f: ca:4b:f6:11:c5:75:84:f4:ed:33:d3:fb:ab:2e:13: 52:d0:83:73:26:de:80:18:95:19:f6:6f:c8:4b:b9: 48:ad:b3:6f:c6:8e:5a:ab:2b:61:39:82:7f:cb:e7: e0:eb:cd:92:22:fd:04:bd:53:9f:2b:0f:46:ca:02: 32:fb:6f:a0:e6:04:0a:5d:a6:9b:ad:6e:2d:86:e7: a2:af:df:0a:c5:8f:f2:8d:cc:ab:2c:4f:ac:72:3f: 57:cc:80:ec:0a:54:e3:84:5c:a6:6b:93:07:8c:4b: 03:37:1f:1c:fd:bb:eb:27:d9:6b:5b:56:2d:2d:27: 42:50:74:33:85:b7:04:f9:4a:af:ec:89:60:a8:99: bb:df:c1:75:54:b3:85:cf:53:3c:15:14:3b:1a:bc: 22:68:c5:ac:59:d9:81:b3:da:06:12:49:7b:f9:a4: 85:7b:e5:21:e8:c4:26:85:b9:00:b4:74:de:3f:28: 59:b1:a3:46:ea:78:68:0c:9b:b5:c7:53:37:f7:07: 08:16:76:9f:40:1c:cc:b4:20:f9:52:ae:9a:d4:b7: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:0A:2B:76:0D:63:DA:99:8A:04:55:87:68:49:B1:DB:34:64:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4c8ef7a-d183-31eb-a02c-28f936c6e0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b4:f5:c3:eb:43:53:81:8c:19:a8:a1:dd:6f:ff:c5:5c:03: 25:1d:dd:5a:4a:bf:ef:78:8d:b6:7e:44:fa:ba:a3:0e:19:f7: b3:77:64:6d:ec:b4:ca:1b:5d:8c:6f:f3:ff:9c:cc:f4:ec:c6: 32:cb:1b:65:23:95:a4:b1:ce:ae:97:53:0c:12:e4:54:eb:11: 4c:bf:4e:07:f2:1c:60:2a:af:3b:5a:1f:f4:3c:99:18:15:c6: bb:bc:a3:c7:8e:01:33:e6:c9:d7:07:d0:10:06:86:63:fd:d0: 78:03:0d:ad:5c:bd:f3:d5:22:f4:e5:f0:b9:b2:01:b3:01:11: f4:2b:5f:20:3d:25:cf:b5:96:fe:0a:d2:5b:4b:09:b9:a6:ae: 65:96:40:0c:c3:af:c4:47:b5:e4:52:9b:4c:36:82:cf:f1:24: a4:82:cf:cd:b8:9a:33:35:87:0c:ba:f8:98:62:c7:e7:19:a9: 12:5a:a0:4d:c6:05:b5:ce:7f:e8:22:ea:ed:af:ed:54:ce:e6: 14:de:0c:4b:7b:a1:cb:19:fc:22:8b:d4:5d:8b:02:e5:6c:1d: 7d:90:4b:82:bc:1b:88:56:00:af:07:21:f3:f7:86:42:21:0c: d7:23:d1:d7:4a:cb:09:19:c6:b0:5d:ce:10:cd:c7:fd:3f:3a: a8:b8:a3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQeyPzdKvXbdiXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDFlMzQ2ZTEtYmEzMi00Y2QzLTgzZDUtOGFjZjAyYTdmNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QQ9UuubFnakeSgOhQCQMJLBoSyidPalXPue zyeo27PGWxKr5pEYq9oLOB/KS/YRxXWE9O0z0/urLhNS0INzJt6AGJUZ9m/IS7lI rbNvxo5aqythOYJ/y+fg682SIv0EvVOfKw9GygIy+2+g5gQKXaabrW4thueir98K xY/yjcyrLE+scj9XzIDsClTjhFyma5MHjEsDNx8c/bvrJ9lrW1YtLSdCUHQzhbcE +Uqv7IlgqJm738F1VLOFz1M8FRQ7GrwiaMWsWdmBs9oGEkl7+aSFe+Uh6MQmhbkA tHTePyhZsaNG6nhoDJu1x1M39wcIFnafQBzMtCD5Uq6a1LfQzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvgCit2DWPamYoEVYdoSbHbNGRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjRjOGVmN2EtZDE4My0z MWViLWEwMmMtMjhmOTM2YzZlMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi09cPrQ1OBjBmood1v/8VcAyUd3VpKv+94jbZ+RPq6ow4Z97N3ZG3s tMobXYxv8/+czPTsxjLLG2UjlaSxzq6XUwwS5FTrEUy/TgfyHGAqrztaH/Q8mRgV xru8o8eOATPmydcH0BAGhmP90HgDDa1cvfPVIvTl8LmyAbMBEfQrXyA9Jc+1lv4K 0ltLCbmmrmWWQAzDr8RHteRSm0w2gs/xJKSCz824mjM1hwy6+Jhix+cZqRJaoE3G BbXOf+gi6u2v7VTO5hTeDEt7ocsZ/CKL1F2LAuVsHX2QS4K8G4hWAK8HIfP3hkIh DNcj0ddKywkZxrBdzhDNx/0/Oqi4o/A= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:18 2025 by rpki-client