$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa File: d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa (raw, json) Hash identifier: fBZWmZhkRiZc+UCyD04dTi6wHAT8HWvJFoc0uy++oIk= Subject key identifier: 19:91:67:27:EE:D6:7C:C8:B5:3D:7B:29:3A:26:65:80:DF:63:87:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C7A0C9394825531B81080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 395973 IP address blocks: 104.134.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:7a:0c:93:94:82:55:31:b8:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=5b17b59c-bc1a-492e-a784-b04d9dcf5948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:19:5d:16:e0:92:62:51:db:64:ef:76:f0: cf:28:54:c5:cf:2d:bc:16:f0:ae:30:8a:4e:88:b2: 1a:05:d9:2b:ec:ec:3f:5c:8e:e5:04:dd:73:ec:e7: 8d:17:04:b3:c9:59:37:a6:7e:d3:0a:b7:ed:4f:95: 11:3d:08:47:42:80:b8:79:0c:41:25:fe:0f:87:cb: f6:fa:80:e1:ed:ea:90:c0:e0:64:2d:f9:27:d5:7c: 29:eb:61:a7:a9:b5:f7:26:9f:37:02:f5:96:d5:27: 42:bf:41:dd:e8:1d:03:cd:be:a9:03:15:41:05:d6: 9c:69:7d:b1:8e:c7:a3:18:bd:01:69:d0:59:fe:a2: 89:d3:5a:2e:ff:3f:35:b3:d2:cb:fa:bd:90:44:a6: d1:b1:32:d3:98:39:a9:2d:a1:c7:fc:a1:4c:f7:b2: f3:cb:e3:4e:74:71:43:e6:5a:28:1e:45:ce:e5:7f: 43:12:d5:88:68:06:42:5c:83:62:8c:3e:21:f4:ec: a9:f6:1b:f6:25:28:9f:86:5f:22:07:fd:37:07:46: 48:b2:9c:20:f4:f2:c7:1b:31:4e:bf:7b:04:37:a3: ad:93:49:e5:79:a2:85:f0:ea:4f:7a:9c:0a:2e:47: 11:c2:2b:58:c5:df:3a:ab:de:87:d0:c2:f4:2e:f6: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:67:27:EE:D6:7C:C8:B5:3D:7B:29:3A:26:65:80:DF:63:87:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cb:21:5f:c1:fb:8b:85:e2:38:0e:7e:ab:4e:60:6f:34:fa: 95:85:0e:cd:c0:f5:57:e2:70:4f:a5:30:a7:f1:d0:8e:ac:ef: b7:7d:93:14:0a:59:02:05:a6:ab:a6:04:ee:94:c4:4a:bd:f1: d3:b5:c2:68:e0:56:3e:64:e0:aa:2f:f6:49:c5:83:fa:57:80: f6:ed:7c:9a:01:79:d6:92:0c:12:a8:9f:6f:8d:97:37:3a:44: e9:e1:f3:d0:09:d8:96:7d:59:4c:aa:36:f1:91:cc:10:bd:8a: 86:50:b2:21:aa:c9:df:0e:b9:54:f0:6f:b1:8e:2a:eb:ec:c6: b4:b2:81:57:48:0a:7d:39:43:93:39:61:39:8e:bc:65:a8:34: 88:8f:07:4c:a8:61:b6:46:50:c4:ec:f4:59:e8:1e:8f:af:4f: 84:fa:94:14:3b:6e:22:12:28:b6:28:c7:5f:5f:70:58:19:16: ff:a3:eb:47:32:70:87:38:15:a1:5b:47:37:99:e4:0b:40:27: c6:7f:8b:64:19:9c:6e:eb:a7:1a:79:e8:67:a5:60:b9:7d:02: 8b:b1:8f:0d:94:e5:41:9c:7e:8a:fc:c7:a2:c4:49:45:54:cd: 16:e1:ff:b8:50:73:d0:aa:b6:67:de:0a:08:f1:02:fe:d5:f9: 59:46:94:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHoMk5SCVTG4EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NWIxN2I1OWMtYmMxYS00OTJlLWE3ODQtYjA0ZDlkY2Y1OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdcZXRbgkmJR22TvdvDPKFTFzy28FvCuMIpO iLIaBdkr7Ow/XI7lBN1z7OeNFwSzyVk3pn7TCrftT5URPQhHQoC4eQxBJf4Ph8v2 +oDh7eqQwOBkLfkn1Xwp62GnqbX3Jp83AvWW1SdCv0Hd6B0Dzb6pAxVBBdacaX2x jsejGL0BadBZ/qKJ01ou/z81s9LL+r2QRKbRsTLTmDmpLaHH/KFM97Lzy+NOdHFD 5looHkXO5X9DEtWIaAZCXINijD4h9Oyp9hv2JSifhl8iB/03B0ZIspwg9PLHGzFO v3sEN6Otk0nleaKF8OpPepwKLkcRwitYxd86q96H0ML0LvYLMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmRZyfu1nzItT17KTomZYDfY4cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDlmMzhhMWYtNjE5ZC0z YzEyLWI2NjEtNTJlMmJjOGJjMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIavMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLLIV/B+4uF4jgOfqtOYG80+pWFDs3A9VficE+lMKfx0I6s77d9kxQK WQIFpqumBO6UxEq98dO1wmjgVj5k4Kov9knFg/pXgPbtfJoBedaSDBKon2+Nlzc6 ROnh89AJ2JZ9WUyqNvGRzBC9ioZQsiGqyd8OuVTwb7GOKuvsxrSygVdICn05Q5M5 YTmOvGWoNIiPB0yoYbZGUMTs9FnoHo+vT4T6lBQ7biISKLYox19fcFgZFv+j60cy cIc4FaFbRzeZ5AtAJ8Z/i2QZnG7rpxp56GelYLl9Aouxjw2U5UGcfor8x6LESUVU zRbh/7hQc9CqtmfeCgjxAv7V+VlGlAI= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:29 2025 by rpki-client