$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa File: 2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa (raw, json) Hash identifier: UvW0AJwte18PRVfOFItNVkUTzliJzciNwTd75dcF/28= Subject key identifier: E5:3C:0D:EB:C8:B7:E1:38:3C:35:8D:E3:56:FB:03:BE:42:27:82:7B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F37666E17072CC00AFC2500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:66:6e:17:07:2c:c0:0a:fc:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=1c1e6823-e88e-4591-85ca-280169b52cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:3a:4a:39:6d:01:ed:36:dd:31:08:57:6c: 7f:dd:2c:41:d2:16:ae:32:78:6e:00:8d:55:7e:42: 1e:20:fa:a9:24:42:2d:42:f9:f2:b1:55:e0:0f:54: aa:72:63:26:53:50:e8:0c:38:ca:79:b8:27:14:5c: cf:74:7a:d4:db:b8:51:ce:fd:12:a6:3e:1a:15:ce: f6:ab:2d:1d:92:44:0f:a7:2b:91:83:ae:f5:f3:31: e1:65:f3:75:2e:5a:6d:f9:5a:68:34:f7:96:7e:f0: 87:f5:ba:55:9c:8c:eb:23:e3:cf:9a:55:88:ce:5b: 54:2a:e6:da:df:98:8f:ca:22:72:12:a8:97:5a:5c: d7:ad:4d:14:fe:53:50:db:de:ef:62:fa:ca:1f:a0: 41:8c:d4:3a:8b:01:e6:6e:cf:66:1b:10:7f:53:1a: 58:ce:b7:5a:a4:ac:51:ef:c0:6e:47:98:eb:9a:14: 4b:c8:00:ef:4d:46:7f:74:97:11:7f:69:71:83:84: 6a:86:9a:bb:f8:85:6a:14:4f:be:e2:df:bc:7e:f8: 6e:1a:62:fd:1c:04:39:6b:83:b5:f6:63:fb:fc:1d: 53:c1:bb:be:ed:d5:41:b0:30:8a:84:f4:d3:eb:ef: 7c:19:10:2a:58:95:42:62:73:c4:94:ed:91:65:e2: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3C:0D:EB:C8:B7:E1:38:3C:35:8D:E3:56:FB:03:BE:42:27:82:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:d6:2a:3a:30:aa:17:12:61:ae:e3:07:eb:30:31:53:cb:8d: ef:06:d6:22:23:4c:a1:dc:4c:27:34:33:cd:06:8f:48:ee:59: 5c:33:db:93:0e:cf:71:86:41:10:c4:c1:0f:d7:d3:75:63:23: 85:60:4d:ce:7a:8b:c1:ab:72:6c:90:24:c8:36:02:0d:1b:bb: 5e:7a:86:24:c3:44:2d:d7:ae:10:b8:87:38:bc:6b:6c:81:85: 99:dc:4f:4e:c9:e5:46:ab:8d:7e:af:a1:27:7d:7a:07:d1:99: 07:f9:b0:53:0a:33:47:27:1d:d4:f7:c6:05:8d:de:9d:28:83: 39:ba:e3:c1:e6:f5:00:2e:3f:b0:96:9d:75:81:d6:0e:ce:95: 16:03:20:03:72:79:fe:ed:2c:de:6c:ff:4b:92:26:88:f1:43: f6:29:0f:a7:13:28:d5:05:54:f5:d4:f4:52:20:48:9e:1a:65: 0a:c2:a5:1c:c5:ca:47:9e:dd:6a:ae:f0:31:c0:06:fd:48:dd: c3:bb:fb:92:72:a7:02:d9:fa:11:97:df:3e:e9:70:c5:81:61: e5:4f:ff:3a:f7:43:ba:97:43:cd:56:e0:ff:4f:3a:ac:1a:25: 15:21:06:df:07:e1:7b:18:ad:d4:83:8c:1c:44:98:bc:b3:51: ea:a3:02:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2ZuFwcswAr8JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MWMxZTY4MjMtZTg4ZS00NTkxLTg1Y2EtMjgwMTY5YjUyY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRQ6SjltAe023TEIV2x/3SxB0hauMnhuAI1V fkIeIPqpJEItQvnysVXgD1SqcmMmU1DoDDjKebgnFFzPdHrU27hRzv0Spj4aFc72 qy0dkkQPpyuRg6718zHhZfN1Llpt+VpoNPeWfvCH9bpVnIzrI+PPmlWIzltUKuba 35iPyiJyEqiXWlzXrU0U/lNQ297vYvrKH6BBjNQ6iwHmbs9mGxB/UxpYzrdapKxR 78BuR5jrmhRLyADvTUZ/dJcRf2lxg4Rqhpq7+IVqFE++4t+8fvhuGmL9HAQ5a4O1 9mP7/B1Twbu+7dVBsDCKhPTT6+98GRAqWJVCYnPElO2RZeJhcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU8DevIt+E4PDWN41b7A75CJ4J7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmIyMWE4YjEtMTZlOS0z YTg0LTk1ZjAtOGU2ZDQ3YzFhYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvWKjowqhcSYa7jB+swMVPLje8G1iIjTKHcTCc0M80Gj0juWVwz25MO z3GGQRDEwQ/X03VjI4VgTc56i8GrcmyQJMg2Ag0bu156hiTDRC3XrhC4hzi8a2yB hZncT07J5UarjX6voSd9egfRmQf5sFMKM0cnHdT3xgWN3p0ogzm648Hm9QAuP7CW nXWB1g7OlRYDIANyef7tLN5s/0uSJojxQ/YpD6cTKNUFVPXU9FIgSJ4aZQrCpRzF ykee3Wqu8DHABv1I3cO7+5JypwLZ+hGX3z7pcMWBYeVP/zr3Q7qXQ81W4P9POqwa JRUhBt8H4XsYrdSDjBxEmLyzUeqjAr8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:25 2025 by rpki-client