$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa File: b86920eb-93dd-3e90-94cb-78aa809d61f3.roa (raw, json) Hash identifier: FnWXnhEB1Xp+EjDA8+47CU05387fOdbtf7TJBik2pxw= Subject key identifier: F8:68:C3:89:8B:E8:A8:BF:4B:76:F4:26:6E:6F:F1:94:8E:45:E7:2F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B76F2355905E13E2064766AF0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 36411 IP address blocks: 104.132.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:35:59:05:e1:3e:20:64:76:6a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=90ff1f52-6c99-442d-b52d-6814814feebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:37:cc:c6:b2:6a:c4:24:04:e4:94:4a:27: b1:21:fe:4c:65:3e:b9:ac:2d:59:9e:99:6d:f2:99: fc:e3:03:de:ce:04:13:4b:06:fd:d6:84:25:e0:7d: 6d:b7:dc:4f:6f:d3:43:b7:18:27:4e:5d:f9:f2:f0: 90:e2:03:ad:59:0a:3f:03:81:c6:41:3b:e6:30:0c: c8:51:9a:f0:82:ee:d6:d5:8f:ef:a0:97:a7:4e:c7: ba:3d:61:c9:65:56:e7:60:0c:6f:26:6a:5e:dd:23: d3:a2:ba:fc:90:ef:d2:01:4b:91:31:ac:d3:98:eb: ed:f0:02:e7:c5:fd:17:33:12:a1:44:e0:a1:61:ca: 14:4c:57:2a:8b:00:65:85:74:b3:33:c3:94:13:46: 1d:d4:b9:8e:67:e6:8c:64:57:77:13:7f:04:a0:40: 15:bb:bf:42:89:9b:a4:f0:4c:2e:ef:f8:8d:54:cb: c6:ef:7d:4d:23:57:b1:85:fb:85:f4:b6:94:59:79: 37:47:03:f9:4b:f8:3f:f7:d7:07:c8:39:05:ed:ab: c7:b2:d4:dd:8a:f0:98:9d:e8:35:54:59:bc:50:f3: 52:1c:38:7a:61:72:13:24:c4:0f:92:13:26:7d:91: 55:df:04:4f:d7:fa:ab:4a:26:6c:fc:8e:a4:fa:59: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:C3:89:8B:E8:A8:BF:4B:76:F4:26:6E:6F:F1:94:8E:45:E7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e5:f0:92:e0:26:52:c5:a1:be:98:fc:ab:c9:dc:6c:60:ad: 29:19:66:47:05:fd:c6:12:c0:c9:10:f1:e8:29:da:00:e8:20: bf:c9:43:eb:3e:c3:c9:ed:51:19:dd:30:f2:7a:12:4e:e9:53: 01:05:c8:df:93:66:19:e3:69:31:98:c9:fb:19:aa:b9:1b:29: d0:e8:ac:3b:cd:52:93:84:45:d0:09:4d:b9:0d:53:cd:b9:bf: 30:61:d1:f3:07:97:7e:2d:77:19:13:e2:e5:6d:2c:76:1b:24: 13:9f:61:ff:3c:f3:56:08:e3:f6:ee:6b:6e:90:0b:da:39:83: 89:8a:88:9f:01:c9:7e:35:3e:e9:eb:8e:56:7d:c8:48:2b:1a: bc:30:86:1e:b4:86:91:8f:44:08:92:f0:c8:b6:36:39:28:ae: dc:2a:e5:46:d4:73:11:42:17:25:ae:2b:2a:c3:ca:91:84:e4: e0:9e:4f:1b:c3:99:4f:b3:f2:62:47:7b:d6:4a:1b:a6:32:48: 81:ea:e6:23:10:ed:bb:e7:62:59:00:84:84:54:cd:a2:24:47: 8f:c2:5a:a1:7a:b3:1f:64:7c:c7:cd:64:fd:59:f2:07:83:1b: c3:70:6b:29:c9:d9:f0:2a:26:4f:e3:e7:13:2f:07:44:cd:09: 46:7c:d1:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jVZBeE+IGR2avAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OTBmZjFmNTItNmM5OS00NDJkLWI1MmQtNjgxNDgxNGZlZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCY3zMayasQkBOSUSiexIf5MZT65rC1Znplt 8pn84wPezgQTSwb91oQl4H1tt9xPb9NDtxgnTl358vCQ4gOtWQo/A4HGQTvmMAzI UZrwgu7W1Y/voJenTse6PWHJZVbnYAxvJmpe3SPTorr8kO/SAUuRMazTmOvt8ALn xf0XMxKhROChYcoUTFcqiwBlhXSzM8OUE0Yd1LmOZ+aMZFd3E38EoEAVu79CiZuk 8Ewu7/iNVMvG731NI1exhfuF9LaUWXk3RwP5S/g/99cHyDkF7avHstTdivCYneg1 VFm8UPNSHDh6YXITJMQPkhMmfZFV3wRP1/qrSiZs/I6k+lnLowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhow4mL6Ki/S3b0Jm5v8ZSORecvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjg2OTIwZWItOTNkZC0z ZTkwLTk0Y2ItNzhhYTgwOWQ2MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDl8JLgJlLFob6Y/KvJ3GxgrSkZZkcF/cYSwMkQ8egp2gDoIL/JQ+s+ w8ntURndMPJ6Ek7pUwEFyN+TZhnjaTGYyfsZqrkbKdDorDvNUpOERdAJTbkNU825 vzBh0fMHl34tdxkT4uVtLHYbJBOfYf8881YI4/bua26QC9o5g4mKiJ8ByX41Punr jlZ9yEgrGrwwhh60hpGPRAiS8Mi2Njkortwq5UbUcxFCFyWuKyrDypGE5OCeTxvD mU+z8mJHe9ZKG6YySIHq5iMQ7bvnYlkAhIRUzaIkR4/CWqF6sx9kfMfNZP1Z8geD G8NwaynJ2fAqJk/j5xMvB0TNCUZ80S8= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:37 2025 by rpki-client