$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa File: 41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa (raw, json) Hash identifier: 4cCiUllsNLgCQsKp/X44I3LsiuApl4fA1ceIaJrLZLI= Subject key identifier: 88:8D:29:C7:1C:EE:A8:72:8C:79:07:9F:97:43:E2:90:4D:72:35:A1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141ED82B1037657187A6F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ed:82:b1:03:76:57:18:7a:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=4a3ff259-e6ce-4088-b4e6-7461a4dd9b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:ae:30:06:1e:f4:ff:93:d6:d4:0d:81:1e: 95:d5:59:4c:5d:b5:30:b6:cb:d9:f6:9d:e6:76:48: 87:0d:59:70:23:ed:fa:9e:a7:61:15:6c:2c:81:85: a7:62:79:71:b8:eb:3f:e6:8f:3f:49:a7:ca:41:e4: e6:7a:62:bf:cf:a3:dd:e7:03:9c:27:0b:c1:7b:e5: 1d:2c:cf:d5:22:01:14:f7:ab:ff:c8:0b:b1:64:fe: ad:28:20:f1:f0:14:70:96:09:f7:a8:61:20:c3:5f: 4f:5c:64:aa:0a:cf:fd:6e:c3:58:31:33:82:63:f4: 0c:71:ba:be:7c:ad:c4:26:3c:08:ce:45:ed:27:7f: 29:07:bb:2d:c7:a5:b2:9d:ec:b7:f5:ef:8d:71:d9: 36:21:c3:1e:8f:26:65:bc:25:74:f9:e9:ff:00:14: d4:96:70:14:61:0d:76:85:38:ef:0e:8e:73:c3:0c: 7c:59:35:99:90:85:85:8d:a3:ce:98:a9:77:e6:fa: 0a:bf:a7:84:ee:9c:e6:99:f4:23:1a:c6:a0:fd:4a: 4e:54:53:78:78:e1:51:f9:1e:dc:34:7d:5a:c3:f6: 16:fa:67:d3:7b:54:db:8f:7d:3a:da:0e:21:0e:f1: b0:55:18:33:6c:84:36:a7:2f:e5:17:9d:c8:b2:17: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8D:29:C7:1C:EE:A8:72:8C:79:07:9F:97:43:E2:90:4D:72:35:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e3:0a:16:ae:e9:0a:03:25:3b:9b:dd:4d:c9:8d:3e:10:2e: 2f:b2:0c:bb:89:97:86:8c:8d:2c:3e:06:e2:09:61:b2:90:71: 9f:b3:95:bd:0c:44:94:84:69:19:e8:40:10:9c:82:71:a7:c1: ab:dc:83:5e:58:56:84:a3:03:14:39:63:8e:37:cd:f5:90:70: 7e:91:a3:18:8b:30:d0:db:26:af:3c:57:1a:7f:a0:e6:6c:f0: fc:d5:36:ff:28:ba:c9:ab:ef:bb:e8:58:2d:87:e2:bb:52:48: 31:aa:85:d6:4a:d8:07:41:0e:99:e3:bd:2a:41:4b:9c:fe:12: d1:58:86:15:e6:25:6b:84:28:c6:e7:f8:d6:d1:b2:d8:c7:ef: a7:98:37:2b:b3:c8:eb:92:da:09:d5:73:0b:33:72:84:01:07: f6:48:84:cb:b9:7c:b8:ac:8e:71:f6:a2:3e:03:eb:63:1e:d4: a9:16:77:6d:1d:d8:df:47:1a:41:e0:c0:70:07:77:a5:a5:85: d0:c4:f5:7a:40:46:55:ac:b2:7f:76:9c:ca:cd:c8:77:cf:3b: 6b:18:17:96:49:46:3b:60:bb:2d:66:b1:11:2b:6d:2f:e8:6e: d2:6e:b5:24:5e:4f:30:83:88:8e:d8:56:fc:4e:89:6f:14:fa: 77:8c:11:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe2CsQN2Vxh6bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NGEzZmYyNTktZTZjZS00MDg4LWI0ZTYtNzQ2MWE0ZGQ5YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2iuMAYe9P+T1tQNgR6V1VlMXbUwtsvZ9p3m dkiHDVlwI+36nqdhFWwsgYWnYnlxuOs/5o8/SafKQeTmemK/z6Pd5wOcJwvBe+Ud LM/VIgEU96v/yAuxZP6tKCDx8BRwlgn3qGEgw19PXGSqCs/9bsNYMTOCY/QMcbq+ fK3EJjwIzkXtJ38pB7stx6Wyney39e+Ncdk2IcMejyZlvCV0+en/ABTUlnAUYQ12 hTjvDo5zwwx8WTWZkIWFjaPOmKl35voKv6eE7pzmmfQjGsag/UpOVFN4eOFR+R7c NH1aw/YW+mfTe1Tbj3062g4hDvGwVRgzbIQ2py/lF53IshdvOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiNKccc7qhyjHkHn5dD4pBNcjWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFjZjBiNjctNTcwYS0z MGQ2LWI4Y2MtZTg0ZmJkYjE2MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnjChau6QoDJTub3U3JjT4QLi+yDLuJl4aMjSw+BuIJYbKQcZ+zlb0M RJSEaRnoQBCcgnGnwavcg15YVoSjAxQ5Y443zfWQcH6RoxiLMNDbJq88Vxp/oOZs 8PzVNv8ousmr77voWC2H4rtSSDGqhdZK2AdBDpnjvSpBS5z+EtFYhhXmJWuEKMbn +NbRstjH76eYNyuzyOuS2gnVcwszcoQBB/ZIhMu5fLisjnH2oj4D62Me1KkWd20d 2N9HGkHgwHAHd6WlhdDE9XpARlWssn92nMrNyHfPO2sYF5ZJRjtguy1msRErbS/o btJutSReTzCDiI7YVvxOiW8U+neMEYU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:41:27 2025 by rpki-client