$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa File: bd3b0885-6cef-3635-b11c-5144dec857f3.roa (raw, json) Hash identifier: ndyIXzm85j38jdvS5FkFvPk6oy7T3sqIYFvooxJunyA= Subject key identifier: 2B:87:52:DD:51:0F:DD:98:C4:01:23:44:F9:74:C1:D2:FF:B6:BA:6D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7752E42E2FE8D6885900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:77:52:e4:2e:2f:e8:d6:88:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=03f43b3f-175a-4ab9-b8b4-c3753aec1bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:43:87:3a:88:19:6d:93:e1:eb:5f:5b:fe: a5:de:d5:dc:44:98:43:f3:df:c1:a1:46:ce:8d:39: c8:73:66:cb:04:2c:b7:29:d1:72:3e:86:52:f2:2a: b0:06:79:ac:99:84:f9:20:d7:4d:2a:92:7d:22:c3: 5f:32:69:a4:e6:ee:53:6b:43:36:04:33:12:3c:e0: 5a:6c:e3:1e:9a:e9:47:e9:e6:50:19:ef:3d:c5:bb: d7:8d:bc:f7:c6:c9:dc:1c:03:60:e7:40:1a:9e:bb: 7a:f7:ba:3e:7f:0c:bc:e5:23:c2:8b:9f:95:c2:9f: ed:3c:93:b4:e1:48:36:e1:0e:10:5d:f9:71:25:96: cf:b9:60:62:00:06:59:8d:08:8b:90:fe:a5:d3:74: 01:91:d8:24:02:c2:81:b4:73:fe:1b:5b:2d:69:6e: 5b:ed:a6:f6:9d:5f:56:ed:d6:8c:0e:db:75:7e:6a: 45:95:1d:62:d2:af:4e:52:ca:62:29:1a:64:21:0c: 22:fb:0b:7d:69:7a:03:73:00:bf:f6:ef:0a:f5:39: 8f:50:ad:0e:80:28:94:fb:c6:dd:e5:44:8a:24:10: 14:e2:03:ae:92:9c:15:24:c3:2f:a5:a4:a7:db:89: 6d:28:bc:2a:84:58:e0:07:0c:a6:e7:a7:36:05:4e: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:52:DD:51:0F:DD:98:C4:01:23:44:F9:74:C1:D2:FF:B6:BA:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c3:56:03:ed:b0:2a:96:bf:7b:4f:d2:54:84:33:49:c9:f6: c8:04:ba:31:57:1b:00:b6:c7:c4:a1:25:cc:2b:cf:09:e0:44: 25:bd:20:d3:1e:80:cd:39:30:cc:a8:ae:5d:d4:ec:1f:9e:b0: eb:a8:9f:c6:59:b6:f3:c2:f3:44:9a:d4:1c:46:45:ed:ca:b1: 40:24:f8:14:bf:29:a6:b2:67:ff:72:29:77:50:95:ce:30:a2: 32:0d:6b:51:bb:97:11:5c:51:ca:6b:f8:ec:9e:cb:a4:08:ed: 16:de:fa:1a:ab:c0:83:16:c9:a4:a7:d7:32:56:ba:f3:cf:35: 58:87:17:a2:26:36:15:d6:68:f4:77:d5:d1:67:9c:bf:52:83: 30:1b:a5:1f:79:2c:1d:f1:5c:ad:1f:24:dd:bf:69:62:84:d2: 75:3b:0b:68:5d:66:d0:b6:dd:a2:7b:e0:ec:49:29:11:57:bf: a6:a7:c2:e4:c7:49:6c:9a:88:7e:e4:8d:36:2b:64:48:a9:d3: 89:5e:b9:97:14:c1:c1:ad:f5:32:37:45:29:6b:22:64:9f:b8: c6:ec:98:41:9a:d8:7c:75:0b:d8:fe:13:8a:c8:0a:eb:15:51: c8:4c:59:db:27:13:06:03:e6:46:ab:9d:ba:24:11:e4:d8:60: 00:2e:83:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHdS5C4v6NaIWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MDNmNDNiM2YtMTc1YS00YWI5LWI4YjQtYzM3NTNhZWMxYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0stDhzqIGW2T4etfW/6l3tXcRJhD89/BoUbO jTnIc2bLBCy3KdFyPoZS8iqwBnmsmYT5INdNKpJ9IsNfMmmk5u5Ta0M2BDMSPOBa bOMemulH6eZQGe89xbvXjbz3xsncHANg50Aanrt697o+fwy85SPCi5+Vwp/tPJO0 4Ug24Q4QXflxJZbPuWBiAAZZjQiLkP6l03QBkdgkAsKBtHP+G1staW5b7ab2nV9W 7daMDtt1fmpFlR1i0q9OUspiKRpkIQwi+wt9aXoDcwC/9u8K9TmPUK0OgCiU+8bd 5USKJBAU4gOukpwVJMMvpaSn24ltKLwqhFjgBwym56c2BU67HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuHUt1RD92YxAEjRPl0wdL/trptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmQzYjA4ODUtNmNlZi0z NjM1LWIxMWMtNTE0NGRlYzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErDVgPtsCqWv3tP0lSEM0nJ9sgEujFXGwC2x8ShJcwrzwngRCW9INMe gM05MMyorl3U7B+esOuon8ZZtvPC80Sa1BxGRe3KsUAk+BS/KaayZ/9yKXdQlc4w ojINa1G7lxFcUcpr+Oyey6QI7Rbe+hqrwIMWyaSn1zJWuvPPNViHF6ImNhXWaPR3 1dFnnL9SgzAbpR95LB3xXK0fJN2/aWKE0nU7C2hdZtC23aJ74OxJKRFXv6anwuTH SWyaiH7kjTYrZEip04leuZcUwcGt9TI3RSlrImSfuMbsmEGa2Hx1C9j+E4rICusV UchMWdsnEwYD5karnbokEeTYYAAug3Y= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:22 2025 by rpki-client