$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cbc3022d-dd87-37c5-960a-853ffcac8339.roa File: cbc3022d-dd87-37c5-960a-853ffcac8339.roa (raw, json) Hash identifier: QJawBpcBBCtOTH7WoZiB7h68ubMv4dwy+OSj1DtyYXg= Subject key identifier: DF:75:ED:F0:4C:AE:5B:49:A0:43:7B:B2:D8:20:A6:B3:4D:C6:AB:0D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F374BC8494B2C8DB3DA1280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cbc3022d-dd87-37c5-960a-853ffcac8339.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4b:c8:49:4b:2c:8d:b3:da:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=8ffe4540-1144-46c4-96f7-33830f993a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:0e:7e:43:e9:74:11:18:97:84:01:e7:ec: 20:14:4e:5d:b6:46:66:f4:ba:64:d5:59:01:63:d5: e6:5c:c0:84:5e:d1:f3:8a:b4:e4:95:93:56:46:ae: d0:bd:0b:08:1c:e9:e1:5c:43:b0:77:0e:e0:cf:fb: 33:bc:4f:4f:5b:cb:9c:9b:e3:3d:21:fd:d2:93:1b: 5e:f5:f9:1d:8b:55:e0:0a:00:36:ab:8c:2f:25:be: 14:6c:a2:38:09:c0:7b:7d:6c:18:9e:70:37:96:bf: 17:51:72:3f:f4:88:ec:9d:55:07:d0:28:9a:5e:da: 5f:99:eb:f3:f8:eb:d4:c1:17:9d:bb:e9:18:0b:8a: 35:15:3a:bd:51:49:7e:98:fa:4e:29:00:a8:2a:7c: 69:65:8a:03:ca:d5:54:0d:83:30:bd:ae:af:00:5a: e1:18:39:cd:82:72:77:80:3f:ad:3f:a5:1a:a5:f9: 8b:55:e2:36:b2:7f:6d:d2:6d:e1:9d:a1:39:b3:41: ed:fd:02:74:49:f9:06:94:13:92:4f:3e:94:25:d4: b2:f1:c9:60:65:a1:4a:6a:6e:7e:90:b9:ce:ce:b5: ac:e4:e8:f2:41:a0:92:7d:3d:63:5d:c4:a2:c8:fd: eb:f8:f8:0e:90:f8:32:0c:9e:53:0b:3f:1c:7f:61: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:ED:F0:4C:AE:5B:49:A0:43:7B:B2:D8:20:A6:B3:4D:C6:AB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cbc3022d-dd87-37c5-960a-853ffcac8339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b9:f3:cc:20:95:51:54:d9:27:84:97:6b:a1:dc:8a:bc:6d: c9:7c:2f:59:58:b0:3c:78:c1:7e:5a:88:b4:c1:54:21:d4:5f: be:aa:50:13:23:1c:7d:35:d9:ae:8d:ac:ac:bb:48:ff:29:57: 18:54:21:2e:2d:fe:c5:a2:e1:c8:27:02:e5:96:82:e0:85:19: 91:7b:c2:cd:b9:db:2d:e2:a7:a3:db:04:17:4a:25:d0:b9:dc: 6d:df:01:25:4a:ce:69:0d:37:89:33:4a:f8:2a:8e:c8:ca:78: 1f:d9:3a:f1:96:fe:f1:ee:37:34:be:96:00:de:a6:1c:fa:83: ea:2b:db:0e:1e:18:74:67:6a:02:9e:25:70:fe:03:2e:22:40: 8c:7a:d8:ec:d3:81:d2:3c:44:27:a8:09:cb:7b:ca:7f:ef:b3: 89:f0:b5:f0:cf:36:a4:7a:1d:f4:f2:72:52:2b:f4:0c:e0:b6: 32:9f:34:37:8d:2b:3d:2c:25:2a:96:33:7f:38:31:92:31:2f: ba:9e:1e:77:4a:d5:dd:77:36:14:32:63:2d:8c:b5:f3:fb:6c: 08:f8:21:90:69:30:26:08:6b:0c:3a:7d:11:4f:5f:3a:26:c2: ac:58:2d:34:d7:b8:b9:b8:91:9a:83:47:f5:1b:fb:a2:9e:e2: 35:27:2e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0vISUssjbPaEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OGZmZTQ1NDAtMTE0NC00NmM0LTk2ZjctMzM4MzBmOTkzYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoogOfkPpdBEYl4QB5+wgFE5dtkZm9Lpk1VkB Y9XmXMCEXtHzirTklZNWRq7QvQsIHOnhXEOwdw7gz/szvE9PW8ucm+M9If3Skxte 9fkdi1XgCgA2q4wvJb4UbKI4CcB7fWwYnnA3lr8XUXI/9IjsnVUH0CiaXtpfmevz +OvUwRedu+kYC4o1FTq9UUl+mPpOKQCoKnxpZYoDytVUDYMwva6vAFrhGDnNgnJ3 gD+tP6UapfmLVeI2sn9t0m3hnaE5s0Ht/QJ0SfkGlBOSTz6UJdSy8clgZaFKam5+ kLnOzrWs5OjyQaCSfT1jXcSiyP3r+PgOkPgyDJ5TCz8cf2EgAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN917fBMrltJoEN7stggprNNxqsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2JjMzAyMmQtZGQ4Ny0z N2M1LTk2MGEtODUzZmZjYWM4MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS588wglVFU2SeEl2uh3Iq8bcl8L1lYsDx4wX5aiLTBVCHUX76qUBMj HH012a6NrKy7SP8pVxhUIS4t/sWi4cgnAuWWguCFGZF7ws252y3ip6PbBBdKJdC5 3G3fASVKzmkNN4kzSvgqjsjKeB/ZOvGW/vHuNzS+lgDephz6g+or2w4eGHRnagKe JXD+Ay4iQIx62OzTgdI8RCeoCct7yn/vs4nwtfDPNqR6HfTyclIr9AzgtjKfNDeN Kz0sJSqWM384MZIxL7qeHndK1d13NhQyYy2MtfP7bAj4IZBpMCYIaww6fRFPXzom wqxYLTTXuLm4kZqDR/Ub+6Ke4jUnLmE= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:09 2025 by rpki-client