$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8d3d99d-2a4f-3135-9688-b435c171d84d.roa File: c8d3d99d-2a4f-3135-9688-b435c171d84d.roa (raw, json) Hash identifier: HQ+M+Sq5JizjMujdBk/zBZpvWhBAdYzfoSGD8GJK59U= Subject key identifier: 43:20:75:42:84:20:C4:19:63:C8:DA:D5:69:1A:8E:AA:3A:2F:EB:81 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F373CAE0B5410B8204F0380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8d3d99d-2a4f-3135-9688-b435c171d84d.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3c:ae:0b:54:10:b8:20:4f:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=34d9bcb6-b6f1-4cc3-bcf6-a7b173c255b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:01:6e:6a:8f:5f:d5:db:62:3f:aa:7a:14: 73:5d:31:5b:ca:8b:4d:cd:2c:34:92:2f:77:b9:53: f4:dc:1c:87:f9:55:0a:7f:c2:c0:af:57:21:8d:4f: ed:04:6c:bc:90:06:35:3a:e5:67:5f:40:c5:8b:09: 7a:2b:bc:54:76:88:dc:f3:9d:d1:2a:71:a3:29:c2: 91:39:e6:f5:cc:ed:36:04:05:9d:42:b6:55:55:ad: f3:86:a5:5a:09:75:3a:99:9b:32:20:07:f3:77:7c: 78:2e:be:da:3c:a3:5b:f6:f1:2c:43:e7:82:68:98: dc:e5:e4:95:f0:b5:9e:7a:c1:2b:4e:25:9c:24:55: 0e:7d:6a:60:b3:67:70:bd:9c:e2:ed:7e:86:a2:e8: 86:e5:8d:11:ac:a2:19:72:5d:52:7d:21:03:91:fd: 8c:1e:62:26:ec:ce:c4:ca:af:e4:21:e3:15:92:07: f1:a9:c9:65:35:5f:7f:40:e4:23:83:ec:ee:64:98: 7b:69:65:49:95:26:76:9d:26:ab:e7:e2:f0:37:5a: ca:18:ff:19:c9:4d:02:16:a2:02:9a:cd:cb:28:bb: e2:66:0e:d7:be:bf:e0:83:5e:65:c2:39:b8:c1:69: d1:f8:24:54:4e:61:c3:a9:2c:36:6e:8b:73:ac:7d: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:75:42:84:20:C4:19:63:C8:DA:D5:69:1A:8E:AA:3A:2F:EB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8d3d99d-2a4f-3135-9688-b435c171d84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:05:12:95:39:7c:04:d2:a3:32:3c:6a:46:66:d6:14:e9: 82:70:8f:13:2e:5b:d1:10:08:6b:80:bb:3f:d0:f7:c1:02:5f: c1:bd:c3:5e:68:a4:74:db:b8:49:a7:d9:4e:8c:ce:93:52:e5: ef:c0:b3:ca:f6:8a:a2:6d:c0:5c:f3:f6:31:37:69:48:a4:7e: 30:3c:c1:eb:9a:9c:c2:13:c8:bf:73:ff:79:15:96:d9:07:ef: f3:ae:9e:04:76:51:c5:4e:85:5a:cd:72:77:91:73:35:b7:18: 14:7e:14:06:a8:21:15:b2:fd:ac:92:1e:1a:ee:9c:81:57:dd: d7:b2:4e:dd:0f:37:21:3d:1d:05:06:ed:56:f3:22:29:75:80: da:b0:4c:01:96:6e:05:10:72:4d:91:d9:29:a8:f2:6a:23:bd: 74:7a:14:81:26:9d:c5:a5:de:69:6c:8e:55:d9:e7:91:18:10: 32:ab:b1:98:a0:72:73:5c:b7:ca:dc:2e:0f:5b:83:93:4b:f3: d7:a5:4d:8d:49:cc:75:72:4b:d8:ea:99:a6:39:98:ba:34:1c: 05:f1:27:fe:a7:c3:3c:27:ff:4b:e6:2e:59:df:6b:f8:5e:18: 53:33:af:ba:ca:cc:3f:8c:a4:c1:de:74:4c:e9:fe:83:9a:6c: ba:ee:a6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzyuC1QQuCBPA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MzRkOWJjYjYtYjZmMS00Y2MzLWJjZjYtYTdiMTczYzI1NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNQBbmqPX9XbYj+qehRzXTFbyotNzSw0ki93 uVP03ByH+VUKf8LAr1chjU/tBGy8kAY1OuVnX0DFiwl6K7xUdojc853RKnGjKcKR Oeb1zO02BAWdQrZVVa3zhqVaCXU6mZsyIAfzd3x4Lr7aPKNb9vEsQ+eCaJjc5eSV 8LWeesErTiWcJFUOfWpgs2dwvZzi7X6GouiG5Y0RrKIZcl1SfSEDkf2MHmIm7M7E yq/kIeMVkgfxqcllNV9/QOQjg+zuZJh7aWVJlSZ2nSar5+LwN1rKGP8ZyU0CFqIC ms3LKLviZg7Xvr/gg15lwjm4wWnR+CRUTmHDqSw2botzrH13+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMgdUKEIMQZY8ja1Wkajqo6L+uBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzhkM2Q5OWQtMmE0Zi0z MTM1LTk2ODgtYjQzNWMxNzFkODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZzBRKVOXwE0qMyPGpGZtYU6YJwjxMuW9EQCGuAuz/Q98ECX8G9w15o pHTbuEmn2U6MzpNS5e/As8r2iqJtwFzz9jE3aUikfjA8weuanMITyL9z/3kVltkH 7/OungR2UcVOhVrNcneRczW3GBR+FAaoIRWy/aySHhrunIFX3deyTt0PNyE9HQUG 7VbzIil1gNqwTAGWbgUQck2R2Smo8mojvXR6FIEmncWl3mlsjlXZ55EYEDKrsZig cnNct8rcLg9bg5NL89elTY1JzHVyS9jqmaY5mLo0HAXxJ/6nwzwn/0vmLlnfa/he GFMzr7rKzD+MpMHedEzp/oOabLrupj0= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:30 2025 by rpki-client