$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ffbf2da-f8e9-38af-b2d5-b86237932089.roa File: 3ffbf2da-f8e9-38af-b2d5-b86237932089.roa (raw, json) Hash identifier: OWD8TIhIGf0UNk8aD5g07ZS2dhekYdwtuKEfg5yFnlg= Subject key identifier: B3:2F:D1:DB:ED:47:96:D0:BB:58:C1:82:48:3A:D1:C7:70:D8:4B:D4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C70A6B4423571C4A80CC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ffbf2da-f8e9-38af-b2d5-b86237932089.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:70:a6:b4:42:35:71:c4:a8:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=19cb00b7-c28f-4890-8ef1-513ec3634f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:f7:36:f2:6e:50:65:28:b7:9d:52:66:a6: 71:ca:b9:dc:7d:53:ed:7b:61:0b:7b:ed:08:8c:20: 4c:6a:cc:58:5a:07:71:3c:c2:d1:e6:6a:7f:de:aa: 69:de:fa:9c:61:80:a3:90:b5:d0:10:4e:85:8e:d0: 8e:61:6c:8a:18:03:27:c9:10:90:7b:bf:5b:1a:f7: a1:94:86:f5:7f:80:ca:1c:87:f7:3d:3a:a0:82:f4: 36:87:e1:e1:9c:1a:e3:25:fb:18:b3:9f:d1:23:64: 06:c9:47:01:12:30:b5:3d:96:92:26:6e:31:5c:67: cc:64:2f:f0:86:96:78:83:43:1e:9d:cb:a7:89:49: e7:b8:2f:42:97:76:cd:8c:55:af:b4:e7:26:ee:30: 8d:c1:1b:97:06:07:0d:4b:68:e0:66:44:82:4d:59: 57:61:a5:42:bd:d7:db:2d:75:11:d2:94:67:b6:d1: f4:26:6d:05:13:3f:cb:7d:26:21:5c:3e:98:3c:de: e4:12:df:90:a6:24:30:ca:18:82:77:bf:48:f1:f8: 01:e0:b9:a7:0b:22:d1:24:1e:cb:76:55:09:82:42: 4e:fc:59:35:ab:1e:0f:36:03:ce:e0:fb:b6:6b:bf: 92:88:31:0e:2d:0e:ac:31:1c:16:d8:63:2b:8d:87: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2F:D1:DB:ED:47:96:D0:BB:58:C1:82:48:3A:D1:C7:70:D8:4B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ffbf2da-f8e9-38af-b2d5-b86237932089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e6:b9:cd:6f:3d:1e:30:1c:10:71:f9:ab:c1:26:39:0e:33: 3c:73:86:5a:a7:67:49:e0:66:ea:42:5f:ed:ce:df:57:a6:59: 26:64:64:40:09:5e:f1:0f:66:77:8a:3f:a1:88:41:de:02:b8: 31:90:48:da:dc:dd:15:6a:36:68:01:78:3a:25:a3:57:b2:21: c6:b4:88:19:65:3f:ab:d4:fd:0f:b3:ad:c2:e2:48:b8:8b:01: d7:07:85:e9:fe:45:d2:a4:28:15:50:49:6e:28:68:2f:0c:f6: 2b:da:2d:4e:8c:6d:7f:b2:de:bb:b9:ff:c2:4b:82:46:06:62: c8:52:a3:af:c6:b0:46:9f:f9:cb:03:56:e0:ca:ba:dd:1d:7d: 55:ec:4b:c5:25:de:e3:99:af:40:99:d4:26:52:e6:2f:b6:6d: 20:29:fa:c5:c8:c9:97:c7:3e:5d:f6:ed:93:da:d2:d0:04:8b: 36:8a:09:11:ed:68:cf:4e:84:74:a8:46:53:82:ae:6b:f5:73: 55:2e:06:cf:dc:bc:b6:14:ba:5e:77:a9:95:cd:15:6d:7e:f8: 9f:02:5e:7f:f8:df:67:e3:98:d8:90:71:e9:53:60:80:e0:49: b1:a4:f8:4e:9a:79:5d:0a:a7:90:1c:d0:6b:79:31:e3:bc:5c: 8a:72:06:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHCmtEI1ccSoDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTljYjAwYjctYzI4Zi00ODkwLThlZjEtNTEzZWMzNjM0ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu/3NvJuUGUot51SZqZxyrncfVPte2ELe+0I jCBMasxYWgdxPMLR5mp/3qpp3vqcYYCjkLXQEE6FjtCOYWyKGAMnyRCQe79bGveh lIb1f4DKHIf3PTqggvQ2h+HhnBrjJfsYs5/RI2QGyUcBEjC1PZaSJm4xXGfMZC/w hpZ4g0MencuniUnnuC9Cl3bNjFWvtOcm7jCNwRuXBgcNS2jgZkSCTVlXYaVCvdfb LXUR0pRnttH0Jm0FEz/LfSYhXD6YPN7kEt+QpiQwyhiCd79I8fgB4LmnCyLRJB7L dlUJgkJO/Fk1qx4PNgPO4Pu2a7+SiDEOLQ6sMRwW2GMrjYdLlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMv0dvtR5bQu1jBgkg60cdw2EvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2ZmYmYyZGEtZjhlOS0z OGFmLWIyZDUtYjg2MjM3OTMyMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzmuc1vPR4wHBBx+avBJjkOMzxzhlqnZ0ngZupCX+3O31emWSZkZEAJ XvEPZneKP6GIQd4CuDGQSNrc3RVqNmgBeDolo1eyIca0iBllP6vU/Q+zrcLiSLiL AdcHhen+RdKkKBVQSW4oaC8M9ivaLU6MbX+y3ru5/8JLgkYGYshSo6/GsEaf+csD VuDKut0dfVXsS8Ul3uOZr0CZ1CZS5i+2bSAp+sXIyZfHPl327ZPa0tAEizaKCRHt aM9OhHSoRlOCrmv1c1UuBs/cvLYUul53qZXNFW1++J8CXn/432fjmNiQcelTYIDg SbGk+E6aeV0Kp5Ac0Gt5MeO8XIpyBk0= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:39 2025 by rpki-client