$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa File: 8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa (raw, json) Hash identifier: B6cFf9QOzcTzNHBTZNZWEBWCh62Ps3l9HG/Z3qsLXFI= Subject key identifier: 13:25:1D:66:41:6E:CA:66:ED:31:FE:91:66:1B:D8:9D:85:CE:0A:5F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C82CEADA7C9DFDF187520 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:82:ce:ad:a7:c9:df:df:18:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=7b921a48-18f6-423c-ae28-a20163186d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:12:4c:cb:3b:7c:a9:4f:d0:05:f4:1b:5e: d2:8b:b8:88:23:57:6a:6d:04:1d:9c:90:37:9d:8c: 3b:d2:a6:e1:09:e7:83:81:56:fa:a0:4e:f0:40:a7: 1e:0c:2c:23:ee:cb:d5:5b:fd:e0:b0:86:b6:da:2e: 45:6e:e4:f2:c6:e2:08:34:f0:85:4a:e0:a6:61:80: 42:1b:09:4e:3f:31:5f:ee:f5:61:82:eb:51:f1:3a: a2:74:1c:d6:15:55:e0:7b:5b:c5:0e:bb:4f:64:1d: ff:cf:91:cc:38:a1:70:60:45:d6:9a:30:f0:10:3d: 88:cc:b4:dc:74:c8:a9:d2:b9:3d:b9:23:32:ba:d9: 0e:20:75:62:b6:27:68:5c:d6:aa:ff:a2:4b:47:32: cf:48:7f:ee:e0:3c:64:46:0d:53:e4:ee:2f:81:82: 5f:f1:cd:00:78:fc:e0:14:52:9d:a8:18:f8:74:5c: 93:56:ca:b9:55:a5:04:b5:3f:f3:82:21:fc:f3:8c: 09:35:46:06:eb:6a:f5:d2:5b:c6:2a:3b:a8:da:fe: 53:ea:a1:fa:02:2f:3d:81:3f:51:bb:0d:b7:0a:88: d7:5b:20:5a:dd:ef:5e:72:36:3f:67:1a:ce:09:78: e5:c7:36:d3:53:73:b4:a1:83:ab:f6:bd:67:2c:cd: 36:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:1D:66:41:6E:CA:66:ED:31:FE:91:66:1B:D8:9D:85:CE:0A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e9:2f:1e:c7:f2:8f:ec:8e:bf:31:17:03:70:3a:bb:c4:8c: b5:2e:b3:64:40:27:0b:d7:13:b2:19:c1:a2:a9:69:2e:b8:27: cb:87:eb:f4:12:06:88:4d:27:9c:58:cd:e1:7a:9b:5a:1a:40: 58:39:b7:af:70:50:e5:af:e7:92:7d:8f:10:0a:5e:43:7b:cc: 27:0b:c0:80:7f:4a:9a:98:75:f7:e3:df:f7:c2:e2:f2:66:12: e5:54:f6:92:e1:90:09:2b:1b:86:fb:28:84:84:e4:64:5b:1b: 01:89:bd:87:cf:21:db:03:d0:11:27:17:1b:3c:4a:5c:46:9e: 96:e6:bf:8c:af:11:48:1f:14:b8:fc:10:72:12:7c:92:b7:a9: 71:f3:76:6c:99:28:b5:98:d0:f3:4b:48:3d:18:c8:08:99:f3: d3:1f:5e:62:d5:b6:b9:64:48:74:97:76:d7:ad:da:2a:c6:75: ff:af:3d:70:b0:ab:79:5b:c8:90:8c:cf:6f:d1:0f:18:87:25: 37:e8:30:ac:81:f6:1d:20:76:d5:0d:14:93:8d:94:20:9a:ff: bc:da:33:41:11:e8:94:8e:9b:ed:a5:35:63:f2:58:2a:95:62: 7d:40:fd:b6:13:7b:cd:ca:9c:74:87:5a:49:a2:d7:87:17:64: 99:72:ce:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDILOrafJ398YdSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk N2I5MjFhNDgtMThmNi00MjNjLWFlMjgtYTIwMTYzMTg2ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRMSTMs7fKlP0AX0G17Si7iII1dqbQQdnJA3 nYw70qbhCeeDgVb6oE7wQKceDCwj7svVW/3gsIa22i5FbuTyxuIINPCFSuCmYYBC GwlOPzFf7vVhgutR8TqidBzWFVXge1vFDrtPZB3/z5HMOKFwYEXWmjDwED2IzLTc dMip0rk9uSMyutkOIHVitidoXNaq/6JLRzLPSH/u4DxkRg1T5O4vgYJf8c0AePzg FFKdqBj4dFyTVsq5VaUEtT/zgiH884wJNUYG62r10lvGKjuo2v5T6qH6Ai89gT9R uw23CojXWyBa3e9ecjY/ZxrOCXjlxzbTU3O0oYOr9r1nLM02oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMlHWZBbspm7TH+kWYb2J2FzgpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGE3MjRmZmItZWU4ZC0z ZWQ1LTk1NmUtN2VmZGUzOWVlOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvpLx7H8o/sjr8xFwNwOrvEjLUus2RAJwvXE7IZwaKpaS64J8uH6/QS BohNJ5xYzeF6m1oaQFg5t69wUOWv55J9jxAKXkN7zCcLwIB/SpqYdffj3/fC4vJm EuVU9pLhkAkrG4b7KISE5GRbGwGJvYfPIdsD0BEnFxs8SlxGnpbmv4yvEUgfFLj8 EHISfJK3qXHzdmyZKLWY0PNLSD0YyAiZ89MfXmLVtrlkSHSXdtet2irGdf+vPXCw q3lbyJCMz2/RDxiHJTfoMKyB9h0gdtUNFJONlCCa/7zaM0ER6JSOm+2lNWPyWCqV Yn1A/bYTe83KnHSHWkmi14cXZJlyzu8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:17 2025 by rpki-client