$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa File: e0cdd86f-bef6-3429-846c-e793c0db3717.roa (raw, json) Hash identifier: /IuxyZAAHue98+iIUTf+HYmtEaWoOS4F3Ts7PXHiJeM= Subject key identifier: 3D:16:96:85:47:BB:DB:C6:92:3C:DD:A4:76:E6:EB:96:6A:6D:18:19 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C79CF4A9C9D18FFF62160 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:79:cf:4a:9c:9d:18:ff:f6:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=0da25f76-600f-448c-80f3-0af664343933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:67:88:d4:78:21:b2:e9:47:b9:ec:68:85: c6:30:5e:c4:9c:84:9e:a2:0f:5d:41:66:e4:e5:b1: 41:cc:ef:f4:c5:17:65:85:16:da:2a:e0:c5:fd:88: 19:4d:1d:a2:56:37:d1:f0:13:52:72:4d:76:68:28: e9:72:95:a6:6b:27:e8:a5:51:7e:2a:bd:98:ab:11: 51:92:39:84:6e:4a:7a:a0:a2:05:5e:63:e3:58:7e: 34:a8:fb:d1:26:0f:9b:a0:fe:1c:c9:d1:2e:0d:6b: 0d:66:7b:68:a2:2c:6c:51:d7:93:6d:3d:da:fa:a7: 81:d3:99:a6:3f:ba:74:6b:de:49:65:20:79:1a:d7: 42:76:1f:34:31:bd:69:30:65:21:78:f9:53:d6:fe: 6f:41:79:61:64:ad:e9:a4:0b:e4:a5:27:25:a2:18: a6:7f:81:b0:06:81:ce:74:cf:80:6a:5f:80:7f:18: 5d:5e:e8:fb:40:50:55:d1:58:b3:5f:27:5e:3b:34: 4a:87:68:d8:dc:6d:36:eb:20:92:96:09:32:db:fe: 3a:6b:c7:80:9b:a8:fa:4c:66:60:f8:4f:fd:81:12: 86:cb:f4:0e:11:87:57:82:51:55:eb:12:ce:4f:da: 1a:52:66:64:7a:0f:5e:e9:64:71:d6:0e:7d:dc:c5: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:96:85:47:BB:DB:C6:92:3C:DD:A4:76:E6:EB:96:6A:6D:18:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0cdd86f-bef6-3429-846c-e793c0db3717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:3c:b4:1a:8b:69:ff:b8:8e:24:dd:e4:bb:33:9a:b0:29: 23:dc:e0:98:6e:0c:18:50:16:30:5a:65:aa:9c:e5:87:31:14: 38:32:e3:8c:dc:6d:b8:69:e9:e7:14:44:a9:11:6d:9a:7a:b1: 7a:59:d2:f1:b5:af:e9:92:cb:03:21:e5:60:a9:c0:b2:36:d7: bd:59:3f:2a:a5:40:cb:17:79:9f:21:1f:43:ef:59:ff:71:98: 24:bc:72:20:b5:95:08:0b:5b:f6:27:bf:87:3c:e6:4e:6a:25: 38:99:e6:7d:6b:f1:35:18:28:69:b0:dd:f9:8a:ae:99:01:51: 10:9c:f9:31:63:9e:8a:92:e2:b1:f5:f0:00:af:21:66:23:63: d4:b7:f1:b2:fb:e2:a0:9f:d1:3d:8f:32:7b:81:e8:6e:c1:b5: b4:22:d9:1f:f1:dd:0d:27:d8:eb:a5:00:c7:8c:d1:ba:41:9c: f8:5b:b1:92:50:3c:22:b5:06:11:a7:e9:1a:62:ca:93:3d:8e: b1:b5:40:09:71:a4:30:8c:20:07:e7:c3:7a:29:3f:76:66:ad: a0:ec:54:01:bf:39:a8:94:85:fd:db:90:59:a3:73:7c:db:77: 10:d4:91:47:f7:bd:71:dc:38:97:33:5e:3e:e0:c1:d9:ce:92: 5d:06:49:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDHnPSpydGP/2IWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MGRhMjVmNzYtNjAwZi00NDhjLTgwZjMtMGFmNjY0MzQzOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySxniNR4IbLpR7nsaIXGMF7EnISeog9dQWbk 5bFBzO/0xRdlhRbaKuDF/YgZTR2iVjfR8BNSck12aCjpcpWmayfopVF+Kr2YqxFR kjmEbkp6oKIFXmPjWH40qPvRJg+boP4cydEuDWsNZntooixsUdeTbT3a+qeB05mm P7p0a95JZSB5GtdCdh80Mb1pMGUhePlT1v5vQXlhZK3ppAvkpSclohimf4GwBoHO dM+Aal+AfxhdXuj7QFBV0VizXydeOzRKh2jY3G026yCSlgky2/46a8eAm6j6TGZg +E/9gRKGy/QOEYdXglFV6xLOT9oaUmZkeg9e6WRx1g593MXEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0WloVHu9vGkjzdpHbm65ZqbRgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTBjZGQ4NmYtYmVmNi0z NDI5LTg0NmMtZTc5M2MwZGIzNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr5PLQai2n/uI4k3eS7M5qwKSPc4JhuDBhQFjBaZaqc5YcxFDgy44zc bbhp6ecURKkRbZp6sXpZ0vG1r+mSywMh5WCpwLI2171ZPyqlQMsXeZ8hH0PvWf9x mCS8ciC1lQgLW/Ynv4c85k5qJTiZ5n1r8TUYKGmw3fmKrpkBURCc+TFjnoqS4rH1 8ACvIWYjY9S38bL74qCf0T2PMnuB6G7BtbQi2R/x3Q0n2OulAMeM0bpBnPhbsZJQ PCK1BhGn6RpiypM9jrG1QAlxpDCMIAfnw3opP3ZmraDsVAG/OaiUhf3bkFmjc3zb dxDUkUf3vXHcOJczXj7gwdnOkl0GSYs= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:12 2025 by rpki-client