$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cad50932-7382-35aa-b517-bb9b4a32347d.roa File: cad50932-7382-35aa-b517-bb9b4a32347d.roa (raw, json) Hash identifier: agzelXGxlMfFdd0eKYTPKa79Gd+ZP0IbLQf1F7TFs6A= Subject key identifier: AB:FE:BC:EF:8C:45:63:86:C0:8F:02:A6:AA:61:CD:82:9A:0B:67:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F373FDE675B4517C6A6E5B8 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cad50932-7382-35aa-b517-bb9b4a32347d.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3f:de:67:5b:45:17:c6:a6:e5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3e016c19-3877-476e-a9e2-76be42deb0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:12:4f:f1:06:7d:fd:09:a4:78:1b:ec:31:40: 32:42:16:9f:aa:0e:ce:f1:c4:bd:89:86:67:0f:29: 98:7d:bb:70:1a:97:e2:8d:57:c9:3a:4c:f1:4e:40: 6d:18:3e:1e:64:48:e6:c7:93:6d:3d:e6:0c:4d:1e: 5a:a8:6f:4d:15:6c:22:2c:b2:ed:fa:0b:6e:d4:1c: fa:bc:b1:80:40:5b:8a:ed:71:41:55:61:dd:39:06: 69:8e:fc:e0:b4:74:67:ca:d5:57:97:af:52:51:8d: ef:ac:bc:15:bf:36:e8:10:68:1b:39:8c:d4:34:fb: 6f:d1:fe:a8:5c:14:ce:1b:fb:fb:f6:86:5e:63:88: b0:a3:05:e7:e4:49:41:74:76:25:67:12:2c:d5:ad: a6:84:db:28:bb:62:68:a5:17:53:56:55:55:b5:37: 01:36:a5:fc:fe:b2:2a:de:3a:0e:4f:d5:eb:6e:c6: c7:79:e8:aa:7c:bf:32:c3:1b:b5:fe:62:ca:09:25: 5a:05:40:10:20:91:44:05:c2:51:2f:90:48:a1:45: 7e:f5:16:35:15:be:5b:49:4f:86:64:6b:d2:7f:c7: 20:ce:e2:83:f3:ef:b3:57:ad:74:46:f9:98:31:68: 71:c0:b0:50:18:35:93:ac:7a:7e:63:3a:ba:0c:01: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:BC:EF:8C:45:63:86:C0:8F:02:A6:AA:61:CD:82:9A:0B:67:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cad50932-7382-35aa-b517-bb9b4a32347d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2a:20:9e:f8:e0:a1:1e:c7:33:86:90:ed:be:42:2b:e4:93: 67:a1:f5:db:5a:02:81:04:fb:a7:1e:15:36:d8:3f:d2:5e:d8: 09:f9:9f:96:23:d0:f0:e7:c2:74:b9:06:a4:95:0c:2e:47:88: bc:c5:c5:69:cf:8b:a4:ea:79:8c:3d:44:c3:e9:34:0f:e4:49: 3c:4b:d0:4d:39:11:6a:02:20:d8:a3:f4:4a:10:f7:f5:69:92: bf:37:67:14:81:d9:04:47:2e:8b:cb:14:2c:b7:74:25:a0:e4: cf:12:67:34:b5:30:31:1b:fb:4c:af:a2:84:ac:81:b1:56:79: be:56:ad:5a:7f:47:6c:65:99:a7:d5:e8:bc:25:94:4c:22:d0: fd:05:fb:ba:27:84:8e:55:d2:f1:42:02:9e:ce:7a:b5:03:3c: 3c:9a:e1:df:a9:dd:98:6b:6a:b1:5e:8c:0b:f4:a6:0d:83:47: 4a:f5:3a:dd:76:4f:3d:a0:d7:a8:12:cc:9a:69:d2:22:fe:f3: 0a:0e:16:58:f0:ba:b7:86:69:8a:38:eb:12:23:fc:60:36:d8: ec:f4:ff:99:05:ab:f0:72:90:58:2d:d1:9f:e0:1b:fa:92:97: 5b:0f:15:d0:0e:b2:21:99:a3:02:75:35:d4:89:78:65:d5:9c: 23:aa:47:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz/eZ1tFF8am5bgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2UwMTZjMTktMzg3Ny00NzZlLWE5ZTItNzZiZTQyZGViMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBJP8QZ9/QmkeBvsMUAyQhafqg7O8cS9iYZn DymYfbtwGpfijVfJOkzxTkBtGD4eZEjmx5NtPeYMTR5aqG9NFWwiLLLt+gtu1Bz6 vLGAQFuK7XFBVWHdOQZpjvzgtHRnytVXl69SUY3vrLwVvzboEGgbOYzUNPtv0f6o XBTOG/v79oZeY4iwowXn5ElBdHYlZxIs1a2mhNsou2JopRdTVlVVtTcBNqX8/rIq 3joOT9XrbsbHeeiqfL8ywxu1/mLKCSVaBUAQIJFEBcJRL5BIoUV+9RY1Fb5bSU+G ZGvSf8cgzuKD8++zV610RvmYMWhxwLBQGDWTrHp+Yzq6DAHFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv+vO+MRWOGwI8CpqphzYKaC2cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2FkNTA5MzItNzM4Mi0z NWFhLWI1MTctYmI5YjRhMzIzNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkqIJ744KEexzOGkO2+Qivkk2eh9dtaAoEE+6ceFTbYP9Je2An5n5Yj 0PDnwnS5BqSVDC5HiLzFxWnPi6TqeYw9RMPpNA/kSTxL0E05EWoCINij9EoQ9/Vp kr83ZxSB2QRHLovLFCy3dCWg5M8SZzS1MDEb+0yvooSsgbFWeb5WrVp/R2xlmafV 6LwllEwi0P0F+7onhI5V0vFCAp7OerUDPDya4d+p3ZhrarFejAv0pg2DR0r1Ot12 Tz2g16gSzJpp0iL+8woOFljwureGaYo46xIj/GA22Oz0/5kFq/BykFgt0Z/gG/qS l1sPFdAOsiGZowJ1NdSJeGXVnCOqR6o= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:48 2025 by rpki-client