$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71e25789-552e-32cd-b357-f5031b3e5994.roa File: 71e25789-552e-32cd-b357-f5031b3e5994.roa (raw, json) Hash identifier: kZJ8P2FlQclTOAVon1vrDZ0tNAK5dfGJ95FX/CyTd/g= Subject key identifier: 67:A0:19:16:9B:7A:1C:17:36:AF:C7:15:DC:DF:5C:1B:7E:A1:D4:4E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3773EBD0026A7277E89680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71e25789-552e-32cd-b357-f5031b3e5994.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:73:eb:d0:02:6a:72:77:e8:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=67802457-6617-425a-8953-39cf69591c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:81:36:5b:3d:18:fd:fd:d0:77:08:ae:0f: 38:14:40:fb:94:6b:e5:30:87:70:5f:2c:70:57:95: 93:e4:97:7f:f3:01:0a:16:09:4a:ab:9c:17:dd:3f: 33:db:17:bc:9e:8a:a6:ef:bb:ea:33:72:3b:63:0a: c3:94:5c:f5:bd:de:09:78:8f:02:15:78:a5:e0:67: fc:a2:b8:8d:45:60:4f:66:f4:46:83:2f:82:84:20: d9:34:2c:ba:3f:71:84:71:fc:5a:64:79:25:85:c9: a4:1c:f3:ac:24:07:0b:85:38:41:30:4b:1f:16:86: 8d:1f:3e:8c:4d:a4:f0:4b:bb:42:4a:5e:37:f1:e6: 04:2c:5b:cd:59:ee:08:42:77:a4:9c:92:80:5d:46: be:80:50:cb:62:b5:27:cd:54:e4:31:ae:c1:7a:5e: a0:2b:81:26:b4:7b:1e:3e:77:1e:f3:27:87:f9:1f: 8a:8b:11:46:f0:78:91:57:53:32:44:b0:e7:f5:12: 2f:ba:ae:bc:bd:94:91:94:4b:67:95:11:73:2b:8f: 1a:e0:91:6d:a5:df:15:12:3f:21:07:77:b2:18:62: 19:75:31:32:94:5a:5c:44:de:aa:fb:bc:66:4a:87: 9a:2d:e3:c2:f0:96:fc:bb:a3:8c:e2:a0:a4:63:3b: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A0:19:16:9B:7A:1C:17:36:AF:C7:15:DC:DF:5C:1B:7E:A1:D4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71e25789-552e-32cd-b357-f5031b3e5994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2b:91:2d:ae:4d:d4:e0:9f:7f:e7:30:6a:5f:34:02:70:7c: 75:07:26:29:54:25:ab:b8:2c:9c:90:d9:8a:28:6f:e4:d8:7e: d1:93:a7:75:67:00:d5:e1:ce:c2:ba:35:8c:af:b7:f4:15:44: 28:d0:7b:3a:70:02:7c:62:08:52:b0:a4:09:a3:34:9e:aa:8a: fb:7a:fe:88:1a:35:a1:d0:9e:ee:20:56:ed:51:30:42:33:19: 4e:b2:ba:b7:61:c0:cc:d4:a0:71:6b:39:e0:d5:67:f1:d0:2c: d0:74:72:6b:7a:7a:42:07:0d:2f:2a:d8:9c:02:60:11:7a:bc: 5e:1e:9c:89:f9:5a:e2:f3:4a:9b:16:c0:7b:9c:52:33:e6:68: f2:89:98:2d:79:c3:f4:77:79:a4:54:ff:2f:21:ab:ca:df:c0: 88:e7:73:26:42:2e:5a:22:83:43:97:74:89:6e:b3:cc:0e:c9: 8a:39:cf:c5:36:4c:c9:0f:ff:83:94:7b:e9:67:b7:51:c0:a7: 35:69:14:da:90:fd:6c:9a:1c:c9:46:d5:10:ec:e2:46:1c:03: 8e:dd:63:6f:16:55:81:ae:f4:12:73:a8:46:92:c1:08:5f:b8: 89:33:8f:0a:5f:cc:54:61:b1:6b:d7:9d:e9:c4:d0:b6:43:f0: 31:10:45:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3Pr0AJqcnfoloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Njc4MDI0NTctNjYxNy00MjVhLTg5NTMtMzljZjY5NTkxYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NOBNls9GP390HcIrg84FED7lGvlMIdwXyxw V5WT5Jd/8wEKFglKq5wX3T8z2xe8noqm77vqM3I7YwrDlFz1vd4JeI8CFXil4Gf8 oriNRWBPZvRGgy+ChCDZNCy6P3GEcfxaZHklhcmkHPOsJAcLhThBMEsfFoaNHz6M TaTwS7tCSl438eYELFvNWe4IQneknJKAXUa+gFDLYrUnzVTkMa7Bel6gK4EmtHse Pnce8yeH+R+KixFG8HiRV1MyRLDn9RIvuq68vZSRlEtnlRFzK48a4JFtpd8VEj8h B3eyGGIZdTEylFpcRN6q+7xmSoeaLePC8Jb8u6OM4qCkYzuGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGegGRabehwXNq/HFdzfXBt+odROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzFlMjU3ODktNTUyZS0z MmNkLWIzNTctZjUwMzFiM2U1OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0rkS2uTdTgn3/nMGpfNAJwfHUHJilUJau4LJyQ2Yoob+TYftGTp3Vn ANXhzsK6NYyvt/QVRCjQezpwAnxiCFKwpAmjNJ6qivt6/ogaNaHQnu4gVu1RMEIz GU6yurdhwMzUoHFrOeDVZ/HQLNB0cmt6ekIHDS8q2JwCYBF6vF4enIn5WuLzSpsW wHucUjPmaPKJmC15w/R3eaRU/y8hq8rfwIjncyZCLloig0OXdIlus8wOyYo5z8U2 TMkP/4OUe+lnt1HApzVpFNqQ/WyaHMlG1RDs4kYcA47dY28WVYGu9BJzqEaSwQhf uIkzjwpfzFRhsWvXnenE0LZD8DEQRYM= -----END CERTIFICATE-----Generated at Thu Oct 9 20:01:14 2025 by rpki-client