$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0aee7ec6-b228-38af-8235-2f42dedaa51e.roa File: 0aee7ec6-b228-38af-8235-2f42dedaa51e.roa (raw, json) Hash identifier: UJP2qI2cGrMGVZ0r7k882KVEeeIILNb5GkzmIXZcLCc= Subject key identifier: 3E:0F:3F:6C:B5:48:C9:EC:71:71:DD:51:22:2D:60:FB:22:41:E6:E0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3770442580CC637C81E140 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0aee7ec6-b228-38af-8235-2f42dedaa51e.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36411 IP address blocks: 104.134.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:70:44:25:80:cc:63:7c:81:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=bdf7a2d3-07aa-421d-9f75-6e0532b015eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:b5:47:f5:1e:d9:f8:2f:67:61:87:76:fa: e2:e3:ce:2d:21:2e:32:7c:8e:3b:21:5d:f2:e9:c1: d9:1c:de:a6:d3:76:28:3e:4e:30:64:60:0b:cc:7c: 9b:7c:73:ed:47:26:dc:7e:a8:c3:ff:d9:58:d5:02: 13:7a:fe:b5:db:54:b3:49:60:23:b7:28:58:64:a7: 19:f8:e5:06:03:92:33:5b:57:02:b1:0d:2f:23:5e: 51:00:83:1c:4c:54:15:90:cf:71:84:7b:5c:60:26: 4a:ce:ce:5a:d6:71:41:c7:03:99:af:83:3b:2a:49: cc:7b:52:5d:52:db:d1:b5:c2:d2:b1:84:cb:9d:85: ab:b1:f2:ff:c6:3f:fb:a2:a6:5f:62:8b:f9:37:e8: e0:d9:96:2a:00:f6:94:1f:5b:3c:bf:40:e4:c6:1d: 6c:a7:c2:a2:34:7d:ff:4e:16:73:dc:5a:bd:ab:9d: 99:dd:91:e3:42:9c:5f:65:db:e4:a8:c9:7f:10:69: e1:12:6e:80:cc:74:64:90:86:ea:ab:2e:8c:ef:5c: 34:5c:7b:b9:04:f8:e7:bf:fd:2e:e7:77:c1:30:3e: 02:af:00:49:ca:4f:cb:d8:60:15:4f:80:9b:f7:ab: 14:76:a7:d1:71:d6:5c:27:42:62:47:be:f1:5b:2c: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0F:3F:6C:B5:48:C9:EC:71:71:DD:51:22:2D:60:FB:22:41:E6:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0aee7ec6-b228-38af-8235-2f42dedaa51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f0:57:95:a9:d3:6d:79:1e:ca:f5:e0:c4:99:e8:b6:06:c3: b2:47:5d:3e:62:b1:be:ec:7a:48:0b:8e:e3:2b:5a:6b:ee:c0: 60:82:b6:8e:2d:42:5b:55:02:2e:51:29:80:25:f4:bc:1f:06: e5:5f:4c:41:e6:4a:75:3f:40:1c:e4:0e:c3:74:9e:49:bf:74: d5:3c:5c:c5:c1:e5:d6:19:c3:d1:08:11:d7:ab:21:a3:77:16: 78:8e:2d:fc:41:dd:c2:72:5e:89:c9:83:ec:94:94:dc:dd:6f: cf:05:de:55:57:31:98:dc:e6:30:9c:3b:c1:99:77:98:36:3c: 5f:ab:25:d3:71:3a:2e:b8:34:7e:dd:49:51:0a:be:dd:6e:34: 7a:af:4d:3b:71:af:0b:82:08:22:8b:98:1b:87:0b:c4:20:e3: a3:08:fc:b6:11:66:f5:98:ee:02:65:bc:85:be:8d:0a:d6:e4: 5d:45:96:b9:9f:24:45:ac:76:f2:1a:94:3f:a0:dc:7a:17:92: c7:b2:24:06:35:8b:2f:66:57:d0:19:d5:76:01:c4:4c:30:d8: 71:73:7f:8b:21:85:af:46:29:ef:2f:df:9b:9f:05:fc:00:1f: c6:c1:7f:4b:34:30:66:d2:19:f4:84:6b:e4:f2:71:97:7e:f2: 06:33:ce:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3BEJYDMY3yB4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YmRmN2EyZDMtMDdhYS00MjFkLTlmNzUtNmUwNTMyYjAxNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljm1R/Ue2fgvZ2GHdvri484tIS4yfI47IV3y 6cHZHN6m03YoPk4wZGALzHybfHPtRybcfqjD/9lY1QITev6121SzSWAjtyhYZKcZ +OUGA5IzW1cCsQ0vI15RAIMcTFQVkM9xhHtcYCZKzs5a1nFBxwOZr4M7KknMe1Jd UtvRtcLSsYTLnYWrsfL/xj/7oqZfYov5N+jg2ZYqAPaUH1s8v0Dkxh1sp8KiNH3/ ThZz3Fq9q52Z3ZHjQpxfZdvkqMl/EGnhEm6AzHRkkIbqqy6M71w0XHu5BPjnv/0u 53fBMD4CrwBJyk/L2GAVT4Cb96sUdqfRcdZcJ0JiR77xWyxtJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4PP2y1SMnscXHdUSItYPsiQebgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGFlZTdlYzYtYjIyOC0z OGFmLTgyMzUtMmY0MmRlZGFhNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALwV5Wp0215Hsr14MSZ6LYGw7JHXT5isb7sekgLjuMrWmvuwGCCto4t QltVAi5RKYAl9LwfBuVfTEHmSnU/QBzkDsN0nkm/dNU8XMXB5dYZw9EIEderIaN3 FniOLfxB3cJyXonJg+yUlNzdb88F3lVXMZjc5jCcO8GZd5g2PF+rJdNxOi64NH7d SVEKvt1uNHqvTTtxrwuCCCKLmBuHC8Qg46MI/LYRZvWY7gJlvIW+jQrW5F1Flrmf JEWsdvIalD+g3HoXkseyJAY1iy9mV9AZ1XYBxEww2HFzf4shha9GKe8v35ufBfwA H8bBf0s0MGbSGfSEa+TycZd+8gYzzss= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:05 2025 by rpki-client