$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa File: a8835133-fb2f-31b1-84bb-28bccfab0933.roa (raw, json) Hash identifier: Rrf337g7+CwOUtbXkU78CP63u+Uvvl+lxMIxXlwrdYY= Subject key identifier: 10:09:77:A5:B2:A4:74:C7:E3:27:7D:35:E6:68:C3:D0:35:DB:D6:1E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C8D3F467845262EFF5100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8d:3f:46:78:45:26:2e:ff:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=e24066c7-3147-4aec-aa3d-f3cfc4bdd995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:1d:35:fa:aa:4f:5b:af:fc:b7:fc:9d:1a: 96:b3:bb:2f:49:86:e8:be:6d:06:13:35:0d:73:f2: 5f:3a:b5:db:78:5a:d3:5d:c3:63:40:79:52:c4:8c: d0:5d:f1:ec:67:c5:2d:94:6d:6c:38:f7:bf:0b:14: c3:ca:4b:e7:8d:e6:77:3f:98:ea:4c:43:dc:ee:16: 27:f5:20:23:b4:7d:bf:3c:16:02:58:2d:85:8e:8d: 19:1e:d3:d3:45:ef:6f:69:5d:80:5b:1a:8f:c3:06: 54:2d:fe:ce:63:ff:94:59:2a:52:14:3a:14:3c:32: 17:2d:a7:84:07:00:38:15:6b:95:dd:4b:0c:99:1e: 72:8d:29:93:f6:8a:55:ce:ca:2f:f0:37:ca:c4:00: 0d:68:a3:d6:ba:d4:26:69:79:91:a9:ac:e0:de:21: a2:4d:d1:45:88:ef:f8:6e:93:f8:8f:cb:da:28:d4: 58:fd:16:3f:23:b5:7f:2b:59:1c:9f:f1:fe:01:8c: 0d:19:ef:26:ca:dc:71:6a:98:ce:73:96:33:0f:91: 68:f6:71:95:1c:42:57:46:e0:cf:de:56:7b:dc:9d: ae:c1:12:73:3b:53:13:c5:3e:24:15:bc:86:ab:a6: fd:ae:fe:bb:55:79:ec:ec:06:86:0c:14:d3:78:17: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:77:A5:B2:A4:74:C7:E3:27:7D:35:E6:68:C3:D0:35:DB:D6:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:43:05:91:69:57:c5:fa:50:cb:f8:41:68:e1:a5:b3:46:c0: e3:84:8a:05:1d:b7:ea:e5:84:d6:46:89:88:5b:10:47:49:35: 31:43:04:99:6a:c8:51:9f:d5:fd:23:3e:ab:90:8f:43:91:79: 4b:ae:7e:0c:fd:61:29:26:00:fc:6b:97:a1:18:89:60:8b:25: b7:94:84:6d:88:6c:d7:33:b0:62:3d:e6:8f:67:94:f5:3e:12: 35:45:84:4d:51:73:54:30:23:74:cf:56:4c:03:95:ee:05:9d: 72:06:c1:38:51:52:6d:f2:3c:9f:9e:3d:cd:8b:90:6d:e4:5b: d5:7a:4b:e7:36:73:77:3c:f9:98:2e:82:b5:e3:20:e1:96:7e: c1:de:50:3b:f6:24:c8:13:43:a7:00:6e:a4:6b:1c:7e:03:1d: f4:11:85:96:21:4e:28:c9:d0:9b:a6:52:7d:e4:24:33:43:db: 84:ae:4b:f9:84:15:52:f3:3c:87:4c:d1:37:89:ab:f9:52:85: 6e:a9:22:af:cc:1c:87:17:e0:39:5a:d9:67:30:66:ea:d1:c3: f0:06:89:92:f6:56:17:fd:f7:c8:02:27:35:f1:58:2e:3c:08: d7:11:a8:33:39:cb:7e:36:9a:05:85:9f:4b:b5:c0:a9:1d:8f: 8d:68:76:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDI0/RnhFJi7/UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTI0MDY2YzctMzE0Ny00YWVjLWFhM2QtZjNjZmM0YmRkOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrIdNfqqT1uv/Lf8nRqWs7svSYbovm0GEzUN c/JfOrXbeFrTXcNjQHlSxIzQXfHsZ8UtlG1sOPe/CxTDykvnjeZ3P5jqTEPc7hYn 9SAjtH2/PBYCWC2Fjo0ZHtPTRe9vaV2AWxqPwwZULf7OY/+UWSpSFDoUPDIXLaeE BwA4FWuV3UsMmR5yjSmT9opVzsov8DfKxAANaKPWutQmaXmRqazg3iGiTdFFiO/4 bpP4j8vaKNRY/RY/I7V/K1kcn/H+AYwNGe8mytxxapjOc5YzD5Fo9nGVHEJXRuDP 3lZ73J2uwRJzO1MTxT4kFbyGq6b9rv67VXns7AaGDBTTeBfu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAJd6WypHTH4yd9NeZow9A129YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTg4MzUxMzMtZmIyZi0z MWIxLTg0YmItMjhiY2NmYWIwOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdDBZFpV8X6UMv4QWjhpbNGwOOEigUdt+rlhNZGiYhbEEdJNTFDBJlq yFGf1f0jPquQj0OReUuufgz9YSkmAPxrl6EYiWCLJbeUhG2IbNczsGI95o9nlPU+ EjVFhE1Rc1QwI3TPVkwDle4FnXIGwThRUm3yPJ+ePc2LkG3kW9V6S+c2c3c8+Zgu grXjIOGWfsHeUDv2JMgTQ6cAbqRrHH4DHfQRhZYhTijJ0JumUn3kJDND24SuS/mE FVLzPIdM0TeJq/lShW6pIq/MHIcX4Dla2WcwZurRw/AGiZL2Vhf998gCJzXxWC48 CNcRqDM5y342mgWFn0u1wKkdj41odpo= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:52 2025 by rpki-client