$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00155dd5-e1ed-3375-9c8d-dd17863504e3.roa File: 00155dd5-e1ed-3375-9c8d-dd17863504e3.roa (raw, json) Hash identifier: EE2uhNIyVNIHl9Moydf9UMfGoYSnazQPtt1ar/ssycw= Subject key identifier: 1E:D2:AC:03:D3:54:38:07:17:77:D4:0D:2A:D0:C5:9A:42:51:24:40 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B2FC1818C248691C9F2339F40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00155dd5-e1ed-3375-9c8d-dd17863504e3.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:81:8c:24:86:91:c9:f2:33:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=4d701d91-1ee4-4a05-825f-6f140963f311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:f5:7b:78:74:22:9a:70:aa:95:5c:93:99: 63:e6:1c:cf:70:9d:e0:49:89:b1:28:73:24:b2:4c: de:60:c5:25:77:f1:c5:21:a5:81:24:cb:c1:c1:67: 2e:6e:8c:c3:8e:4f:a6:00:89:99:b5:e6:b7:8a:c3: e6:52:3d:59:3a:64:0e:d4:8a:48:b7:d8:f5:ba:d1: 61:ef:a4:ce:a2:78:dd:21:13:55:91:e6:4d:dc:23: c8:d8:ac:fc:ed:c5:90:9d:4e:10:2e:20:fd:ba:47: 3f:b4:d9:d2:72:6a:bb:47:f5:4a:a3:29:4a:0e:0b: f5:56:f8:10:d5:90:9f:1d:b7:af:e2:6f:2f:2b:87: 4b:37:5d:9f:a0:b8:51:70:af:d4:c7:c8:65:00:5d: 1e:6a:52:07:90:ba:66:c0:95:64:5e:a8:73:a3:22: 53:5c:0a:a9:f4:f8:58:b4:41:1d:70:68:f4:f4:fa: 9c:72:86:ba:e8:58:e5:04:05:7a:1a:bd:45:f3:5f: 51:57:8a:f6:f2:a0:4f:8c:41:7e:e7:3f:f8:24:2c: e5:b8:de:4f:71:11:b2:a4:24:39:d7:55:4d:0f:fb: 5f:98:4b:c7:3d:34:c9:09:ca:72:11:c2:87:d8:a1: ea:08:98:13:5e:ff:c3:a7:a3:cf:77:ee:80:dc:4b: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:AC:03:D3:54:38:07:17:77:D4:0D:2A:D0:C5:9A:42:51:24:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00155dd5-e1ed-3375-9c8d-dd17863504e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:17:0e:93:46:c9:12:60:84:78:10:44:27:7b:b2:4c:c1:14: 56:d5:28:52:92:7a:9f:85:cb:5c:c2:83:4c:d5:8c:dd:e9:01: 0d:1c:df:88:96:1e:69:28:4a:6a:86:ee:7c:61:ad:8a:ae:9c: 30:e3:b1:0f:d6:b4:69:ed:1f:c0:74:f2:c4:41:6e:d2:6d:8c: 14:29:a4:85:33:c5:f2:df:92:3b:d4:ed:4c:e4:2f:b8:16:9e: 64:c0:9c:8c:56:56:46:13:a5:82:ec:24:40:ff:da:fe:db:34: 47:74:e4:ec:25:53:f3:05:62:cf:c9:da:c2:9c:ab:c8:4e:c5: 9f:4d:d6:a8:21:16:f5:3e:7b:26:7e:cc:56:59:17:d7:2f:72: fd:b7:00:d6:ee:8b:40:4f:8e:1f:4f:3b:e3:b3:29:87:2b:b0: 29:08:86:31:5a:99:6e:bc:65:44:da:30:8a:b0:98:97:a7:92: 07:95:45:88:84:cf:cd:3f:73:1f:22:22:ae:c0:da:05:59:bb: 3d:ad:71:85:1e:c9:17:df:6a:cf:79:fa:9f:06:ab:d9:42:36: 01:66:a7:00:7c:d0:4f:40:14:df:8a:b4:3b:3a:d5:57:47:76: 58:f0:37:b2:1a:d3:80:c0:73:d3:52:37:db:34:3a:2b:7f:8f: e4:66:92:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYGMJIaRyfIzn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NGQ3MDFkOTEtMWVlNC00YTA1LTgyNWYtNmYxNDA5NjNmMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8P1e3h0IppwqpVck5lj5hzPcJ3gSYmxKHMk skzeYMUld/HFIaWBJMvBwWcubozDjk+mAImZtea3isPmUj1ZOmQO1IpIt9j1utFh 76TOonjdIRNVkeZN3CPI2Kz87cWQnU4QLiD9ukc/tNnScmq7R/VKoylKDgv1VvgQ 1ZCfHbev4m8vK4dLN12foLhRcK/Ux8hlAF0ealIHkLpmwJVkXqhzoyJTXAqp9PhY tEEdcGj09Pqccoa66FjlBAV6Gr1F819RV4r28qBPjEF+5z/4JCzluN5PcRGypCQ5 11VND/tfmEvHPTTJCcpyEcKH2KHqCJgTXv/Dp6PPd+6A3Et0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7SrAPTVDgHF3fUDSrQxZpCUSRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDAxNTVkZDUtZTFlZC0z Mzc1LTljOGQtZGQxNzg2MzUwNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4XDpNGyRJghHgQRCd7skzBFFbVKFKSep+Fy1zCg0zVjN3pAQ0c34iW HmkoSmqG7nxhrYqunDDjsQ/WtGntH8B08sRBbtJtjBQppIUzxfLfkjvU7UzkL7gW nmTAnIxWVkYTpYLsJED/2v7bNEd05OwlU/MFYs/J2sKcq8hOxZ9N1qghFvU+eyZ+ zFZZF9cvcv23ANbui0BPjh9PO+OzKYcrsCkIhjFamW68ZUTaMIqwmJenkgeVRYiE z80/cx8iIq7A2gVZuz2tcYUeyRffas95+p8Gq9lCNgFmpwB80E9AFN+KtDs61VdH dljwN7Ia04DAc9NSN9s0Oit/j+RmksY= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:20 2025 by rpki-client