$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1c81b4-6007-3f36-b5da-f8debcf6aed2.roa File: ba1c81b4-6007-3f36-b5da-f8debcf6aed2.roa (raw, json) Hash identifier: jnxZrLzyxnIAA4J0kV9Azv+VPQ27GVwbjBREEz2zfPQ= Subject key identifier: 69:B7:0C:49:32:A2:69:60:39:D7:69:78:23:B4:4F:52:D3:B2:A6:3F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F373F6D1DA6551581B4A360 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1c81b4-6007-3f36-b5da-f8debcf6aed2.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3f:6d:1d:a6:55:15:81:b4:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=d70ad29d-0403-4229-912b-2e93e345d226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:69:9e:a7:2a:93:89:36:24:3b:ac:f9:c9: 63:a7:e8:6f:d6:58:dd:da:b7:70:7c:52:9d:db:61: 0d:52:72:ad:11:d3:48:b7:e3:51:f0:b7:f8:43:93: 0c:32:5b:df:f6:f7:b8:1c:ab:ac:a6:3e:75:54:5d: a8:9d:bc:1e:13:15:38:7b:37:73:c5:51:cc:be:a0: 4c:31:92:2b:31:fd:85:a3:e8:d4:63:af:fb:59:8b: 29:7b:91:9d:38:05:35:0c:0e:c4:d2:d7:ad:c3:57: 76:ab:94:6c:69:f1:38:43:b4:3a:cd:4e:8f:68:4b: 12:d7:90:59:de:ff:b5:09:a0:17:10:65:43:a5:74: 3b:60:e5:76:58:dd:27:db:ce:53:55:99:7d:bc:db: a0:1e:67:a7:95:66:88:a1:0e:32:da:27:46:48:03: 9b:cf:4b:7d:d6:1f:fa:b3:b4:f8:9e:69:e1:19:e2: 8b:88:b8:db:e3:62:05:4e:ec:9b:c8:63:35:72:95: 9e:68:49:97:08:cb:a7:4d:4c:c0:74:19:dc:90:41: 76:05:a2:94:3b:7d:3b:c1:41:9b:b8:42:8c:44:06: 0d:16:c6:b1:b0:8c:bc:42:bc:11:ec:b8:5e:44:cf: 33:ad:45:0a:a3:49:0a:9b:85:dc:6e:92:52:f4:0f: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:0C:49:32:A2:69:60:39:D7:69:78:23:B4:4F:52:D3:B2:A6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba1c81b4-6007-3f36-b5da-f8debcf6aed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d4:9d:fe:b4:89:8f:66:14:a6:42:62:8c:1c:ae:eb:e7:be: 0c:5d:73:f1:7d:a3:ec:a5:d0:08:4b:d5:d4:ca:d0:2c:4b:77: 25:ee:c4:9a:92:e1:6c:8a:de:0c:49:be:52:11:0b:5e:ab:28: 79:5d:55:39:85:c0:64:cf:a9:89:e4:87:b7:65:08:a7:c4:75: 6e:c9:89:f1:db:39:6b:ca:e9:d8:2f:a9:87:6b:fb:ad:22:24: 94:47:29:3f:21:7a:5a:4c:cb:7a:26:aa:f3:e5:a4:86:5d:75: e5:ba:63:45:4c:6a:0b:0a:24:f3:ac:6a:ab:65:f7:1a:22:e2: 8c:16:8a:dc:c8:de:80:14:f3:09:5b:1b:fe:04:02:b5:42:e8: 6d:77:54:d1:c5:c0:0a:59:65:a9:d6:d5:5b:05:87:37:78:96: 7c:6e:30:44:93:c9:80:01:a5:9a:69:c4:9d:2f:b2:6e:47:92: 08:14:76:63:e2:a1:13:52:9d:b1:46:49:46:d8:5b:a9:80:1d: f7:d4:d9:7b:d3:5d:28:b8:11:fe:22:5e:50:1f:ef:68:37:c8: 41:fd:f7:f9:1e:27:23:ae:a9:88:0c:96:e0:eb:30:15:0c:36: 2d:53:0f:e1:48:d4:3b:03:e7:90:37:46:b8:99:cf:8d:2b:a8: de:17:bf:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz9tHaZVFYG0o2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDcwYWQyOWQtMDQwMy00MjI5LTkxMmItMmU5M2UzNDVkMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6xpnqcqk4k2JDus+cljp+hv1ljd2rdwfFKd 22ENUnKtEdNIt+NR8Lf4Q5MMMlvf9ve4HKuspj51VF2onbweExU4ezdzxVHMvqBM MZIrMf2Fo+jUY6/7WYspe5GdOAU1DA7E0tetw1d2q5RsafE4Q7Q6zU6PaEsS15BZ 3v+1CaAXEGVDpXQ7YOV2WN0n285TVZl9vNugHmenlWaIoQ4y2idGSAObz0t91h/6 s7T4nmnhGeKLiLjb42IFTuybyGM1cpWeaEmXCMunTUzAdBnckEF2BaKUO307wUGb uEKMRAYNFsaxsIy8QrwR7LheRM8zrUUKo0kKm4XcbpJS9A9axwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm3DEkyomlgOddpeCO0T1LTsqY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmExYzgxYjQtNjAwNy0z ZjM2LWI1ZGEtZjhkZWJjZjZhZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjUnf60iY9mFKZCYowcruvnvgxdc/F9o+yl0AhL1dTK0CxLdyXuxJqS 4WyK3gxJvlIRC16rKHldVTmFwGTPqYnkh7dlCKfEdW7JifHbOWvK6dgvqYdr+60i JJRHKT8helpMy3omqvPlpIZddeW6Y0VMagsKJPOsaqtl9xoi4owWitzI3oAU8wlb G/4EArVC6G13VNHFwApZZanW1VsFhzd4lnxuMESTyYABpZppxJ0vsm5HkggUdmPi oRNSnbFGSUbYW6mAHffU2XvTXSi4Ef4iXlAf72g3yEH99/keJyOuqYgMluDrMBUM Ni1TD+FI1DsD55A3RriZz40rqN4Xv70= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:01 2025 by rpki-client