$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa File: 22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa (raw, json) Hash identifier: kaPDiF17hNGL9GnbsqCDzCdqvSaBSXTkQ+tJvXEcmL4= Subject key identifier: AB:B4:C6:E1:E7:7C:29:78:B0:5F:BF:97:E9:35:6A:79:15:41:40:9E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C70921BF4B1DAB1652340 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:70:92:1b:f4:b1:da:b1:65:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c18d4f6a-7125-4bcd-b9c2-b35a196d2f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:c6:6e:ab:df:46:bd:7f:43:6f:79:65:14: da:1f:1b:26:19:ea:b5:33:b7:e8:18:f4:4a:43:cf: d4:d5:fe:3d:96:75:c8:17:10:ef:42:4e:b5:c2:33: bc:f0:8b:52:bf:f0:ec:7c:c2:9e:09:6f:62:c9:2d: 40:51:e5:ca:58:44:64:7c:fc:8b:88:03:df:df:1d: da:7d:b4:59:b1:e9:7c:08:42:9c:9f:97:55:ab:85: 02:b2:ac:a2:fb:a1:59:f2:9e:e3:a3:3b:01:8c:4e: 39:66:0c:50:c6:aa:5c:59:74:09:f7:67:48:d2:5f: 34:c9:82:5a:2f:fa:64:85:e7:eb:e6:e4:e4:a2:4c: d6:49:42:06:36:30:12:ba:c1:74:3b:4a:1f:29:21: 02:13:d7:81:19:10:7c:8e:d7:fc:4b:85:4e:63:32: 90:9d:d9:04:ba:35:09:88:4f:d9:77:c3:b0:37:71: fb:51:cb:18:e0:38:ef:16:7a:a8:2a:a0:c9:19:d1: 4f:a1:3e:8b:0e:5e:25:9c:12:31:fa:00:e1:86:4c: 01:13:61:2e:4c:ae:d1:c9:b7:0a:26:85:aa:b8:15: d6:bc:ce:8c:4a:50:f0:58:0b:33:c3:3e:a6:b0:bb: 3a:38:c1:a1:ce:a8:b4:5d:69:e5:94:bb:78:6c:33: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B4:C6:E1:E7:7C:29:78:B0:5F:BF:97:E9:35:6A:79:15:41:40:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9b:b3:f4:12:3a:86:ec:15:26:f0:d9:4a:79:62:68:6d:5f: 5d:2c:72:f0:cc:6e:43:9c:dd:23:80:da:b0:86:b1:ea:3d:63: 7a:99:1a:11:b3:ef:7d:e7:dc:7f:fa:3a:4d:5d:b6:36:6b:e5: a5:4b:70:4e:6a:41:e7:85:9e:21:b1:88:52:97:86:d9:8d:71: b2:0a:a7:09:2d:a3:91:fd:28:dd:3e:59:cb:7b:0f:45:74:8f: 2c:39:bf:5c:2d:67:f5:67:37:00:70:ec:d3:44:df:04:87:c1: b5:c6:c2:15:c3:9d:b5:e2:57:d6:be:46:b1:19:a3:00:c5:65: 08:84:69:09:ab:7d:12:37:23:69:08:a7:82:9f:0d:f3:cf:d0: 74:16:5c:df:f2:8f:b9:5f:e7:6c:68:19:51:02:31:2b:cb:46: 81:31:6e:ba:dd:e3:65:5e:33:6b:2a:57:09:f0:6a:6e:cb:ef: 19:d4:58:ee:6d:b0:9e:50:b3:6f:cc:6b:ba:bd:f0:12:c7:ec: 3b:2c:99:b8:60:0b:50:9a:91:33:b6:b3:90:04:bf:81:2b:1d: 33:5a:00:84:1e:f9:28:6d:85:63:38:88:58:dc:d2:50:15:57: b2:ad:da:59:03:23:78:b9:db:11:c7:6e:b9:b3:f8:da:fb:5d: 22:b9:11:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHCSG/Sx2rFlI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzE4ZDRmNmEtNzEyNS00YmNkLWI5YzItYjM1YTE5NmQyZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpjGbqvfRr1/Q295ZRTaHxsmGeq1M7foGPRK Q8/U1f49lnXIFxDvQk61wjO88ItSv/DsfMKeCW9iyS1AUeXKWERkfPyLiAPf3x3a fbRZsel8CEKcn5dVq4UCsqyi+6FZ8p7jozsBjE45ZgxQxqpcWXQJ92dI0l80yYJa L/pkhefr5uTkokzWSUIGNjASusF0O0ofKSECE9eBGRB8jtf8S4VOYzKQndkEujUJ iE/Zd8OwN3H7UcsY4DjvFnqoKqDJGdFPoT6LDl4lnBIx+gDhhkwBE2EuTK7RybcK JoWquBXWvM6MSlDwWAszwz6msLs6OMGhzqi0XWnllLt4bDNydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu0xuHnfCl4sF+/l+k1ankVQUCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjJmN2FjYTAtOGY5MC0z ODdjLTkyY2ItMWM1MWE5ZDllYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGbs/QSOobsFSbw2Up5YmhtX10scvDMbkOc3SOA2rCGseo9Y3qZGhGz 733n3H/6Ok1dtjZr5aVLcE5qQeeFniGxiFKXhtmNcbIKpwkto5H9KN0+Wct7D0V0 jyw5v1wtZ/VnNwBw7NNE3wSHwbXGwhXDnbXiV9a+RrEZowDFZQiEaQmrfRI3I2kI p4KfDfPP0HQWXN/yj7lf52xoGVECMSvLRoExbrrd42VeM2sqVwnwam7L7xnUWO5t sJ5Qs2/Ma7q98BLH7DssmbhgC1CakTO2s5AEv4ErHTNaAIQe+ShthWM4iFjc0lAV V7Kt2lkDI3i52xHHbrmz+Nr7XSK5Ed0= -----END CERTIFICATE-----Generated at Thu Oct 9 20:04:36 2025 by rpki-client