$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa File: 3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa (raw, json) Hash identifier: oomd8KO4QEI5442Cli8qhwzQx3a7IOzDNxXqar1i0DA= Subject key identifier: A5:4F:04:3C:AD:AC:E4:5F:AA:5C:3D:65:1F:55:00:11:D7:7B:39:2B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3745A3ADC6C65ED54F5C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:45:a3:ad:c6:c6:5e:d5:4f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=b5e4a601-96a7-4965-b7d2-b18af4ba4bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:14:13:3e:48:5f:11:21:5a:f0:be:a2:12: bd:e9:d3:39:65:77:b8:dd:93:89:de:2a:36:3d:c3: b6:8c:8e:30:7d:e8:a8:0f:fa:65:60:62:32:0a:ec: df:bb:dc:d7:4c:ac:21:c1:61:f0:42:b9:99:59:97: ca:df:28:2d:bf:0f:0a:4f:c0:ce:26:58:f7:06:8c: 24:e7:39:61:6f:74:76:c2:f4:9d:5f:1c:00:82:db: 54:a4:55:4b:5b:fb:1d:23:1a:b6:ca:50:ad:93:1a: 99:dc:d0:ac:ad:5c:a1:23:2e:32:c7:fb:53:40:a6: 04:44:ff:9b:6c:73:53:14:a3:2d:b8:45:62:c9:9d: ed:3d:ff:af:30:41:e6:84:9b:35:40:f6:28:b4:6a: 3a:10:cf:02:7e:db:8e:f8:df:b9:80:3d:25:c3:cf: 50:88:fb:f8:bd:6d:24:b7:60:1a:99:71:c2:c2:e6: 88:5e:f1:44:90:ce:64:44:b2:91:6b:c3:4a:bc:3a: 91:3b:4c:96:10:ec:25:ff:b1:c6:27:18:6e:5f:c5: cb:4a:4a:39:5b:d7:e9:ff:15:c1:e3:fe:1c:9a:db: 94:43:2a:14:10:c8:a6:ea:a5:f3:26:ad:89:1c:fe: 8b:4e:94:82:51:8c:f3:1b:88:df:a6:16:2e:c8:27: bd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:04:3C:AD:AC:E4:5F:AA:5C:3D:65:1F:55:00:11:D7:7B:39:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8f:30:06:45:c3:d8:1a:60:d7:31:c7:18:98:66:fc:67:75: 9f:5a:c4:ce:0a:73:64:a9:15:6c:35:56:c8:12:02:91:4b:66: a6:95:2c:30:5a:de:3d:59:54:3c:71:9e:53:ad:27:41:ac:e9: b8:39:7a:0f:81:15:4a:5c:07:c8:67:41:86:60:08:b8:76:c8: 75:ea:06:0f:70:76:ef:32:4c:6d:fd:d2:91:57:6a:2f:90:02: 78:40:25:80:21:3f:6e:39:74:13:45:52:92:d2:3d:82:94:67: 36:b6:67:65:75:3e:f8:64:ca:81:16:a3:00:6e:dc:5b:54:de: b4:69:8a:33:40:f7:71:d2:b1:2d:91:55:25:3e:98:4e:fd:d5: 54:b0:9b:da:3d:90:d7:e4:b0:b0:f3:ee:a9:44:6f:29:43:aa: 42:01:6c:95:10:79:83:06:e1:60:88:2d:2a:88:d8:0e:47:6d: c0:4b:53:d7:a1:48:62:f1:de:bd:88:a2:53:c5:09:25:b2:da: 0c:ee:81:f3:e9:f6:65:ae:7a:17:27:76:9c:e1:c1:a2:92:c9: 92:76:f1:4d:cf:fa:13:05:fe:4d:67:21:aa:24:87:82:0c:11: 0d:47:cb:63:1e:12:0b:ae:46:37:3b:1e:06:4b:4e:8d:1e:6f: e4:95:46:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0WjrcbGXtVPXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YjVlNGE2MDEtOTZhNy00OTY1LWI3ZDItYjE4YWY0YmE0YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXMUEz5IXxEhWvC+ohK96dM5ZXe43ZOJ3io2 PcO2jI4wfeioD/plYGIyCuzfu9zXTKwhwWHwQrmZWZfK3ygtvw8KT8DOJlj3Bowk 5zlhb3R2wvSdXxwAgttUpFVLW/sdIxq2ylCtkxqZ3NCsrVyhIy4yx/tTQKYERP+b bHNTFKMtuEViyZ3tPf+vMEHmhJs1QPYotGo6EM8CftuO+N+5gD0lw89QiPv4vW0k t2AamXHCwuaIXvFEkM5kRLKRa8NKvDqRO0yWEOwl/7HGJxhuX8XLSko5W9fp/xXB 4/4cmtuUQyoUEMim6qXzJq2JHP6LTpSCUYzzG4jfphYuyCe9HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVPBDytrORfqlw9ZR9VABHXezkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2NmZmFlNDAtNjI2MS0z NWVlLTlmZjktNmRlM2Y2ZWUzOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuPMAZFw9gaYNcxxxiYZvxndZ9axM4Kc2SpFWw1VsgSApFLZqaVLDBa 3j1ZVDxxnlOtJ0Gs6bg5eg+BFUpcB8hnQYZgCLh2yHXqBg9wdu8yTG390pFXai+Q AnhAJYAhP245dBNFUpLSPYKUZza2Z2V1PvhkyoEWowBu3FtU3rRpijNA93HSsS2R VSU+mE791VSwm9o9kNfksLDz7qlEbylDqkIBbJUQeYMG4WCILSqI2A5HbcBLU9eh SGLx3r2IolPFCSWy2gzugfPp9mWuehcndpzhwaKSyZJ28U3P+hMF/k1nIaokh4IM EQ1Hy2MeEguuRjc7HgZLTo0eb+SVRnE= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:36 2025 by rpki-client