$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad0a4e71-25d3-3494-acf2-61277e170020.roa File: ad0a4e71-25d3-3494-acf2-61277e170020.roa (raw, json) Hash identifier: XNQz2OUDJu5InUiykriz3cl0B1C03UMVGErRgRIkJ2Y= Subject key identifier: 72:02:00:8F:DA:96:FC:2E:2F:30:B2:77:A9:DD:5A:D8:50:60:51:7A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C769BA32AB5FA495F0F80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad0a4e71-25d3-3494-acf2-61277e170020.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:76:9b:a3:2a:b5:fa:49:5f:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=a7a3a899-ec4c-4bf4-8d9a-26e72d5654ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5d:a3:bd:3c:91:a8:91:9d:f2:21:ab:0f:20: ed:41:06:36:40:b9:56:00:98:f0:68:6f:49:ec:7f: 10:93:f2:09:60:43:64:12:a5:06:b3:7a:7d:01:4b: 17:b3:ca:50:71:f2:a3:57:35:7e:d0:76:20:cd:aa: 2c:91:42:8f:ce:5a:3d:ef:6a:04:31:e9:b4:90:40: f9:26:33:ed:60:13:4e:6d:d2:61:ad:b6:db:70:de: ae:c5:3a:d7:3e:ff:7f:02:d8:0d:88:a1:77:c4:a4: c5:e2:87:34:bc:ea:ac:e2:3e:f7:f1:ab:e9:6a:cc: 25:63:e8:a4:62:02:90:62:43:d5:8f:f6:81:10:45: e6:3f:cf:20:36:f5:8b:5f:6c:ed:dd:90:ba:2d:0d: 2a:4a:57:c5:4f:00:f6:23:a1:75:cf:22:c0:61:0b: d8:89:a4:86:a7:dc:be:c3:20:43:ca:27:4c:49:a4: f1:7a:88:3e:d1:b6:6c:61:5f:88:d7:10:9a:dd:1c: f7:fc:47:dd:f5:68:00:07:a1:e9:55:34:f7:e3:b5: 20:26:7d:3a:9d:20:42:51:67:6a:ff:17:e7:77:6f: 8d:45:98:ba:c9:2d:a8:97:0a:0a:1b:fc:02:dd:1a: 0a:1e:c3:d2:fe:4f:78:0d:7b:28:76:e8:53:e9:b5: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:02:00:8F:DA:96:FC:2E:2F:30:B2:77:A9:DD:5A:D8:50:60:51:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad0a4e71-25d3-3494-acf2-61277e170020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:72:e5:13:9b:79:ac:43:ce:16:ce:3b:3d:06:e8:f8:6e:9a: d6:22:68:fd:fa:dc:5e:b9:80:44:67:43:e5:3e:8b:cb:24:39: 56:b3:cf:0d:94:e7:1d:1d:41:bc:de:af:0b:4f:16:a4:29:45: ed:99:60:53:d0:c9:89:9b:37:08:ed:cc:cf:9b:38:47:bd:ba: 4c:13:82:8c:a6:57:e3:d3:7a:9a:c3:2e:01:33:e0:71:62:93: 28:dd:1b:95:d7:cc:d8:01:b4:88:af:66:99:7c:c2:35:41:ca: 94:7f:fa:5d:96:c9:5f:f4:04:b3:a3:86:dd:f5:e5:42:97:dc: 91:19:20:79:78:b7:df:f5:c7:57:f4:09:d6:d5:bb:2c:21:63: 36:f2:09:3a:08:5c:35:72:26:dd:86:f9:33:eb:23:80:a7:74: ce:d0:9f:a4:72:ed:cf:d0:5c:3f:c1:00:47:1f:dc:cb:e3:13: a0:02:f3:a0:da:ec:ed:47:c1:2f:97:98:d5:80:13:c8:18:8a: 0f:29:84:10:6f:20:f3:eb:52:a4:35:9b:03:cd:08:86:62:39: e2:0e:45:e9:f4:a8:6a:16:92:a4:b0:43:05:f4:d6:4c:c1:ed: 1c:48:ea:20:b2:cd:b1:61:2b:68:08:36:99:cc:a8:4e:8a:9e: ba:e4:d1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHaboyq1+klfD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YTdhM2E4OTktZWM0Yy00YmY0LThkOWEtMjZlNzJkNTY1NGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l2jvTyRqJGd8iGrDyDtQQY2QLlWAJjwaG9J 7H8Qk/IJYENkEqUGs3p9AUsXs8pQcfKjVzV+0HYgzaoskUKPzlo972oEMem0kED5 JjPtYBNObdJhrbbbcN6uxTrXPv9/AtgNiKF3xKTF4oc0vOqs4j738avpaswlY+ik YgKQYkPVj/aBEEXmP88gNvWLX2zt3ZC6LQ0qSlfFTwD2I6F1zyLAYQvYiaSGp9y+ wyBDyidMSaTxeog+0bZsYV+I1xCa3Rz3/Efd9WgAB6HpVTT347UgJn06nSBCUWdq /xfnd2+NRZi6yS2olwoKG/wC3RoKHsPS/k94DXsoduhT6bUG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHICAI/alvwuLzCyd6ndWthQYFF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWQwYTRlNzEtMjVkMy0z NDk0LWFjZjItNjEyNzdlMTcwMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9y5RObeaxDzhbOOz0G6PhumtYiaP363F65gERnQ+U+i8skOVazzw2U 5x0dQbzerwtPFqQpRe2ZYFPQyYmbNwjtzM+bOEe9ukwTgoymV+PTeprDLgEz4HFi kyjdG5XXzNgBtIivZpl8wjVBypR/+l2WyV/0BLOjht315UKX3JEZIHl4t9/1x1f0 CdbVuywhYzbyCToIXDVyJt2G+TPrI4CndM7Qn6Ry7c/QXD/BAEcf3MvjE6AC86Da 7O1HwS+XmNWAE8gYig8phBBvIPPrUqQ1mwPNCIZiOeIORen0qGoWkqSwQwX01kzB 7RxI6iCyzbFhK2gINpnMqE6Knrrk0f8= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:10 2025 by rpki-client