$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa File: 7085ed56-08ec-3dff-bfb2-c0a402571d39.roa (raw, json) Hash identifier: pmmhgZaHoHZrxSSXEkIOPwiDSaY02OJpCrUI37UPvfQ= Subject key identifier: A3:52:E1:CB:7D:88:F1:63:BB:14:C6:FD:83:C5:AD:EE:A3:27:3D:7F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C75FB32221D5E764CF080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:75:fb:32:22:1d:5e:76:4c:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=ffae59a7-0021-4077-a0f2-61a8e4fbb526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:35:ed:7c:03:b6:b1:21:4c:95:dd:41:7a: 65:df:a7:f2:c9:18:89:f7:5c:87:84:2d:c7:ac:1d: fe:f8:5f:62:53:70:29:57:52:7a:f5:29:c6:22:74: da:af:81:49:ad:aa:b5:12:b8:87:81:18:86:6b:f8: 85:8c:92:c6:db:c6:6d:4f:38:7c:1c:23:5a:8e:a4: 6a:ac:50:91:90:31:ae:6a:42:94:c8:e4:a2:1d:7d: d0:80:3f:1c:3a:4c:6b:a0:8c:6c:c3:1d:a6:7a:d7: 5c:f7:43:fb:a3:59:8a:09:73:32:19:24:08:18:d8: a4:25:00:86:8e:f2:dc:1d:51:f4:ac:26:a4:8b:0d: 7e:02:a1:a3:d7:0f:d7:fb:b6:df:b0:a1:10:70:eb: 1d:e7:ce:cb:36:a3:78:b6:1e:37:5b:5e:1d:de:78: 51:db:61:51:ba:6d:16:dc:c4:aa:dc:86:fc:09:0d: 94:86:b0:c0:4d:92:8a:8e:b8:21:29:c3:f9:e1:a7: 24:f3:3e:d7:80:bd:31:47:2a:e5:08:ab:ca:e3:c9: 8f:02:50:61:f6:ea:9d:17:4f:2b:80:da:4f:8d:df: 92:ff:58:7c:1a:f7:6e:60:ad:42:45:71:64:0b:7f: 4f:11:82:5b:7b:97:12:34:96:ac:90:b2:59:81:b2: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:E1:CB:7D:88:F1:63:BB:14:C6:FD:83:C5:AD:EE:A3:27:3D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:39:f4:ff:c8:c0:56:66:84:6b:41:42:fe:1f:64:d5:32:34: 32:64:1b:3f:78:1a:86:a6:bd:74:6e:49:84:f8:10:05:3f:0a: 08:8d:03:82:77:d8:d9:44:0e:85:65:9c:30:07:1b:22:8f:ca: 77:00:f7:6d:79:12:2e:73:c3:e2:9b:37:4b:7a:31:b2:48:d7: 71:25:3f:50:4e:52:19:1e:2d:c3:c1:d4:ac:05:fa:41:f5:9a: 1b:54:5c:af:1a:00:84:fe:7a:ba:82:16:d4:a2:0c:72:5e:68: 76:08:a1:37:bc:02:9e:72:3a:15:b8:15:fc:ab:78:4e:89:0e: 2c:8c:4a:a5:46:23:07:bb:a5:e1:7a:9e:c3:20:33:f2:6b:4a: 12:20:3e:da:a1:0f:55:07:88:c4:91:2a:b2:04:b6:e7:fb:2a: 15:cb:ae:3f:99:c4:ee:16:a7:d1:3e:6e:0a:9b:31:8e:bf:16: 3c:79:fe:9b:fc:6a:5c:12:18:4b:c1:94:25:e1:73:ed:1a:15: 5b:d9:3f:7a:7d:4f:bd:9b:3a:3c:dd:51:82:9d:6c:9d:b9:bb: 23:36:ef:04:ac:e1:85:81:86:92:ba:13:4a:0d:dd:39:d2:62: 15:9c:df:d9:17:03:64:90:c5:c9:a1:e8:b1:87:56:66:f8:ed: e9:ef:fb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHX7MiIdXnZM8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmZhZTU5YTctMDAyMS00MDc3LWEwZjItNjFhOGU0ZmJiNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXs17XwDtrEhTJXdQXpl36fyyRiJ91yHhC3H rB3++F9iU3ApV1J69SnGInTar4FJraq1EriHgRiGa/iFjJLG28ZtTzh8HCNajqRq rFCRkDGuakKUyOSiHX3QgD8cOkxroIxswx2metdc90P7o1mKCXMyGSQIGNikJQCG jvLcHVH0rCakiw1+AqGj1w/X+7bfsKEQcOsd587LNqN4th43W14d3nhR22FRum0W 3MSq3Ib8CQ2UhrDATZKKjrghKcP54ack8z7XgL0xRyrlCKvK48mPAlBh9uqdF08r gNpPjd+S/1h8GvduYK1CRXFkC39PEYJbe5cSNJaskLJZgbJUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNS4ct9iPFjuxTG/YPFre6jJz1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzA4NWVkNTYtMDhlYy0z ZGZmLWJmYjItYzBhNDAyNTcxZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk59P/IwFZmhGtBQv4fZNUyNDJkGz94GoamvXRuSYT4EAU/CgiNA4J3 2NlEDoVlnDAHGyKPyncA9215Ei5zw+KbN0t6MbJI13ElP1BOUhkeLcPB1KwF+kH1 mhtUXK8aAIT+erqCFtSiDHJeaHYIoTe8Ap5yOhW4FfyreE6JDiyMSqVGIwe7peF6 nsMgM/JrShIgPtqhD1UHiMSRKrIEtuf7KhXLrj+ZxO4Wp9E+bgqbMY6/Fjx5/pv8 alwSGEvBlCXhc+0aFVvZP3p9T72bOjzdUYKdbJ25uyM27wSs4YWBhpK6E0oN3TnS YhWc39kXA2SQxcmh6LGHVmb47env+3k= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:19 2025 by rpki-client