$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa File: b2f6facc-c4d1-3969-ac07-931ed27ee223.roa (raw, json) Hash identifier: /GXrM6XG/lhXpFznvIVyTaaiqgAZ0YXU3gjLVaQWAqM= Subject key identifier: 02:27:EE:24:A2:1E:9D:C7:E5:E1:6D:8A:4A:96:4C:AC:05:52:29:00 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7CDEA4A3B168F0202FC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7c:de:a4:a3:b1:68:f0:20:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=4d05c953-de4c-4c65-8b4f-5839017dd89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:9c:d6:bd:2d:ff:f7:3c:7f:2f:62:16:99: 82:17:b2:16:8d:74:e0:50:3a:02:9e:4f:21:7f:9f: 37:a2:01:f5:0e:e3:cb:b3:19:1f:1b:90:df:13:56: 73:f8:ec:10:51:da:5f:42:91:cd:3a:97:e5:fb:0c: 6b:61:6c:32:e2:73:58:f4:01:f1:1e:4c:0b:49:a8: 23:00:2c:ee:b5:2b:27:e8:37:bb:35:04:3d:07:f4: 91:62:f0:d9:f1:46:2d:d5:23:23:9f:14:73:6e:5f: be:c0:55:96:78:84:b5:02:d3:77:69:0e:46:b2:f0: 00:cb:78:28:57:a7:51:8d:6e:8d:11:ec:8d:cb:20: e8:d6:14:7a:0b:50:1f:71:36:63:27:47:2b:44:15: 79:36:2a:23:15:aa:88:2e:ad:e6:36:71:ef:a3:71: a0:93:5f:82:65:30:be:bf:85:da:f0:69:7c:aa:21: 5b:d9:4a:76:03:95:b1:3e:b2:05:92:fd:09:ca:af: 6e:f8:f8:27:bf:5e:e3:3b:34:8b:e3:ba:ee:84:5c: 22:2b:b1:33:12:0b:4a:72:06:26:41:19:fd:5c:78: bf:18:21:5e:41:75:3a:d2:28:64:4d:3b:6a:84:41: 5e:c0:0c:f9:ca:59:2a:08:28:b1:26:18:0d:55:15: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:EE:24:A2:1E:9D:C7:E5:E1:6D:8A:4A:96:4C:AC:05:52:29:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c3:f5:3d:4d:ae:68:7d:de:83:21:7b:6f:8f:c0:8c:2a:e0: cd:05:06:d5:6c:a3:49:00:c1:b0:8d:bf:ed:f1:5b:12:a2:9b: d2:54:0f:15:04:ab:93:79:05:8e:c0:fb:05:da:c6:39:9f:94: 78:35:80:ff:7f:cf:11:84:61:1f:56:e9:3a:0e:84:c0:d5:a1: 39:bc:68:60:8f:50:33:e2:06:e4:1c:6f:1d:2c:cd:8c:a8:1e: 14:45:23:b8:5f:a1:77:33:99:7c:48:5d:4c:02:07:05:20:9b: e5:d7:67:de:af:d4:3f:b0:19:a3:65:a7:6b:5f:e8:f2:25:b3: a8:4d:40:1c:af:b2:95:c9:f4:69:53:8e:2f:30:d9:37:80:2e: 22:e3:2a:2b:43:62:63:83:aa:1b:8b:93:05:5d:36:3d:87:ea: b9:83:89:a1:16:b1:22:a6:22:9d:de:e3:9c:3c:f2:e7:b7:a8: c3:29:88:ea:f2:af:e1:8c:79:9d:8b:92:f6:8f:ac:3b:ea:bd: fd:b0:95:3c:b9:c2:51:f1:08:ad:45:c3:1b:56:0c:07:bf:f8: 75:e5:c2:dc:c8:c3:8e:bd:92:7d:71:26:52:46:6b:c3:6a:53: 2b:d8:1f:fb:26:8e:f3:76:1c:f1:c5:d0:5d:fa:18:6c:fb:61: 11:b9:9e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHzepKOxaPAgL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NGQwNWM5NTMtZGU0Yy00YzY1LThiNGYtNTgzOTAxN2RkODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Cc1r0t//c8fy9iFpmCF7IWjXTgUDoCnk8h f583ogH1DuPLsxkfG5DfE1Zz+OwQUdpfQpHNOpfl+wxrYWwy4nNY9AHxHkwLSagj ACzutSsn6De7NQQ9B/SRYvDZ8UYt1SMjnxRzbl++wFWWeIS1AtN3aQ5GsvAAy3go V6dRjW6NEeyNyyDo1hR6C1AfcTZjJ0crRBV5NiojFaqILq3mNnHvo3Ggk1+CZTC+ v4Xa8Gl8qiFb2Up2A5WxPrIFkv0Jyq9u+Pgnv17jOzSL47ruhFwiK7EzEgtKcgYm QRn9XHi/GCFeQXU60ihkTTtqhEFewAz5ylkqCCixJhgNVRX/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIn7iSiHp3H5eFtikqWTKwFUikAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjJmNmZhY2MtYzRkMS0z OTY5LWFjMDctOTMxZWQyN2VlMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjD9T1Nrmh93oMhe2+PwIwq4M0FBtVso0kAwbCNv+3xWxKim9JUDxUE q5N5BY7A+wXaxjmflHg1gP9/zxGEYR9W6ToOhMDVoTm8aGCPUDPiBuQcbx0szYyo HhRFI7hfoXczmXxIXUwCBwUgm+XXZ96v1D+wGaNlp2tf6PIls6hNQByvspXJ9GlT ji8w2TeALiLjKitDYmODqhuLkwVdNj2H6rmDiaEWsSKmIp3e45w88ue3qMMpiOry r+GMeZ2LkvaPrDvqvf2wlTy5wlHxCK1FwxtWDAe/+HXlwtzIw469kn1xJlJGa8Nq UyvYH/smjvN2HPHF0F36GGz7YRG5ntA= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:15 2025 by rpki-client