$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa File: 3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa (raw, json) Hash identifier: QPW4hz3ytOfiQUGjTo7+T3FHHeF1WJAqcYE3HacBQ8g= Subject key identifier: DE:8D:32:E0:52:DE:4E:59:2D:08:A7:BD:E6:D7:3B:A0:8C:23:52:79 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7D29FFBB8037E0657000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7d:29:ff:bb:80:37:e0:65:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=0b6fb96d-5e5b-46fa-becf-9780b4a9b5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:81:e4:74:a8:c1:cc:e7:aa:85:01:c3:2d:08: 79:7d:70:24:66:25:fe:f9:bb:6b:87:3b:dc:4d:b9: 76:bc:f9:5b:07:a2:43:a7:96:72:65:98:55:a2:b6: 5b:0e:ea:ad:6f:3d:40:cd:33:54:d7:35:e8:d5:ef: ce:4d:fd:f3:15:36:41:a9:49:30:12:42:2f:03:70: 13:8f:55:d3:63:4b:ed:49:eb:58:88:0e:6d:f4:f3: c4:8c:05:55:83:a4:44:56:a8:98:80:1a:19:9e:62: 97:50:1b:db:a6:e2:ea:d0:6a:5a:11:ef:4a:76:96: 25:a9:93:90:e2:1a:fb:01:2c:08:8c:3f:e5:ec:39: 0a:a2:f3:6d:f7:7f:d2:98:7e:90:79:28:8e:29:39: 1d:d0:8b:ba:4f:a7:2c:c4:80:74:99:df:3c:8b:c2: 4d:13:72:fe:30:35:b8:d4:54:ad:cb:97:c5:75:93: 6b:e5:f8:1f:ae:54:6f:48:a1:3c:b7:5c:f9:44:96: b1:b7:c0:6e:73:6f:00:54:03:b8:ee:9a:48:08:d6: 07:aa:9d:eb:e7:ea:60:b3:16:c2:c9:8e:ab:ce:85: b7:0b:be:26:1a:9e:dd:1b:ae:84:57:05:35:f2:77: 99:d5:6e:e4:aa:9e:38:3a:31:cf:5d:34:8e:21:48: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8D:32:E0:52:DE:4E:59:2D:08:A7:BD:E6:D7:3B:A0:8C:23:52:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aeaae68-a561-366d-b5e3-2c1ba683bcbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ae:20:d1:d9:cd:7b:43:70:28:22:fc:95:12:6f:99:c0:f4: f7:74:7b:aa:45:14:9b:90:68:e4:73:39:a3:e9:6e:79:0a:f3: bf:d0:df:82:ec:0a:01:61:b9:b5:46:40:a0:1f:2c:8e:84:85: 85:20:63:c9:7d:b0:e9:3f:90:e2:73:85:f0:ec:e0:c4:4d:9f: e6:e2:c6:f8:16:63:77:47:c6:82:cb:87:d9:61:fa:94:eb:2b: 64:cf:82:03:74:85:58:59:f4:84:8b:5c:84:4e:cd:9a:bc:21: 87:f5:8f:2e:df:02:2f:07:9c:17:bc:fd:74:94:06:37:50:70: 7b:e7:e5:90:22:44:d7:b0:7d:78:65:5b:da:a5:16:1b:4a:6d: 0d:48:09:f1:5c:83:46:75:36:cb:80:54:41:d3:b1:95:f5:c3: 3a:8a:7a:e2:e4:f4:1b:29:29:23:26:3a:95:8f:58:6f:89:2d: 76:35:2e:4f:bf:43:5e:96:12:cd:1a:35:1d:05:db:9d:00:b9: 5e:83:de:4c:4a:af:11:7a:2b:ca:d5:b6:47:0b:5a:16:8a:a7: c2:f9:2a:15:43:13:65:6b:c5:77:30:cd:e3:2b:8d:85:5d:c4: 18:ba:5b:ef:c4:d7:58:14:37:3a:d5:b1:50:0e:37:50:a4:a9: a6:d4:d1:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDH0p/7uAN+BlcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MGI2ZmI5NmQtNWU1Yi00NmZhLWJlY2YtOTc4MGI0YTliNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIHkdKjBzOeqhQHDLQh5fXAkZiX++btrhzvc Tbl2vPlbB6JDp5ZyZZhVorZbDuqtbz1AzTNU1zXo1e/OTf3zFTZBqUkwEkIvA3AT j1XTY0vtSetYiA5t9PPEjAVVg6REVqiYgBoZnmKXUBvbpuLq0GpaEe9KdpYlqZOQ 4hr7ASwIjD/l7DkKovNt93/SmH6QeSiOKTkd0Iu6T6csxIB0md88i8JNE3L+MDW4 1FSty5fFdZNr5fgfrlRvSKE8t1z5RJaxt8Buc28AVAO47ppICNYHqp3r5+pgsxbC yY6rzoW3C74mGp7dG66EVwU18neZ1W7kqp44OjHPXTSOIUhiewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6NMuBS3k5ZLQinvebXO6CMI1J5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2FlYWFlNjgtYTU2MS0z NjZkLWI1ZTMtMmMxYmE2ODNiY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuuINHZzXtDcCgi/JUSb5nA9Pd0e6pFFJuQaORzOaPpbnkK87/Q34Ls CgFhubVGQKAfLI6EhYUgY8l9sOk/kOJzhfDs4MRNn+bixvgWY3dHxoLLh9lh+pTr K2TPggN0hVhZ9ISLXIROzZq8IYf1jy7fAi8HnBe8/XSUBjdQcHvn5ZAiRNewfXhl W9qlFhtKbQ1ICfFcg0Z1NsuAVEHTsZX1wzqKeuLk9BspKSMmOpWPWG+JLXY1Lk+/ Q16WEs0aNR0F250AuV6D3kxKrxF6K8rVtkcLWhaKp8L5KhVDE2VrxXcwzeMrjYVd xBi6W+/E11gUNzrVsVAON1CkqabU0TI= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:33 2025 by rpki-client