$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa File: e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa (raw, json) Hash identifier: 9TK0MH14iCjIDYNHbtOK4hCN7g5jJVJZTZ3z14Uuc/Y= Subject key identifier: 5E:4A:1A:B0:76:39:46:FC:B5:27:AC:EB:BA:90:27:97:B8:FE:04:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7A6D958854493B8A1CC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.133.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7a:6d:95:88:54:49:3b:8a:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=a56a1905-d7c2-4e6c-8f9f-9a4215d1b5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:04:f9:26:9c:b2:b7:2e:da:6b:02:20:05: 27:24:19:e9:b8:ee:d7:f5:eb:32:61:c3:c1:1a:07: 34:a0:70:8f:68:94:47:36:85:c7:9d:1c:a1:24:36: 73:e4:12:38:9e:c1:60:f0:04:c0:d6:85:50:b0:b7: 8a:c4:c9:95:81:85:e0:1b:b3:32:49:6f:6e:7d:99: 17:3f:d0:46:42:4d:72:c8:a0:29:a8:db:e2:86:9b: b0:22:76:69:d9:dc:2e:e5:58:53:2b:ee:10:37:d8: 5c:c4:de:fe:40:6e:b6:59:7c:cb:b0:cb:7b:d5:e4: 92:38:53:29:7d:62:df:4e:22:7d:a9:24:04:4c:cf: 5b:5a:78:7d:6c:2a:1f:eb:de:26:bf:d4:fe:86:f5: 56:6e:22:4b:4d:f9:e7:26:3d:75:63:d5:60:db:d9: 3f:63:f6:3f:c5:3a:c8:82:ed:16:cd:3e:a2:10:36: 8f:d1:d6:1a:8e:3b:fb:e0:48:8b:b1:1a:05:7b:0c: d9:9f:3f:66:94:22:95:f5:2e:93:81:7a:bc:d5:ac: 4c:ee:3c:d1:60:ab:cc:3f:eb:fe:5a:6a:c7:2b:ae: 2b:4e:97:66:44:7b:19:4e:5b:e6:c0:96:cf:c0:2a: ee:0d:e1:85:19:5d:3f:ab:04:71:4f:09:e1:35:18: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:1A:B0:76:39:46:FC:B5:27:AC:EB:BA:90:27:97:B8:FE:04:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:9f:a9:3b:59:4d:86:df:0b:c8:db:bd:bf:fa:fb:5f:58:2a: f8:7b:2b:e4:9a:37:ca:cd:cc:8e:42:c1:22:60:04:b0:50:76: 45:dd:02:a8:48:af:d5:cd:f5:cc:02:b3:d6:a6:e0:66:f1:51: 5d:24:e5:51:eb:3c:49:5c:6b:b7:72:95:fb:6c:da:59:cb:a0: 0a:61:a8:a4:48:59:28:fa:96:9a:2e:ef:35:ba:1b:bd:8f:7c: 8a:6f:0f:09:76:04:59:52:f4:8d:ff:08:11:7a:d4:5e:d3:da: d7:b7:cc:99:2d:ab:ec:2e:aa:ae:4c:ca:50:84:a2:15:1e:96: 6e:4f:a4:f6:de:5d:48:f8:aa:f3:64:73:d7:d7:fe:86:be:76: a0:e0:64:aa:86:9c:a0:c7:fd:fd:61:b2:78:59:9d:eb:1c:7a: 5c:9b:4e:7a:a4:49:3a:71:e7:84:d8:6a:74:2d:2a:d2:92:3a: ce:fe:e9:bd:4d:74:bf:a3:70:ec:f0:38:8f:5c:30:81:26:93: b8:bd:07:07:fa:31:9e:dd:a9:f9:25:8d:ae:10:d4:79:30:51: 24:a8:0c:79:17:6c:77:31:e5:66:6f:1f:1d:cf:a0:ba:29:e8: e7:86:b7:8a:88:dc:a4:76:63:1d:96:dd:43:41:e4:da:24:1b: 0a:27:5e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHptlYhUSTuKHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YTU2YTE5MDUtZDdjMi00ZTZjLThmOWYtOWE0MjE1ZDFiNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9UE+Sacsrcu2msCIAUnJBnpuO7X9esyYcPB Ggc0oHCPaJRHNoXHnRyhJDZz5BI4nsFg8ATA1oVQsLeKxMmVgYXgG7MySW9ufZkX P9BGQk1yyKApqNvihpuwInZp2dwu5VhTK+4QN9hcxN7+QG62WXzLsMt71eSSOFMp fWLfTiJ9qSQETM9bWnh9bCof694mv9T+hvVWbiJLTfnnJj11Y9Vg29k/Y/Y/xTrI gu0WzT6iEDaP0dYajjv74EiLsRoFewzZnz9mlCKV9S6TgXq81axM7jzRYKvMP+v+ WmrHK64rTpdmRHsZTlvmwJbPwCruDeGFGV0/qwRxTwnhNRgx2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5KGrB2OUb8tSes67qQJ5e4/gQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTI0YjY4YmUtZjYwYy0z MGUzLTljMWMtYzgxYzBmYWYyZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJufqTtZTYbfC8jbvb/6+19YKvh7K+SaN8rNzI5CwSJgBLBQdkXdAqhI r9XN9cwCs9am4GbxUV0k5VHrPElca7dylfts2lnLoAphqKRIWSj6lpou7zW6G72P fIpvDwl2BFlS9I3/CBF61F7T2te3zJktq+wuqq5MylCEohUelm5PpPbeXUj4qvNk c9fX/oa+dqDgZKqGnKDH/f1hsnhZnescelybTnqkSTpx54TYanQtKtKSOs7+6b1N dL+jcOzwOI9cMIEmk7i9Bwf6MZ7dqfklja4Q1HkwUSSoDHkXbHcx5WZvHx3PoLop 6OeGt4qI3KR2Yx2W3UNB5NokGwonXgg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:51:37 2025 by rpki-client