$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa File: 42f180de-0318-31a1-a52c-970141c3e9c7.roa (raw, json) Hash identifier: Au8Pq93WzySF30z6UW17yIbt4VkR59XooKWDpO1k/QY= Subject key identifier: 6D:FA:64:88:89:16:C4:95:C4:40:45:A0:4D:2F:9D:57:3B:E9:7D:5E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7015FE51F7E666E98800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:70:15:fe:51:f7:e6:66:e9:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=fb4e78f7-45fe-432c-aaf9-f5fdd103f836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:e7:12:c1:47:e0:0e:a4:00:51:28:6e:49: 82:cc:1a:63:74:17:c1:f8:ea:f6:aa:f5:41:bf:d2: 9f:e3:4c:c0:0e:4f:01:db:c3:2d:0d:54:c9:37:c4: f6:92:eb:5a:07:6e:71:54:0b:95:d3:e5:83:43:26: c7:0e:71:c4:5b:1e:7c:66:70:e2:18:39:cb:59:12: 28:93:7b:31:61:14:e5:ce:6a:5f:8a:7a:c0:e4:54: 67:66:cc:66:d5:5e:17:f9:9d:73:f9:dd:c4:e5:dc: cc:37:ae:4c:47:8f:cf:3c:2a:8a:c9:28:7b:3f:11: 8d:68:65:d8:7d:87:e2:93:c6:fd:1e:fc:34:23:ba: f3:16:64:d5:22:72:9c:30:8d:1a:04:eb:7a:0e:b5: 54:d4:fb:40:6c:8d:fa:9d:dd:f3:29:32:c3:4b:0d: 93:8e:f6:1b:f4:ee:ad:63:e7:23:95:ae:02:6b:fb: d9:87:d3:b3:f3:70:37:0c:7d:41:1e:a6:d9:60:7c: 3f:08:de:35:49:6c:e8:7d:52:d4:04:2d:a2:cc:f9: d5:0c:68:a9:a4:f5:3f:e8:f5:64:52:2d:2c:8b:8a: 33:3e:00:90:4a:47:dc:0c:fb:1d:6d:38:01:9b:51: 9d:9e:e4:96:56:c3:b1:36:3f:e6:86:b6:07:77:82: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FA:64:88:89:16:C4:95:C4:40:45:A0:4D:2F:9D:57:3B:E9:7D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a0:b5:1a:ac:36:cf:e5:2a:d1:4b:de:5b:af:15:29:ca:94: be:a5:35:a3:e1:a4:75:60:6f:d1:6b:3c:bc:dd:d5:3d:a5:98: ab:50:22:d4:6a:8c:4e:b5:ba:68:c0:80:aa:46:f0:0f:72:e8: b4:b4:fc:35:09:cc:10:7e:49:d4:df:f3:9d:a2:b3:29:20:31: 83:ee:8a:86:c9:db:1a:f9:0a:47:2e:71:2c:58:72:76:64:dc: de:ab:c7:58:fa:f9:78:43:a0:75:fd:b6:32:0c:06:ea:74:82: 4e:eb:2f:61:18:51:ae:b6:a1:73:33:7c:d8:66:f2:85:6f:7b: dc:6c:e5:2e:49:f7:f3:40:de:f5:99:e9:b4:c5:7e:ff:c5:04: d7:f7:21:08:d4:c9:23:5a:46:89:6c:84:a5:3c:92:af:07:56: 2a:0f:4c:43:6f:84:6d:17:78:71:b0:59:18:52:da:48:e5:ff: 31:5a:b7:7c:9b:55:14:61:c8:17:9f:85:59:f9:f5:17:96:59: 2f:2e:9d:b3:d4:aa:df:0e:e8:23:64:d7:d1:57:21:f3:33:ee: 89:56:8c:c9:ae:8b:02:01:dc:25:89:d8:b0:fc:74:79:c9:4b: 1e:53:76:f1:c1:19:5a:56:b4:0f:c3:c2:54:fd:e8:ba:93:a8: af:74:7d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHAV/lH35mbpiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmI0ZTc4ZjctNDVmZS00MzJjLWFhZjktZjVmZGQxMDNmODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/nEsFH4A6kAFEobkmCzBpjdBfB+Or2qvVB v9Kf40zADk8B28MtDVTJN8T2kutaB25xVAuV0+WDQybHDnHEWx58ZnDiGDnLWRIo k3sxYRTlzmpfinrA5FRnZsxm1V4X+Z1z+d3E5dzMN65MR4/PPCqKySh7PxGNaGXY fYfik8b9Hvw0I7rzFmTVInKcMI0aBOt6DrVU1PtAbI36nd3zKTLDSw2TjvYb9O6t Y+cjla4Ca/vZh9Oz83A3DH1BHqbZYHw/CN41SWzofVLUBC2izPnVDGippPU/6PVk Ui0si4ozPgCQSkfcDPsdbTgBm1GdnuSWVsOxNj/mhrYHd4KZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG36ZIiJFsSVxEBFoE0vnVc76X1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDJmMTgwZGUtMDMxOC0z MWExLWE1MmMtOTcwMTQxYzNlOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqgtRqsNs/lKtFL3luvFSnKlL6lNaPhpHVgb9FrPLzd1T2lmKtQItRq jE61umjAgKpG8A9y6LS0/DUJzBB+SdTf852isykgMYPuiobJ2xr5CkcucSxYcnZk 3N6rx1j6+XhDoHX9tjIMBup0gk7rL2EYUa62oXMzfNhm8oVve9xs5S5J9/NA3vWZ 6bTFfv/FBNf3IQjUySNaRolshKU8kq8HVioPTENvhG0XeHGwWRhS2kjl/zFat3yb VRRhyBefhVn59ReWWS8unbPUqt8O6CNk19FXIfMz7olWjMmuiwIB3CWJ2LD8dHnJ Sx5TdvHBGVpWtA/DwlT96LqTqK90fWE= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:25 2025 by rpki-client