$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa File: 41ac104c-8079-32fa-8679-7da33c6a1341.roa (raw, json) Hash identifier: K4vAn+NzrUpd9jW8UCXDO4gPqtIXsxFL6vtNLIZraCw= Subject key identifier: 93:8D:BC:8D:5C:3A:3D:C5:81:E7:9A:54:D4:81:8A:CD:5D:94:A6:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F37684B1FF237439D924C20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:68:4b:1f:f2:37:43:9d:92:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=73eb3749-876b-448d-8da7-08a9f080ea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:e4:1a:79:a9:34:71:d3:70:06:7e:cb:6f: 15:b3:c1:08:7e:61:df:73:fc:ee:2f:73:c7:4a:e1: f2:7f:d2:2e:c6:25:5d:30:30:2a:41:31:94:ce:85: 2c:ce:34:0d:16:08:54:98:12:f7:77:80:e0:57:a4: 03:6b:6d:c1:b0:0f:81:08:17:3b:a7:1f:6f:0d:c2: 46:3b:72:9d:ce:0b:ad:eb:26:fd:0d:6b:cb:84:74: a0:b4:e6:82:a4:c1:f7:10:21:ef:31:56:59:b7:7f: a3:99:5a:b1:9f:a2:f3:95:bc:05:49:7f:6c:8a:3c: a8:91:27:c8:ce:6c:fa:15:bc:a1:50:69:2b:b0:d9: 94:92:68:ab:8a:d6:bf:39:f5:c6:32:cd:93:0d:f5: d6:08:be:03:e2:c5:98:4e:05:b1:19:73:ba:05:6a: b8:71:8c:4a:04:14:75:1f:fd:16:19:bb:f2:04:04: 68:25:fa:aa:db:eb:fe:75:b3:05:66:d3:7f:3f:a4: 22:be:9c:f8:20:6b:e8:ff:1e:99:e8:08:03:42:4f: 70:7d:bc:25:5f:5a:f1:35:11:30:1e:71:c3:6c:74: 88:71:12:e9:67:e2:d2:d8:1d:90:93:77:f9:ac:fd: 91:45:2e:5e:80:84:de:d1:d4:91:9e:97:40:29:39: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8D:BC:8D:5C:3A:3D:C5:81:E7:9A:54:D4:81:8A:CD:5D:94:A6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6d:2f:90:e5:d9:26:0e:80:a0:14:16:f2:ad:de:07:65:97: 67:24:27:46:09:4b:7f:0f:07:4d:ec:20:ee:b9:33:51:aa:a2: 0d:0d:64:98:65:40:e7:08:52:1e:e3:e7:cd:68:7d:fd:e9:cd: 4a:a7:f6:02:f3:7a:68:96:64:2d:11:a9:e3:6d:3b:ea:66:4d: d6:5d:0c:69:76:01:09:f1:04:38:86:16:66:59:99:8a:39:7b: 4a:0d:06:49:b0:6b:85:f1:83:7c:54:5f:d0:d1:0d:9d:48:18: c9:91:73:19:22:1f:f7:71:dc:c3:65:ca:ec:e3:a6:b4:0d:d7: 52:a5:bb:c9:45:fa:c3:81:e9:c3:b6:37:b9:1e:56:66:ea:67: 36:af:3a:3e:98:f9:2f:1f:16:c2:7b:63:42:84:91:d3:78:14: 22:4b:df:99:12:c0:46:06:44:eb:9e:31:aa:35:a2:2d:61:ea: f7:c3:18:4c:ac:fb:93:60:df:28:13:a0:98:ef:4d:f8:d2:47: 6f:d4:ef:05:ce:d3:a7:9a:fc:04:b7:f5:3b:c5:10:37:5a:d0: 1f:4b:3d:3d:b0:0d:b6:d7:7b:a2:6b:da:a0:ee:7a:91:34:19: e3:e1:75:27:9c:1c:ed:86:7b:7c:14:e4:31:13:ab:39:42:42: df:8f:2b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2hLH/I3Q52STCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NzNlYjM3NDktODc2Yi00NDhkLThkYTctMDhhOWYwODBlYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0rkGnmpNHHTcAZ+y28Vs8EIfmHfc/zuL3PH SuHyf9IuxiVdMDAqQTGUzoUszjQNFghUmBL3d4DgV6QDa23BsA+BCBc7px9vDcJG O3Kdzgut6yb9DWvLhHSgtOaCpMH3ECHvMVZZt3+jmVqxn6LzlbwFSX9sijyokSfI zmz6FbyhUGkrsNmUkmirita/OfXGMs2TDfXWCL4D4sWYTgWxGXO6BWq4cYxKBBR1 H/0WGbvyBARoJfqq2+v+dbMFZtN/P6Qivpz4IGvo/x6Z6AgDQk9wfbwlX1rxNREw HnHDbHSIcRLpZ+LS2B2Qk3f5rP2RRS5egITe0dSRnpdAKTlSOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJONvI1cOj3FgeeaVNSBis1dlKZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFhYzEwNGMtODA3OS0z MmZhLTg2NzktN2RhMzNjNmExMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1tL5Dl2SYOgKAUFvKt3gdll2ckJ0YJS38PB03sIO65M1Gqog0NZJhl QOcIUh7j581off3pzUqn9gLzemiWZC0RqeNtO+pmTdZdDGl2AQnxBDiGFmZZmYo5 e0oNBkmwa4Xxg3xUX9DRDZ1IGMmRcxkiH/dx3MNlyuzjprQN11Klu8lF+sOB6cO2 N7keVmbqZzavOj6Y+S8fFsJ7Y0KEkdN4FCJL35kSwEYGROueMao1oi1h6vfDGEys +5Ng3ygToJjvTfjSR2/U7wXO06ea/AS39TvFEDda0B9LPT2wDbbXe6Jr2qDuepE0 GePhdSecHO2Ge3wU5DETqzlCQt+PK2c= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:28 2025 by rpki-client