$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33f1ffb7-b0ac-3447-b6c6-7af3ddfba18c.roa File: 33f1ffb7-b0ac-3447-b6c6-7af3ddfba18c.roa (raw, json) Hash identifier: X1yrNvHJI3cqq4KY5ET6u1GlrN//EHg0MJ4NsmMzJvA= Subject key identifier: 6D:25:C2:37:AC:92:D6:78:71:0D:B6:55:55:36:C3:BE:90:9E:54:C3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B973C946E3A0417B47CF95980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33f1ffb7-b0ac-3447-b6c6-7af3ddfba18c.roa Signing time: Tue 21 Oct 2025 02:36:49 +0000 ROA not before: Tue 21 Oct 2025 02:36:49 +0000 ROA not after: Mon 19 Jan 2026 03:36:49 +0000 asID: 15169 IP address blocks: 104.134.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:3c:94:6e:3a:04:17:b4:7c:f9:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 21 02:36:49 2025 GMT Not After : Jan 19 03:36:49 2026 GMT Subject: CN=a2891c9d-2292-4d47-997c-e8ab321be56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:40:e1:06:ce:2a:31:1e:0e:97:15:aa:4f: 78:06:92:6d:39:41:80:50:7c:2f:50:50:d2:20:4e: 81:cc:85:ba:28:c3:24:41:73:a0:47:2a:67:56:54: fe:57:f7:7e:27:c9:ce:c6:14:0f:13:78:d0:35:c6: be:be:5a:77:71:b2:5e:b2:77:18:0b:c3:21:88:e4: 42:84:75:e7:cf:7e:28:c8:10:a3:21:fa:24:f9:85: 16:69:87:0f:4e:06:ba:d3:de:8e:89:f3:fe:b6:31: 5d:91:95:03:ee:cf:ea:86:80:7c:ee:71:f2:16:be: d7:51:cc:56:63:d4:4f:08:57:00:66:33:86:e5:5c: 4d:19:7c:c9:59:3d:dd:e2:cb:4f:6d:36:24:f3:3b: c6:cf:4b:eb:a5:c7:cd:91:7f:b5:ad:bb:93:0b:ad: 8c:c1:18:ea:8c:af:9e:00:79:5c:4b:84:7b:47:83: a6:94:0b:b2:0a:4e:b4:ca:81:df:4c:25:d0:6d:16: 57:a0:6e:98:84:6e:c4:5a:14:a7:88:84:ea:67:c0: 4a:14:9a:ef:e7:d6:12:d4:4a:2f:0a:ad:b5:71:88: aa:ea:0f:a3:c8:5e:62:93:9f:e9:be:29:39:d6:7b: 33:e2:74:cd:a3:37:ab:bd:3a:a2:09:32:b7:46:01: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:25:C2:37:AC:92:D6:78:71:0D:B6:55:55:36:C3:BE:90:9E:54:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33f1ffb7-b0ac-3447-b6c6-7af3ddfba18c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6e:cb:d7:b3:5b:c9:d7:9c:0d:eb:d0:9b:18:04:08:9a:2c: 41:da:94:6b:7f:f3:14:e9:34:91:36:7a:e6:5a:e0:fb:4f:90: 42:ee:c8:9b:64:83:1a:b7:c4:3b:68:41:dc:5f:96:9a:25:af: a1:9e:97:3d:0d:06:68:75:67:eb:28:09:c6:f1:46:2f:86:71: cd:e5:14:59:ce:9d:c1:e2:01:6f:b3:c0:a6:40:c1:e9:98:0d: fe:0c:96:38:e2:97:be:be:f9:3e:31:f0:49:0e:c6:97:5c:53: cf:75:a9:8e:0e:c9:67:23:b9:87:fa:52:d6:a3:ed:4e:1a:96: 01:0d:6c:ad:0f:b4:58:b7:e0:54:a3:c6:12:14:7c:35:d2:e0: 17:aa:10:13:4a:d4:0e:dd:d7:e7:66:29:2d:87:cf:c1:49:bd: 72:9b:11:11:59:a9:96:a8:97:8c:30:62:4e:72:6a:8b:e9:2d: 0e:36:64:f1:ac:ac:ec:7e:06:e2:75:ac:ff:27:3e:f5:45:c6: 57:d8:14:21:50:49:7d:f7:44:24:02:68:96:0a:40:a0:2d:94: a0:d2:fc:f1:34:af:58:2c:75:57:3f:3e:67:e2:3f:29:83:52: e6:bc:95:f0:8e:75:ab:ed:f7:df:33:94:c2:fc:3e:31:22:86: 8f:15:28:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXPJRuOgQXtHz5WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAyMTAyMzY0OVoXDTI2MDExOTAzMzY0OVowLzEtMCsGA1UEAxMk YTI4OTFjOWQtMjI5Mi00ZDQ3LTk5N2MtZThhYjMyMWJlNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzVA4QbOKjEeDpcVqk94BpJtOUGAUHwvUFDS IE6BzIW6KMMkQXOgRypnVlT+V/d+J8nOxhQPE3jQNca+vlp3cbJesncYC8MhiORC hHXnz34oyBCjIfok+YUWaYcPTga6096OifP+tjFdkZUD7s/qhoB87nHyFr7XUcxW Y9RPCFcAZjOG5VxNGXzJWT3d4stPbTYk8zvGz0vrpcfNkX+1rbuTC62MwRjqjK+e AHlcS4R7R4OmlAuyCk60yoHfTCXQbRZXoG6YhG7EWhSniITqZ8BKFJrv59YS1Eov Cq21cYiq6g+jyF5ik5/pvik51nsz4nTNozervTqiCTK3RgEgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0lwjesktZ4cQ22VVU2w76QnlTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzNmMWZmYjctYjBhYy0z NDQ3LWI2YzYtN2FmM2RkZmJhMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJuy9ezW8nXnA3r0JsYBAiaLEHalGt/8xTpNJE2euZa4PtPkELuyJtk gxq3xDtoQdxflpolr6Gelz0NBmh1Z+soCcbxRi+Gcc3lFFnOncHiAW+zwKZAwemY Df4Mljjil76++T4x8EkOxpdcU891qY4OyWcjuYf6Utaj7U4algENbK0PtFi34FSj xhIUfDXS4BeqEBNK1A7d1+dmKS2Hz8FJvXKbERFZqZaol4wwYk5yaovpLQ42ZPGs rOx+BuJ1rP8nPvVFxlfYFCFQSX33RCQCaJYKQKAtlKDS/PE0r1gsdVc/PmfiPymD Uua8lfCOdavt998zlML8PjEiho8VKK8= -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:25 2025 by rpki-client