$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa File: d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa (raw, json) Hash identifier: YEDo8wKKsPah16pPZrkklKGIF4XTvFBaxJ14WWo/Zr8= Subject key identifier: E8:A1:65:81:8D:EB:A2:4C:CE:DA:08:AE:FA:F6:AD:94:3E:C1:29:42 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3769380DD3CBE03FB80E00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:69:38:0d:d3:cb:e0:3f:b8:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=9480d8ca-8d27-4636-ab77-11561f1a2203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:e5:39:d4:51:c5:38:9e:38:4d:2e:d8:a4: 30:d2:19:32:e8:38:6d:65:48:e7:78:47:67:47:49: 05:1a:1e:91:b3:69:ad:83:74:5a:fc:f5:52:ca:19: 2d:67:de:37:4c:a2:86:22:25:d2:80:75:38:67:4b: 10:c2:fd:1f:2a:be:2c:3f:e8:7a:c2:8a:6c:c4:c7: 77:0d:e5:15:61:b0:9c:1b:61:c1:ca:aa:12:d0:e8: d0:59:ae:e8:0a:f2:ac:32:ad:df:42:c3:df:28:27: 7d:12:27:36:6c:6e:40:a4:40:f3:93:e7:e0:aa:53: 3e:b8:04:f1:6d:5a:2f:ae:15:fe:8e:4a:05:5f:cc: 39:0c:93:bf:3b:96:48:f9:7a:b1:da:36:d3:21:33: e5:d0:b1:3d:6a:30:c2:3e:9e:10:78:49:a2:e3:3d: 2d:f6:a8:dd:80:cd:5b:da:a1:26:30:b8:d4:9a:79: ce:29:94:74:90:39:88:d6:1b:97:d1:ef:8d:39:43: 72:ab:57:5d:ce:82:84:86:c6:56:6a:5b:b1:44:91: 39:43:14:d9:ce:a5:9a:12:1b:81:14:91:97:47:59: 80:9c:ad:f5:fd:d9:76:f9:de:23:02:29:d4:4b:88: 8b:8a:01:8a:52:98:b1:41:d9:28:1d:53:3c:37:66: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A1:65:81:8D:EB:A2:4C:CE:DA:08:AE:FA:F6:AD:94:3E:C1:29:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:38:30:a1:a3:a1:9b:10:63:82:27:a6:85:b2:eb:83:c0:f1: 08:85:a5:4c:09:f5:0b:c0:ac:48:31:58:cf:ee:05:e6:c1:33: 68:d9:7b:f0:06:5b:af:fd:e6:ec:fd:07:9b:97:d5:ea:c8:8d: f9:00:53:79:21:0a:29:09:54:aa:ba:97:16:e2:e3:06:46:78: 0f:f5:5b:ff:cd:3b:29:86:9a:4e:fa:a5:85:26:d8:67:28:91: 01:3e:7a:a8:64:96:73:cd:b0:ed:69:20:01:7e:26:4d:30:26: 2e:e9:8c:c0:39:99:4a:f8:e3:43:eb:88:ce:6a:5a:4e:ce:a1: fc:6a:6e:ed:ca:07:da:68:b0:30:a4:2b:7b:92:47:b6:ff:09: 4d:8b:f0:0b:23:27:8b:24:f3:35:25:53:44:3a:e6:b7:86:fa: 11:09:82:85:de:70:a0:10:cb:f1:56:28:79:6b:5c:b4:76:64: d6:45:95:37:06:f2:4f:60:31:7e:f7:fb:9f:52:fe:9c:84:dd: 10:26:07:ec:ea:9a:00:e8:fa:92:d9:41:d6:5f:c3:4b:5d:6f: 3e:22:7f:39:42:17:94:9e:e3:95:85:a7:1a:99:6e:2c:2e:1f: 38:7f:b0:00:bb:6c:5b:ff:c9:aa:bf:eb:66:a1:74:76:61:4a: 7b:05:30:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2k4DdPL4D+4DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTQ4MGQ4Y2EtOGQyNy00NjM2LWFiNzctMTE1NjFmMWEyMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2nlOdRRxTieOE0u2KQw0hky6DhtZUjneEdn R0kFGh6Rs2mtg3Ra/PVSyhktZ943TKKGIiXSgHU4Z0sQwv0fKr4sP+h6wopsxMd3 DeUVYbCcG2HByqoS0OjQWa7oCvKsMq3fQsPfKCd9Eic2bG5ApEDzk+fgqlM+uATx bVovrhX+jkoFX8w5DJO/O5ZI+Xqx2jbTITPl0LE9ajDCPp4QeEmi4z0t9qjdgM1b 2qEmMLjUmnnOKZR0kDmI1huX0e+NOUNyq1ddzoKEhsZWaluxRJE5QxTZzqWaEhuB FJGXR1mAnK31/dl2+d4jAinUS4iLigGKUpixQdkoHVM8N2ae3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOihZYGN66JMztoIrvr2rZQ+wSlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDhmZTJhMjItMjc1NC0z ZTAxLTljM2MtOWMxNTQzNjQ3MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA4MKGjoZsQY4InpoWy64PA8QiFpUwJ9QvArEgxWM/uBebBM2jZe/AG W6/95uz9B5uX1erIjfkAU3khCikJVKq6lxbi4wZGeA/1W//NOymGmk76pYUm2Gco kQE+eqhklnPNsO1pIAF+Jk0wJi7pjMA5mUr440PriM5qWk7Oofxqbu3KB9posDCk K3uSR7b/CU2L8AsjJ4sk8zUlU0Q65reG+hEJgoXecKAQy/FWKHlrXLR2ZNZFlTcG 8k9gMX73+59S/pyE3RAmB+zqmgDo+pLZQdZfw0tdbz4ifzlCF5Se45WFpxqZbiwu Hzh/sAC7bFv/yaq/62ahdHZhSnsFMM0= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:09 2025 by rpki-client