$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa File: 6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa (raw, json) Hash identifier: w3V2onZykmI9TQpjl8+gg0IzZOEN+FX08o9Lp4RU5ao= Subject key identifier: B8:19:AB:84:BD:04:03:34:89:A9:44:68:30:A2:F7:20:DC:FD:27:F3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B7DECBDB8AD6A2E9CA7ECDB80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 41264 IP address blocks: 104.133.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bd:b8:ad:6a:2e:9c:a7:ec:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=3d6e0a7a-0a80-4ff2-b4b6-08c717ecea32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f4:2b:d6:33:c3:22:71:75:12:89:16:7d:ac: 71:c5:c4:d6:da:d0:23:1c:07:8f:c4:9e:db:cb:34: 45:dd:88:88:c2:07:38:49:1a:4b:3f:0b:b9:3c:30: 01:97:8d:60:cb:24:73:73:c0:5a:81:63:28:c7:da: 6c:b3:b4:f1:52:62:31:67:c9:73:d8:16:07:9f:98: 5b:4f:93:0e:b6:ba:81:a1:31:3f:51:71:81:9e:aa: 21:8c:81:71:95:b1:ca:f0:82:c5:5f:03:84:08:97: 04:31:d3:87:93:37:60:8f:fd:34:99:1f:fe:6e:3e: 8a:0b:cd:bd:f2:0c:22:e5:99:a2:dd:1c:5d:a4:5e: 6d:ea:50:ad:b4:09:0d:43:4d:73:f3:94:60:41:29: f7:6a:ac:96:2e:6f:62:31:f7:c5:bf:c7:70:bc:69: 37:8b:29:bb:0e:d1:cf:52:42:2d:ea:ae:de:f9:ab: 2c:33:fb:cf:71:e2:27:ad:88:fa:b8:94:a6:92:ab: c8:c8:60:71:ba:e6:99:69:6f:20:64:81:9a:02:8b: 8b:b8:1a:48:c8:84:d7:99:26:fd:86:9e:d4:dc:3b: 50:b9:6d:64:a3:8f:28:10:ba:f6:4e:c2:3c:bd:d3: a1:73:72:65:6a:2d:8e:48:49:50:64:7a:7d:15:ee: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:AB:84:BD:04:03:34:89:A9:44:68:30:A2:F7:20:DC:FD:27:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5f:c0:41:76:9f:0f:c3:bf:e1:c4:d2:db:44:c5:2d:b6:69: 3a:81:40:d7:b9:8a:a6:45:86:0b:a0:76:ea:0d:37:da:d6:e5: e5:58:b7:58:a3:75:1e:cb:2c:8f:50:42:64:d5:3e:07:77:6f: 42:50:06:f8:7c:33:5c:40:b9:7b:64:e2:34:f4:c6:41:1b:38: 5d:81:62:e4:c8:fa:09:58:a2:b4:ce:ce:ca:1e:18:e8:ca:a3: 06:db:5e:f7:ee:16:1a:d5:08:a7:2b:7a:22:a8:81:8e:58:d9: 83:95:82:87:43:0a:ec:e2:76:95:ef:a6:c7:5d:bc:00:fd:6a: 35:ad:5a:4c:06:7a:fe:95:7c:66:06:1d:bb:0e:bb:86:21:6a: 6f:bb:22:70:10:c2:af:d4:85:43:b8:63:a0:c2:a8:a9:3b:5b: 98:50:bc:5c:a5:1e:80:23:ab:ac:5e:a5:95:65:c1:86:47:b9: 1e:32:2d:70:ef:5d:cd:65:14:52:71:46:2d:ae:8e:f0:8a:d4: c2:a2:ed:6b:09:00:ca:2b:3d:b5:35:5c:35:7b:4f:e1:f3:c1: 3f:9b:43:a5:72:cc:d1:28:ae:47:51:06:2a:75:78:5e:6e:ec: be:21:8c:d5:93:7d:aa:86:f8:a7:90:82:4c:d5:99:e8:a7:c9: 60:dc:01:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L24rWounKfs24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk M2Q2ZTBhN2EtMGE4MC00ZmYyLWI0YjYtMDhjNzE3ZWNlYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQr1jPDInF1EokWfaxxxcTW2tAjHAePxJ7b yzRF3YiIwgc4SRpLPwu5PDABl41gyyRzc8BagWMox9pss7TxUmIxZ8lz2BYHn5hb T5MOtrqBoTE/UXGBnqohjIFxlbHK8ILFXwOECJcEMdOHkzdgj/00mR/+bj6KC829 8gwi5Zmi3RxdpF5t6lCttAkNQ01z85RgQSn3aqyWLm9iMffFv8dwvGk3iym7DtHP UkIt6q7e+assM/vPceInrYj6uJSmkqvIyGBxuuaZaW8gZIGaAouLuBpIyITXmSb9 hp7U3DtQuW1ko48oELr2TsI8vdOhc3Jlai2OSElQZHp9Fe5oLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgZq4S9BAM0ialEaDCi9yDc/SfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjEyM2RlYWMtNWM2Ny0z ZTZiLTkxZjMtZjI5YWVlZWJjN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVfwEF2nw/Dv+HE0ttExS22aTqBQNe5iqZFhgugduoNN9rW5eVYt1ij dR7LLI9QQmTVPgd3b0JQBvh8M1xAuXtk4jT0xkEbOF2BYuTI+glYorTOzsoeGOjK owbbXvfuFhrVCKcreiKogY5Y2YOVgodDCuzidpXvpsddvAD9ajWtWkwGev6VfGYG HbsOu4Yham+7InAQwq/UhUO4Y6DCqKk7W5hQvFylHoAjq6xepZVlwYZHuR4yLXDv Xc1lFFJxRi2ujvCK1MKi7WsJAMorPbU1XDV7T+HzwT+bQ6VyzNEorkdRBip1eF5u 7L4hjNWTfaqG+KeQgkzVmeinyWDcAbg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:34 2025 by rpki-client