$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa File: 918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa (raw, json) Hash identifier: UvNB3dd4OZlA62dE5j67SFAteqcZ+E9LKBsylSEXoC8= Subject key identifier: 06:F9:E9:C4:31:37:BD:F8:D0:78:D8:59:42:68:31:8D:65:98:FE:02 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C81732F77A1D4472B6670 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:81:73:2f:77:a1:d4:47:2b:66:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=4dcf88e2-0c08-43ee-94bd-9b141724547d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:d7:85:7c:f6:85:13:cc:59:10:65:87:48: 94:58:ba:f1:2b:6a:47:b0:49:df:19:f5:18:c3:bd: 66:a8:71:4a:ce:b2:d0:d7:90:d9:9c:6d:1a:b7:54: ec:bb:7e:18:2a:95:04:61:68:49:ba:5f:41:49:ec: f8:01:a6:37:fa:cd:0e:17:b9:5d:21:08:80:76:f3: 2a:48:a0:cd:67:f1:1b:45:b7:cd:81:01:5e:06:73: 53:48:ad:ef:47:10:6d:c6:aa:0e:16:0b:b5:0d:85: 34:1f:60:00:2b:94:a2:24:16:a5:d6:6c:8a:27:72: e8:85:48:a9:19:24:4b:ff:af:82:70:8b:e0:76:8e: a7:39:d8:89:76:7a:78:da:46:1f:57:f9:45:b3:ae: bc:d5:18:69:0b:60:03:44:a7:4e:8b:c5:ec:23:93: 81:01:49:74:e9:2a:71:34:e6:97:76:b2:6e:24:8b: 4a:d9:85:7f:bd:1f:f3:15:98:0e:39:94:ca:c3:ed: f0:64:f2:4a:83:78:62:a1:ce:4c:2b:24:6b:2b:6c: d7:d1:84:ca:ba:75:e4:fc:4d:c0:d8:2d:fd:1d:f2: 22:5b:4a:52:1a:4e:d4:73:79:73:05:52:10:b7:7b: 9d:85:f9:aa:b7:65:36:5c:86:6e:20:2a:d4:67:4f: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F9:E9:C4:31:37:BD:F8:D0:78:D8:59:42:68:31:8D:65:98:FE:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:08:44:32:f5:fa:64:6d:34:68:67:6f:d9:dd:3d:7a:e4:f1: 7d:4e:d9:7e:76:ef:64:1b:10:eb:14:cc:af:0c:0a:d5:35:c8: f7:b2:40:1d:c0:5f:58:6e:cc:4a:f9:8e:ba:e7:14:af:5c:e4: a7:6b:77:5f:4d:44:d3:c2:3b:b2:a3:f1:e6:e0:d4:0a:00:bc: 6b:33:75:7b:42:c7:ca:98:ca:bb:8d:7e:9d:77:aa:b0:e5:25: 23:f8:56:37:c0:cd:cd:85:e1:e3:c2:3b:60:ca:a7:98:fd:51: 2d:2c:cb:78:ab:78:bd:2b:cf:ea:f5:2b:c6:e2:65:0b:be:a6: 42:3f:49:4b:d2:96:21:0d:0f:0b:c2:7b:67:60:ab:31:0b:6b: c8:76:78:df:41:86:12:c9:80:1c:09:6d:07:94:30:10:46:ff: 11:bb:2f:a2:32:1f:ab:a9:d9:27:b0:d4:66:79:5b:15:0e:1c: c5:f9:a5:c9:07:bf:a1:d0:ac:32:e8:38:cc:cd:a6:5b:82:d8: cc:0e:cd:40:fa:5e:8c:5e:ce:d5:74:80:68:6e:57:57:4b:22: 7d:b9:a1:e0:2f:79:a1:ba:59:0f:7e:96:6e:e0:93:c4:39:3d: dc:07:a6:1d:e2:5f:08:a4:70:dd:34:74:ba:f9:1e:3b:21:d0: b3:95:d2:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDIFzL3eh1EcrZnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NGRjZjg4ZTItMGMwOC00M2VlLTk0YmQtOWIxNDE3MjQ1NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/TXhXz2hRPMWRBlh0iUWLrxK2pHsEnfGfUY w71mqHFKzrLQ15DZnG0at1Tsu34YKpUEYWhJul9BSez4AaY3+s0OF7ldIQiAdvMq SKDNZ/EbRbfNgQFeBnNTSK3vRxBtxqoOFgu1DYU0H2AAK5SiJBal1myKJ3LohUip GSRL/6+CcIvgdo6nOdiJdnp42kYfV/lFs6681RhpC2ADRKdOi8XsI5OBAUl06Spx NOaXdrJuJItK2YV/vR/zFZgOOZTKw+3wZPJKg3hioc5MKyRrK2zX0YTKunXk/E3A 2C39HfIiW0pSGk7Uc3lzBVIQt3udhfmqt2U2XIZuICrUZ09nMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAb56cQxN7340HjYWUJoMY1lmP4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTE4Y2E2N2UtM2YyMy0z MGNmLWI5ODAtYTlkMWNmOTVkMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAIRDL1+mRtNGhnb9ndPXrk8X1O2X5272QbEOsUzK8MCtU1yPeyQB3A X1huzEr5jrrnFK9c5Kdrd19NRNPCO7Kj8ebg1AoAvGszdXtCx8qYyruNfp13qrDl JSP4VjfAzc2F4ePCO2DKp5j9US0sy3ireL0rz+r1K8biZQu+pkI/SUvSliENDwvC e2dgqzELa8h2eN9BhhLJgBwJbQeUMBBG/xG7L6IyH6up2Sew1GZ5WxUOHMX5pckH v6HQrDLoOMzNpluC2MwOzUD6XoxeztV0gGhuV1dLIn25oeAveaG6WQ9+lm7gk8Q5 PdwHph3iXwikcN00dLr5Hjsh0LOV0sc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:15:13 2025 by rpki-client