$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa File: 5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa (raw, json) Hash identifier: JYyr9G7mxgDyXfMRguR4zIHua+keLqAsvncQsmL5E0g= Subject key identifier: 67:4E:82:F0:99:FB:F0:77:E9:13:AE:42:57:E4:83:85:12:BC:09:A3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F37604B9E5F520FFAE2F340 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:60:4b:9e:5f:52:0f:fa:e2:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=d8b41817-0a94-435e-8987-9f97ced018e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:e0:70:6e:c6:25:2b:44:87:f2:55:04:bf: dc:1f:17:6d:9a:de:dc:c0:fd:0e:5f:74:d9:22:e7: cd:ca:92:a0:aa:3c:8d:0e:c8:64:a2:6b:3f:85:a1: 20:9f:68:90:9c:16:91:98:33:43:f2:4d:70:46:a9: 37:b8:55:86:63:a8:61:8e:c2:6b:a3:4e:4a:08:fe: 61:e5:4d:66:4a:b9:30:04:59:d6:d8:b2:19:38:51: 25:c8:84:94:ef:86:b3:63:b6:5e:1e:3d:09:e0:c7: 0d:b1:29:55:9e:24:3d:d3:fb:d8:d6:86:dc:70:f8: be:0a:54:61:ef:b2:15:e5:fa:9d:80:7a:56:b6:a2: 57:b8:90:eb:7f:3e:87:98:a8:f2:30:ab:c7:01:14: 22:6f:df:84:f2:95:34:03:ad:76:20:8c:70:12:51: e8:58:91:48:ef:9b:aa:60:63:bb:fb:1d:07:ed:84: d6:cb:cb:e2:5c:ad:e8:68:38:58:a8:e8:2e:44:d2: 9f:e8:43:8e:80:a3:bc:1f:b0:67:d6:ad:8b:09:15: f4:de:76:b7:90:c2:28:b6:5c:59:0b:e1:4f:54:e8: 96:dc:bc:38:01:cd:4b:1c:c2:f3:91:2a:b9:7e:e2: ca:c7:ca:4a:5a:28:96:c9:85:43:65:cf:4b:ca:97: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:82:F0:99:FB:F0:77:E9:13:AE:42:57:E4:83:85:12:BC:09:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cc19c8e-db1d-384d-9e4e-84ec8e22a25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b3:71:bf:a3:b7:f9:78:2a:c4:58:0e:77:a8:ef:a6:15:62: f6:6b:5a:e9:6b:b6:1c:12:f0:be:13:98:62:9a:f2:c6:24:ab: d1:c1:a7:97:17:b8:ca:ac:7e:06:07:e3:92:a7:a0:44:7e:98: 70:74:62:c1:3a:9f:eb:65:87:54:51:42:be:e5:b0:8e:eb:52: c9:6f:b4:15:d7:79:70:d9:c3:0a:49:31:f6:2c:22:6f:71:13: 79:a9:e4:7a:5f:d6:0d:44:9d:9b:69:78:f7:e9:7b:5e:99:b7: 76:cb:9c:2d:5c:63:61:a3:9d:0c:1d:83:e8:9c:39:84:35:55: 4e:53:ad:31:f3:79:6e:fa:f6:93:37:ca:e6:af:8c:ac:d3:69: 75:15:79:33:80:b0:f9:13:b8:2c:54:79:b9:c0:e6:dc:38:79: 34:8f:84:79:39:7f:b2:a8:f9:86:28:58:bd:a6:cf:f2:8f:37: f9:23:86:61:db:02:06:47:50:46:e6:2b:ce:fe:da:c8:a4:2b: b3:8f:ba:da:c2:b8:88:de:dc:b8:7b:4d:b0:a6:64:b9:55:33: e7:81:9e:53:ce:d1:73:00:98:6f:a0:f8:20:26:af:10:65:51: 95:ea:0c:dd:d4:6c:f3:23:fe:c5:42:86:80:6c:a3:71:14:06: 87:46:cd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2BLnl9SD/ri80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDhiNDE4MTctMGE5NC00MzVlLTg5ODctOWY5N2NlZDAxOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9PgcG7GJStEh/JVBL/cHxdtmt7cwP0OX3TZ IufNypKgqjyNDshkoms/haEgn2iQnBaRmDND8k1wRqk3uFWGY6hhjsJro05KCP5h 5U1mSrkwBFnW2LIZOFElyISU74azY7ZeHj0J4McNsSlVniQ90/vY1obccPi+ClRh 77IV5fqdgHpWtqJXuJDrfz6HmKjyMKvHARQib9+E8pU0A612IIxwElHoWJFI75uq YGO7+x0H7YTWy8viXK3oaDhYqOguRNKf6EOOgKO8H7Bn1q2LCRX03na3kMIotlxZ C+FPVOiW3Lw4Ac1LHMLzkSq5fuLKx8pKWiiWyYVDZc9Lype/ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdOgvCZ+/B36ROuQlfkg4USvAmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWNjMTljOGUtZGIxZC0z ODRkLTllNGUtODRlYzhlMjJhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6zcb+jt/l4KsRYDneo76YVYvZrWulrthwS8L4TmGKa8sYkq9HBp5cX uMqsfgYH45KnoER+mHB0YsE6n+tlh1RRQr7lsI7rUslvtBXXeXDZwwpJMfYsIm9x E3mp5Hpf1g1EnZtpePfpe16Zt3bLnC1cY2GjnQwdg+icOYQ1VU5TrTHzeW769pM3 yuavjKzTaXUVeTOAsPkTuCxUebnA5tw4eTSPhHk5f7Ko+YYoWL2mz/KPN/kjhmHb AgZHUEbmK87+2sikK7OPutrCuIje3Lh7TbCmZLlVM+eBnlPO0XMAmG+g+CAmrxBl UZXqDN3UbPMj/sVChoBso3EUBodGzVI= -----END CERTIFICATE-----Generated at Thu Oct 9 21:41:02 2025 by rpki-client