$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3937d9f3-56bb-32dc-b40d-3096669be6bd.roa File: 3937d9f3-56bb-32dc-b40d-3096669be6bd.roa (raw, json) Hash identifier: Sj9eYdV7xherEQlr7tJ0E0tiXJL0EWwmbTbvkhX7F8U= Subject key identifier: AF:53:C2:75:28:6E:E2:83:3E:02:AA:70:60:A7:7D:7B:2B:91:FB:5D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7791C0467DF30E039180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3937d9f3-56bb-32dc-b40d-3096669be6bd.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:77:91:c0:46:7d:f3:0e:03:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=b262b7e4-d6ca-42b3-a8de-8a9abd3c9313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:64:2f:e2:b8:b0:77:5c:77:e7:f4:50:18: 74:85:3a:be:1c:7a:79:34:02:e2:5d:21:18:b6:3d: 7f:a3:ba:ff:11:59:fb:4f:eb:c4:65:2a:69:7b:b8: 43:b6:2f:96:70:c4:33:ac:a8:ac:a9:77:87:a6:ce: 7d:72:49:38:d6:fc:bf:17:51:f4:78:87:27:f0:20: fc:54:a1:d3:85:17:c7:e7:7d:ef:0f:f1:d8:11:e7: dd:d4:6d:af:b6:46:f1:9b:72:43:d1:15:12:a3:fe: cc:60:1b:68:e5:ea:77:fe:3f:a9:f5:69:10:19:1c: 1d:03:a5:0b:b6:34:0b:40:c1:d4:31:70:28:82:5c: 0e:be:f9:14:be:57:b5:40:73:ea:fc:01:5b:18:81: 85:0d:dd:d5:07:59:71:43:96:47:12:fa:32:dd:9d: 50:a0:d0:32:bd:a4:eb:f1:89:7e:e6:2b:92:a5:75: db:92:26:34:19:9a:71:87:30:01:12:35:ca:5d:7a: cc:81:ac:5d:1a:5f:13:71:cc:c7:e4:bd:27:a8:04: a6:12:5b:99:35:62:54:53:d3:a8:ab:5f:5e:d3:a7: d8:9d:d0:7a:d5:14:f6:46:77:e3:b1:7e:f2:53:79: 3d:d5:bd:68:26:ae:04:08:4d:5f:f9:10:a3:89:d3: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:53:C2:75:28:6E:E2:83:3E:02:AA:70:60:A7:7D:7B:2B:91:FB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3937d9f3-56bb-32dc-b40d-3096669be6bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:81:9a:25:5f:1b:15:b2:fb:9a:65:4c:57:0d:3f:04:8c:8e: 80:cb:d6:f7:88:04:a9:b6:3e:1e:d9:1a:22:ab:85:ae:d6:60: 6a:0e:5d:08:6b:b6:07:40:a5:a6:95:60:bc:aa:0f:04:ae:2e: 0c:a4:e5:3b:c6:e7:a1:fd:e5:d9:47:14:20:b3:54:93:88:ea: 8e:94:42:84:3c:e1:a8:8a:43:17:ac:ef:2e:64:51:b1:a3:44: f0:ca:44:d4:62:a0:ee:fe:2b:4b:dc:6a:3f:bb:96:d7:2e:b1: 2a:f0:11:43:ab:13:26:e2:9c:37:eb:06:97:8d:08:0f:cd:0d: a5:f0:e9:bf:b0:22:07:1a:7b:3f:7a:21:f0:24:94:9b:13:51: b5:cf:44:57:05:c6:93:32:e5:6a:95:66:61:70:d5:e3:5d:17: cc:31:ac:dc:3c:26:2c:37:91:6e:4d:df:9f:05:56:61:a8:f2: a0:63:9a:dc:26:08:f5:d2:08:be:dd:09:66:fa:40:62:4e:94: c3:f0:44:f0:02:39:66:4b:7b:01:d0:c0:0e:ab:7b:50:4c:51: 42:27:4b:5e:65:71:6e:42:51:96:d8:3d:a4:19:e5:ea:05:5f: 41:74:b6:b3:02:b8:cf:fa:5e:25:94:26:6a:49:54:67:5c:d2: 1d:fd:b4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHeRwEZ98w4DkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YjI2MmI3ZTQtZDZjYS00MmIzLWE4ZGUtOGE5YWJkM2M5MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pJkL+K4sHdcd+f0UBh0hTq+HHp5NALiXSEY tj1/o7r/EVn7T+vEZSppe7hDti+WcMQzrKisqXeHps59ckk41vy/F1H0eIcn8CD8 VKHThRfH533vD/HYEefd1G2vtkbxm3JD0RUSo/7MYBto5ep3/j+p9WkQGRwdA6UL tjQLQMHUMXAoglwOvvkUvle1QHPq/AFbGIGFDd3VB1lxQ5ZHEvoy3Z1QoNAyvaTr 8Yl+5iuSpXXbkiY0GZpxhzABEjXKXXrMgaxdGl8TcczH5L0nqASmEluZNWJUU9Oo q19e06fYndB61RT2RnfjsX7yU3k91b1oJq4ECE1f+RCjidOFsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9TwnUobuKDPgKqcGCnfXsrkftdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzkzN2Q5ZjMtNTZiYi0z MmRjLWI0MGQtMzA5NjY2OWJlNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGBmiVfGxWy+5plTFcNPwSMjoDL1veIBKm2Ph7ZGiKrha7WYGoOXQhr tgdApaaVYLyqDwSuLgyk5TvG56H95dlHFCCzVJOI6o6UQoQ84aiKQxes7y5kUbGj RPDKRNRioO7+K0vcaj+7ltcusSrwEUOrEybinDfrBpeNCA/NDaXw6b+wIgcaez96 IfAklJsTUbXPRFcFxpMy5WqVZmFw1eNdF8wxrNw8Jiw3kW5N358FVmGo8qBjmtwm CPXSCL7dCWb6QGJOlMPwRPACOWZLewHQwA6re1BMUUInS15lcW5CUZbYPaQZ5eoF X0F0trMCuM/6XiWUJmpJVGdc0h39tJ4= -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:01 2025 by rpki-client