$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa File: dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa (raw, json) Hash identifier: sJreM8EfC4py7TyTKDzNaMcvSdGUbtRnB7Fug0ot7FE= Subject key identifier: E8:76:C2:E2:B7:85:F6:1C:C2:2E:C0:E2:5B:FD:56:F9:B6:E0:3C:D4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F373842A98016F86C9E1680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:38:42:a9:80:16:f8:6c:9e:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=db712c7d-d8ec-4a1d-a0cd-c1dff9c0b238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:40:38:25:e4:ad:2b:20:0c:92:18:fa:c3:89: 21:66:37:90:c1:82:9a:f5:e7:78:f5:62:27:2c:7a: 91:93:44:19:f7:b2:2b:f2:f8:5e:03:83:d4:69:30: d0:1e:ae:7f:37:e4:f5:26:cf:17:4d:d7:ce:57:4f: cf:52:ea:c7:ad:65:a4:08:98:98:d0:fb:84:e2:a3: 51:87:cd:31:d9:93:26:0d:fe:0c:c4:24:89:b3:1f: a0:fd:6a:9b:da:3f:f5:6e:c1:7f:de:d6:db:e7:84: f9:63:22:0c:8e:7f:65:f7:1f:15:e1:d4:29:06:81: 1c:ff:26:e4:57:96:d8:93:4d:e1:94:47:0f:0e:b9: bf:38:23:c7:7c:fb:18:56:29:2e:6d:b3:e5:d2:ff: f9:77:1a:b9:40:21:8a:0f:75:33:c5:bf:f6:f3:26: b1:fb:c7:27:b1:dc:32:9f:c9:54:20:fd:4e:b0:36: 67:34:69:4d:14:48:74:5d:d5:d7:39:53:ef:65:bc: 10:08:ed:8e:ac:a5:d5:42:26:df:d7:85:e8:14:c2: e1:e1:cc:2e:99:25:07:d3:aa:20:d8:3b:38:1b:6f: 25:2a:5f:fd:19:34:ca:f9:92:bb:0d:94:a7:e8:3f: c4:55:69:70:51:a7:07:2d:d7:8a:f4:16:be:cb:41: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:76:C2:E2:B7:85:F6:1C:C2:2E:C0:E2:5B:FD:56:F9:B6:E0:3C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:22:93:ec:9a:2e:fc:d9:b5:d5:16:17:d1:34:ce:d2:81:fd: 29:f7:fc:b6:a5:3d:fe:3a:73:be:8e:28:50:02:62:70:d8:5f: 0f:77:08:6b:6d:44:c9:ff:6a:c1:60:7c:a7:9e:ee:2c:e5:af: d0:df:2b:b1:a2:fd:20:72:f6:93:17:18:95:11:48:5a:f1:55: c7:3f:3c:49:1b:4f:b1:80:da:b1:69:b0:b2:b1:be:ea:cc:40: 92:95:c0:5d:08:9f:7d:9a:05:36:03:49:0f:0c:c4:fa:07:0e: 82:25:3f:65:80:3b:d5:9d:0a:d1:9a:90:bd:d7:d4:4d:42:9e: cc:28:c8:b6:1d:bd:41:ef:89:c2:11:c1:1d:4e:a3:e0:84:bc: 55:f3:64:1e:ab:25:ec:f2:05:ec:84:e1:1d:38:e3:c6:0a:b3: 93:41:c7:c5:32:f5:a1:0d:d3:c4:8d:22:96:e2:31:7c:01:d4: 44:3d:b9:3b:a5:dc:e4:a1:b4:e5:05:51:6c:8a:50:a5:81:9c: b9:0e:ad:a3:3c:e0:85:a2:0f:1d:05:b4:37:96:83:9f:f8:96: e6:24:f1:ee:e1:b2:b6:6b:f1:9a:ed:de:b6:44:db:4c:dd:af: e0:1c:e8:14:9c:71:82:2a:64:36:3d:2b:ec:29:82:65:1b:23: 42:b6:58:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzhCqYAW+GyeFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGI3MTJjN2QtZDhlYy00YTFkLWEwY2QtYzFkZmY5YzBiMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUA4JeStKyAMkhj6w4khZjeQwYKa9ed49WIn LHqRk0QZ97Ir8vheA4PUaTDQHq5/N+T1Js8XTdfOV0/PUurHrWWkCJiY0PuE4qNR h80x2ZMmDf4MxCSJsx+g/Wqb2j/1bsF/3tbb54T5YyIMjn9l9x8V4dQpBoEc/ybk V5bYk03hlEcPDrm/OCPHfPsYVikubbPl0v/5dxq5QCGKD3Uzxb/28yax+8cnsdwy n8lUIP1OsDZnNGlNFEh0XdXXOVPvZbwQCO2OrKXVQibf14XoFMLh4cwumSUH06og 2Ds4G28lKl/9GTTK+ZK7DZSn6D/EVWlwUacHLdeK9Ba+y0F5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh2wuK3hfYcwi7A4lv9Vvm24DzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGM5ZmRjMDAtZjVlOC0z ZGUxLTgwMjYtNzliZmZjY2QxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkik+yaLvzZtdUWF9E0ztKB/Sn3/LalPf46c76OKFACYnDYXw93CGtt RMn/asFgfKee7izlr9DfK7Gi/SBy9pMXGJURSFrxVcc/PEkbT7GA2rFpsLKxvurM QJKVwF0In32aBTYDSQ8MxPoHDoIlP2WAO9WdCtGakL3X1E1CnswoyLYdvUHvicIR wR1Oo+CEvFXzZB6rJezyBeyE4R0448YKs5NBx8Uy9aEN08SNIpbiMXwB1EQ9uTul 3OShtOUFUWyKUKWBnLkOraM84IWiDx0FtDeWg5/4luYk8e7hsrZr8Zrt3rZE20zd r+Ac6BSccYIqZDY9K+wpgmUbI0K2WCE= -----END CERTIFICATE-----Generated at Thu Oct 9 20:05:18 2025 by rpki-client