$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa File: d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa (raw, json) Hash identifier: j2T3a2yBZcTVPuAuN5UNtp0Po9ARBgstQ10YcoMyre0= Subject key identifier: 58:08:8C:A1:A9:1A:C0:1A:FE:49:0E:41:40:1D:A2:F6:85:96:56:C4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C90362B5FE88DA3E1BF08 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:90:36:2b:5f:e8:8d:a3:e1:bf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=479311a8-9f28-4503-abce-3c5fa603d5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:13:f6:2c:8a:ba:77:52:f5:2e:62:38:4f: 74:9d:42:e3:63:ea:91:ac:41:2b:8e:4a:7f:66:9a: d6:98:f5:7e:29:66:79:df:55:81:68:83:fa:79:22: 94:cb:b4:5f:1b:c5:af:3f:0d:19:d7:72:f5:98:27: f2:7e:c3:d4:e1:25:5e:a7:e5:37:2f:5b:77:ff:a8: 2a:bf:ae:97:91:8b:27:31:84:af:05:b7:3b:ca:8e: c0:fd:e3:4e:16:0f:eb:e7:c1:67:94:3d:58:d5:d5: ca:be:55:39:99:8b:d3:79:ca:06:93:d8:67:25:d1: 8a:e9:9d:2b:09:62:ab:93:e5:ca:82:93:84:16:2f: 03:38:d1:c5:1f:45:97:b8:42:94:a2:10:9d:a9:fc: 91:c9:f5:11:43:24:f4:94:d6:95:9d:17:af:b9:88: 77:b0:f4:05:d8:85:e4:b1:69:d7:c2:1f:9d:51:0d: ea:3c:6a:ef:5d:32:bf:60:47:68:67:e0:08:5d:16: 81:e2:27:a7:d4:30:32:c5:5d:88:f4:62:e8:59:c0: 3e:19:f4:e7:02:97:c2:92:cd:41:33:d4:71:de:31: 68:2a:50:26:29:5a:af:52:16:ed:52:b4:7d:96:b3: 6a:49:cb:d2:92:46:bc:80:da:29:8a:b6:43:65:d5: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:8C:A1:A9:1A:C0:1A:FE:49:0E:41:40:1D:A2:F6:85:96:56:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1f:98:f7:33:99:90:96:ec:b1:e5:1a:e8:8b:67:d9:98:ef: 7e:51:78:77:3a:74:86:b2:09:3e:5d:ec:13:c9:e1:d3:a9:d4: 3f:1c:bc:99:e7:6c:e3:56:44:d1:a1:92:86:a0:d3:4b:0b:3c: f2:1a:80:87:42:90:ba:e8:c4:45:ba:79:f0:73:4c:00:aa:c6: fb:55:19:f3:9d:de:79:32:7c:5b:90:ec:01:e4:8a:7b:6b:31: 96:f8:91:f0:b0:7f:b7:08:7a:66:77:ac:d3:ed:86:90:e8:7b: 6c:28:d8:90:82:47:6e:a0:55:86:c2:0c:c3:6e:18:fb:79:d4: 74:06:6c:9c:3a:8d:f2:aa:43:32:95:d7:c2:7a:61:6b:fc:4f: 79:c4:aa:ba:e7:ad:e5:c2:58:e0:dc:aa:ab:16:23:bc:d1:44: a6:76:46:1a:7a:64:5d:9c:2a:58:9d:b0:3a:09:38:d6:5c:3c: da:e1:ea:fe:62:20:0a:ec:61:6f:92:f7:fc:9d:d7:26:0f:54: cc:c9:66:91:28:b9:da:03:a3:e7:d1:c6:86:89:bb:3c:c0:99: da:97:e4:7b:7a:4f:0a:3b:e0:ec:78:02:ac:5e:0b:e2:4c:b1: a6:80:fa:4c:f4:6e:98:83:23:dc:7b:a6:44:1b:6c:d4:2a:24: 25:19:f3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJA2K1/ojaPhvwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NDc5MzExYTgtOWYyOC00NTAzLWFiY2UtM2M1ZmE2MDNkNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnkT9iyKundS9S5iOE90nULjY+qRrEErjkp/ ZprWmPV+KWZ531WBaIP6eSKUy7RfG8WvPw0Z13L1mCfyfsPU4SVep+U3L1t3/6gq v66XkYsnMYSvBbc7yo7A/eNOFg/r58FnlD1Y1dXKvlU5mYvTecoGk9hnJdGK6Z0r CWKrk+XKgpOEFi8DONHFH0WXuEKUohCdqfyRyfURQyT0lNaVnRevuYh3sPQF2IXk sWnXwh+dUQ3qPGrvXTK/YEdoZ+AIXRaB4ien1DAyxV2I9GLoWcA+GfTnApfCks1B M9Rx3jFoKlAmKVqvUhbtUrR9lrNqScvSkka8gNopirZDZdXsHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgIjKGpGsAa/kkOQUAdovaFllbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDBkNjNhYmMtNGNkNS0z MTIzLTg2ODEtM2ViM2I5ZjY2MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwfmPczmZCW7LHlGuiLZ9mY735ReHc6dIayCT5d7BPJ4dOp1D8cvJnn bONWRNGhkoag00sLPPIagIdCkLroxEW6efBzTACqxvtVGfOd3nkyfFuQ7AHkintr MZb4kfCwf7cIemZ3rNPthpDoe2wo2JCCR26gVYbCDMNuGPt51HQGbJw6jfKqQzKV 18J6YWv8T3nEqrrnreXCWODcqqsWI7zRRKZ2Rhp6ZF2cKlidsDoJONZcPNrh6v5i IArsYW+S9/yd1yYPVMzJZpEoudoDo+fRxoaJuzzAmdqX5Ht6Two74Ox4AqxeC+JM saaA+kz0bpiDI9x7pkQbbNQqJCUZ8wU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:04:00 2025 by rpki-client