$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa File: cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa (raw, json) Hash identifier: rUKzpFB+YpuV51/E9yuc5/5/UjlQxaUegvtJ6TlDl4Y= Subject key identifier: A9:CA:AC:F4:DC:07:D2:41:E7:3A:16:79:A9:12:28:23:B0:5C:72:C6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141E9CA352575C0A3B19440 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:e9:ca:35:25:75:c0:a3:b1:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=371cf42c-8fa1-4450-b28e-83fadc40c55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:27:f1:7e:e6:38:16:00:96:56:58:77:58: 4f:28:41:1e:84:3e:12:63:a6:a8:47:16:7e:5f:2a: b6:8b:15:e4:c4:67:25:d7:7a:af:d9:61:d7:11:53: 5e:b1:c3:70:cd:41:41:87:2d:7d:a4:fe:01:5b:8d: 0e:d0:4e:b8:8f:a6:22:9a:0f:22:42:3f:b0:08:b2: 24:c4:08:bb:b1:32:7f:4d:df:e8:68:12:db:19:12: ec:81:4f:0c:ab:b9:37:ee:63:7b:91:43:14:7f:2f: 3f:84:d1:63:4d:fa:47:ce:b2:9b:fe:03:e4:69:f9: 7a:af:c0:6f:ef:0e:5c:2c:e0:31:f2:d3:aa:57:47: f6:e7:68:a6:65:9a:cb:9e:4a:47:9e:91:d8:c9:26: c7:bc:8e:9e:6f:c7:c5:b6:50:f2:b0:f6:f3:a9:85: 97:51:d1:7e:48:03:5d:9e:c0:be:d0:1d:99:36:44: b8:50:48:3c:29:b2:3b:b5:a4:85:6c:ff:4d:18:9f: 34:7b:4a:ee:1e:7a:58:a3:33:82:6d:13:33:f8:3d: 64:36:15:d1:33:55:03:8a:47:ab:56:c6:15:69:63: bf:68:ab:ce:bc:ab:78:f6:cc:68:53:72:32:c3:76: 64:50:d2:e6:0f:2b:87:18:02:90:41:2a:0e:84:80: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CA:AC:F4:DC:07:D2:41:E7:3A:16:79:A9:12:28:23:B0:5C:72:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab4e53-1d37-39c4-96e8-5848eaf46b46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:14:2e:15:73:c9:82:ff:af:d9:7e:b0:c5:9d:0c:9d:39:11: a5:f4:84:59:2d:b7:35:fa:d0:5d:38:a9:7e:b5:74:d3:1c:28: 1d:2f:7e:b8:ed:64:68:e0:7c:79:6d:bb:f2:40:d6:71:f9:32: f0:b5:eb:59:aa:10:bf:c4:03:88:6e:f4:85:bc:d5:b0:1e:a8: b2:81:9b:37:57:0e:cc:f3:46:78:bf:e8:1f:09:92:55:00:b6: da:49:7f:38:98:74:ac:de:55:8a:10:a6:12:6e:26:e9:d9:15: fc:ad:90:ea:71:2d:45:e0:42:3c:f1:15:eb:62:83:bd:09:4f: c0:0c:f2:01:10:f4:c5:40:6f:7a:3d:6f:f5:bb:e1:26:69:ec: 66:29:7b:22:5d:d3:56:4c:cb:56:9a:ab:68:82:5e:5a:96:50: 06:80:1d:9f:a4:14:02:33:ae:d9:f0:7e:9f:55:df:4f:ac:35: 1c:fe:82:18:b0:7f:6e:70:42:8f:ad:c6:7f:eb:68:36:25:5d: e2:3e:23:22:09:1c:88:d0:d8:22:6e:e0:6b:ef:98:54:84:8f: 9d:e7:3a:6f:6c:11:fa:a5:06:f2:54:40:aa:77:01:00:62:98: 5d:9b:ae:00:3c:fd:34:ea:7e:bf:99:ff:38:f4:21:d3:10:7b: ff:8a:f2:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQenKNSV1wKOxlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MzcxY2Y0MmMtOGZhMS00NDUwLWIyOGUtODNmYWRjNDBjNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdsn8X7mOBYAllZYd1hPKEEehD4SY6aoRxZ+ Xyq2ixXkxGcl13qv2WHXEVNescNwzUFBhy19pP4BW40O0E64j6Yimg8iQj+wCLIk xAi7sTJ/Td/oaBLbGRLsgU8Mq7k37mN7kUMUfy8/hNFjTfpHzrKb/gPkafl6r8Bv 7w5cLOAx8tOqV0f252imZZrLnkpHnpHYySbHvI6eb8fFtlDysPbzqYWXUdF+SANd nsC+0B2ZNkS4UEg8KbI7taSFbP9NGJ80e0ruHnpYozOCbRMz+D1kNhXRM1UDiker VsYVaWO/aKvOvKt49sxoU3Iyw3ZkUNLmDyuHGAKQQSoOhICYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnKrPTcB9JB5zoWeakSKCOwXHLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2RhYjRlNTMtMWQzNy0z OWM0LTk2ZTgtNTg0OGVhZjQ2YjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsULhVzyYL/r9l+sMWdDJ05EaX0hFkttzX60F04qX61dNMcKB0vfrjt ZGjgfHltu/JA1nH5MvC161mqEL/EA4hu9IW81bAeqLKBmzdXDszzRni/6B8JklUA ttpJfziYdKzeVYoQphJuJunZFfytkOpxLUXgQjzxFetig70JT8AM8gEQ9MVAb3o9 b/W74SZp7GYpeyJd01ZMy1aaq2iCXlqWUAaAHZ+kFAIzrtnwfp9V30+sNRz+ghiw f25wQo+txn/raDYlXeI+IyIJHIjQ2CJu4GvvmFSEj53nOm9sEfqlBvJUQKp3AQBi mF2brgA8/TTqfr+Z/zj0IdMQe/+K8qs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:34 2025 by rpki-client