$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa File: 206860e2-e972-3b6c-a4c3-e144604e1ae9.roa (raw, json) Hash identifier: EHfvElcitfwB247Cg+TcLXndwpCuyk7+hPJ2JSvdqyc= Subject key identifier: 34:3F:F6:EC:B3:34:DF:32:D4:EF:B7:73:64:18:4E:FA:05:04:AA:EC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F376378C06B5FC2B42E5690 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:63:78:c0:6b:5f:c2:b4:2e:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=8beb77fb-824c-4c92-b0f8-1f22a43126f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:0d:e3:30:6d:1c:25:8a:54:7a:57:d1:f5: 7a:c7:34:f3:63:f0:0f:fa:3f:83:9a:05:40:92:15: 23:ba:e9:6b:f2:4e:ae:c7:bc:1f:44:4b:df:83:c1: d5:36:6d:e0:e8:88:7d:94:6b:ff:95:51:03:79:94: 4f:46:8d:7b:17:4b:0b:26:43:26:a2:9b:8c:d7:bc: 2f:58:a1:89:fa:9f:2b:05:71:d6:7f:44:a7:74:74: d5:f7:bb:00:13:95:be:17:e3:e3:32:f9:7d:b7:da: ac:ce:dc:eb:6e:b7:ff:2d:7d:3e:6f:ac:cc:1c:ca: 7d:0f:3b:a0:64:30:31:77:70:34:0b:9d:44:1f:4f: f6:81:f5:f3:3f:01:32:b8:a4:cd:d4:46:18:47:4e: 71:df:82:db:35:5a:5a:7c:38:24:65:87:f2:2f:33: eb:e5:af:66:b3:d2:a1:07:be:65:18:cd:13:8f:9e: 7e:3e:a1:41:c8:3c:01:83:a1:5d:dd:59:6f:55:20: 32:7f:4f:0f:2c:b0:0a:dc:87:ad:2f:06:e6:2c:59: 3e:36:b4:40:ef:d8:81:54:ee:9c:f9:cb:39:65:29: 77:11:61:2b:b5:37:08:d9:f6:6a:95:3e:dc:1a:6f: 4d:3e:9f:49:54:dc:06:78:81:97:51:1a:b5:aa:83: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3F:F6:EC:B3:34:DF:32:D4:EF:B7:73:64:18:4E:FA:05:04:AA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:98:da:48:58:82:8a:ac:ae:11:f5:f2:c7:ac:87:93:52:8a: e8:24:7a:67:b0:3c:ff:8c:80:a2:90:3d:c0:d6:ee:fa:1c:96: cb:5f:c8:b3:7c:bb:fe:fb:ec:1e:f2:0b:50:dc:83:7c:79:6e: 10:5b:42:7e:06:1a:b8:8c:56:ac:65:8a:2a:ad:19:61:86:9a: 12:01:14:be:ed:05:f8:33:9b:68:48:11:72:c0:fb:15:c0:87: 90:95:1c:e6:16:2b:db:8e:d1:82:ff:4a:a0:14:7e:3a:3c:04: 0f:89:d2:a2:78:92:82:67:ff:89:e5:dc:7d:ed:a6:50:48:dd: 54:28:a5:ff:9a:74:bd:e8:7f:bc:ae:a4:9f:96:9d:95:f9:b5: 22:af:fe:06:30:2c:bc:2b:e1:f9:96:ab:06:c4:99:2c:cd:6f: a5:5a:20:ec:a8:d0:b9:d1:a1:28:24:d6:a9:67:79:03:bc:19: ba:31:48:ca:e2:d6:70:0b:d4:9f:16:0f:73:a7:48:59:89:6a: 82:7d:3b:65:7d:30:e8:3a:c3:82:dd:17:f5:5e:8a:0a:f6:11: 3b:38:61:f8:fc:d6:b2:4d:41:45:1d:c4:0d:93:46:6f:66:a3: ea:64:9a:08:67:72:58:a4:bb:39:8a:99:fc:ec:e7:5a:dc:29: 5c:0e:a8:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2N4wGtfwrQuVpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OGJlYjc3ZmItODI0Yy00YzkyLWIwZjgtMWYyMmE0MzEyNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylcN4zBtHCWKVHpX0fV6xzTzY/AP+j+DmgVA khUjuulr8k6ux7wfREvfg8HVNm3g6Ih9lGv/lVEDeZRPRo17F0sLJkMmopuM17wv WKGJ+p8rBXHWf0SndHTV97sAE5W+F+PjMvl9t9qsztzrbrf/LX0+b6zMHMp9Dzug ZDAxd3A0C51EH0/2gfXzPwEyuKTN1EYYR05x34LbNVpafDgkZYfyLzPr5a9ms9Kh B75lGM0Tj55+PqFByDwBg6Fd3VlvVSAyf08PLLAK3IetLwbmLFk+NrRA79iBVO6c +cs5ZSl3EWErtTcI2fZqlT7cGm9NPp9JVNwGeIGXURq1qoPH1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ/9uyzNN8y1O+3c2QYTvoFBKrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjA2ODYwZTItZTk3Mi0z YjZjLWE0YzMtZTE0NDYwNGUxYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKY2khYgoqsrhH18sesh5NSiugkemewPP+MgKKQPcDW7voclstfyLN8 u/777B7yC1Dcg3x5bhBbQn4GGriMVqxliiqtGWGGmhIBFL7tBfgzm2hIEXLA+xXA h5CVHOYWK9uO0YL/SqAUfjo8BA+J0qJ4koJn/4nl3H3tplBI3VQopf+adL3of7yu pJ+WnZX5tSKv/gYwLLwr4fmWqwbEmSzNb6VaIOyo0LnRoSgk1qlneQO8GboxSMri 1nAL1J8WD3OnSFmJaoJ9O2V9MOg6w4LdF/Veigr2ETs4Yfj81rJNQUUdxA2TRm9m o+pkmghnclikuzmKmfzs51rcKVwOqH8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:22 2025 by rpki-client