$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa File: 66b275d0-8075-3aac-897b-e4e1aa843cae.roa (raw, json) Hash identifier: movxkqxYRa4gK/zRsrcQATW3o8+JjzvS+iC0bp38IcM= Subject key identifier: A1:0C:DE:FE:23:BB:B6:12:92:E6:B9:C1:06:67:1C:67:7E:75:A9:BD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C95F9C94CD6D246614840 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:95:f9:c9:4c:d6:d2:46:61:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=e575836d-05be-4b87-848f-989050bf05e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:b3:c8:a0:ae:26:bd:b6:bd:6c:8a:3e:04: ad:cf:d7:c7:60:07:3f:6b:ed:81:fe:0b:f3:b5:d0: 7b:43:03:8d:5a:93:3a:71:3a:3a:ce:20:c7:91:2d: c2:69:2a:13:45:71:a3:4e:f3:d3:21:9f:12:62:a5: 0b:5c:f7:95:f4:5e:2d:14:1d:75:9d:91:bd:56:40: 7c:e9:0b:6f:47:d2:27:57:4f:00:4f:c4:6a:28:b7: 3b:00:c0:6b:71:5b:36:7d:8a:63:ee:ba:11:57:b0: aa:a8:d7:76:35:93:ac:4d:0e:75:e3:28:61:45:d3: 62:c7:66:23:7b:ff:1b:eb:47:b4:cb:27:a4:6d:27: 41:ed:e9:46:fc:28:c7:fe:f2:b0:fc:57:d0:59:1a: f8:6b:8a:8e:36:7b:b4:d6:5a:ce:fa:f8:36:66:4e: 05:17:51:4b:69:50:fc:04:77:f3:9f:2b:6e:82:26: 79:ae:28:80:f9:77:c0:01:a0:72:9d:68:53:1c:16: 1a:8d:5d:55:15:04:4a:b6:0e:82:f8:8a:ce:5f:4b: 0d:e7:39:63:24:ed:71:96:11:a3:47:d5:a0:a9:79: 6d:18:9d:ae:ea:db:69:c3:a2:83:4b:27:96:91:69: ab:b4:c5:8e:8d:cf:22:fe:b6:f7:a4:16:62:61:e4: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0C:DE:FE:23:BB:B6:12:92:E6:B9:C1:06:67:1C:67:7E:75:A9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6b:8f:c7:93:0f:0f:17:28:f8:7e:e5:f3:bb:67:f1:cc:18: a8:1a:4f:74:d1:49:94:91:e2:94:0b:5a:8e:20:03:bf:3f:b0: 0e:37:b3:fb:ff:fa:12:5e:8f:fd:63:a0:13:60:f2:38:9f:8b: c0:7d:30:32:52:7a:33:3c:47:39:e0:57:2d:38:1c:5a:9e:0b: 6f:ef:af:b2:59:fd:3c:1a:53:39:f6:ea:46:44:af:f2:0e:33: 76:8c:a3:7e:a3:dc:c8:57:7e:bc:b8:83:0f:ce:af:2a:ba:b2: 65:a0:7e:04:24:b9:45:27:ba:b5:e0:2c:a4:0a:fa:0a:ce:51: 0a:60:42:f3:db:fc:bf:fb:b2:d0:d1:fc:4c:44:ac:fc:6b:86: 49:a6:51:d2:ac:87:91:05:34:61:8c:ff:69:94:f3:e8:82:02: 62:11:70:13:9c:5f:8a:53:38:12:73:4a:96:6d:dd:b1:7e:fd: f8:11:ee:84:3f:16:b4:ae:34:cb:56:88:7a:b8:fd:3e:cc:97: e9:02:c7:d0:64:3e:1f:42:7d:83:81:f2:91:55:fa:be:d1:09: b2:72:a3:2e:ac:e0:b4:5f:32:70:66:b4:f6:40:14:e3:fc:1e: 23:fe:95:ae:22:ff:3c:68:2c:d0:d9:db:70:7f:74:b6:37:8a: 7c:72:c6:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJX5yUzW0kZhSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTU3NTgzNmQtMDViZS00Yjg3LTg0OGYtOTg5MDUwYmYwNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUOzyKCuJr22vWyKPgStz9fHYAc/a+2B/gvz tdB7QwONWpM6cTo6ziDHkS3CaSoTRXGjTvPTIZ8SYqULXPeV9F4tFB11nZG9VkB8 6QtvR9InV08AT8RqKLc7AMBrcVs2fYpj7roRV7CqqNd2NZOsTQ514yhhRdNix2Yj e/8b60e0yyekbSdB7elG/CjH/vKw/FfQWRr4a4qONnu01lrO+vg2Zk4FF1FLaVD8 BHfznytugiZ5riiA+XfAAaBynWhTHBYajV1VFQRKtg6C+IrOX0sN5zljJO1xlhGj R9WgqXltGJ2u6ttpw6KDSyeWkWmrtMWOjc8i/rb3pBZiYeQskQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEM3v4ju7YSkua5wQZnHGd+dam9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjZiMjc1ZDAtODA3NS0z YWFjLTg5N2ItZTRlMWFhODQzY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxrj8eTDw8XKPh+5fO7Z/HMGKgaT3TRSZSR4pQLWo4gA78/sA43s/v/ +hJej/1joBNg8jifi8B9MDJSejM8RzngVy04HFqeC2/vr7JZ/TwaUzn26kZEr/IO M3aMo36j3MhXfry4gw/Oryq6smWgfgQkuUUnurXgLKQK+grOUQpgQvPb/L/7stDR /ExErPxrhkmmUdKsh5EFNGGM/2mU8+iCAmIRcBOcX4pTOBJzSpZt3bF+/fgR7oQ/ FrSuNMtWiHq4/T7Ml+kCx9BkPh9CfYOB8pFV+r7RCbJyoy6s4LRfMnBmtPZAFOP8 HiP+la4i/zxoLNDZ23B/dLY3inxyxpk= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:14 2025 by rpki-client