$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/efd966a8-18d6-3657-8691-f77ee28b5096.roa File: efd966a8-18d6-3657-8691-f77ee28b5096.roa (raw, json) Hash identifier: sQjPfAh79/TJ0zMwmlBuT3b5Sc1cZE0m+yiPXs4fuuU= Subject key identifier: 6D:0C:E8:8D:1D:4C:B6:76:C7:D0:9B:3F:86:78:63:A6:A1:FC:AB:50 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B540C975CD8F8F9DE7B304580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/efd966a8-18d6-3657-8691-f77ee28b5096.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 104.134.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:97:5c:d8:f8:f9:de:7b:30:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=dd92d8c3-bce3-407a-b8cd-4b160608d08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:14:fa:14:6a:55:71:54:6f:f5:3b:a7:5b: 2e:b9:e5:b8:40:fd:cd:db:1e:a2:95:e7:76:85:61: 40:a3:c5:e3:e5:b8:42:ac:b1:91:ff:f5:e7:d2:35: fe:12:65:e5:95:71:db:03:74:04:7b:d8:fa:8a:0c: da:d4:b0:6d:09:dc:02:cd:88:23:e5:9d:08:55:7a: 76:0d:e7:ec:41:55:65:fc:26:69:da:53:97:c3:f8: 0b:06:81:6e:a4:f3:fe:9d:e9:9f:14:e3:99:8b:af: 27:c4:a3:35:f9:af:aa:b0:ee:ac:66:ba:09:42:67: fd:f0:00:5b:a5:5a:26:bf:4e:32:20:1d:ab:1d:03: ba:76:4a:46:d4:aa:18:56:31:8b:e7:50:04:80:c0: 36:4b:62:eb:13:ba:95:19:62:c1:03:21:55:dc:cc: 7f:cf:44:3f:bf:59:d0:13:c9:c5:b4:bf:41:ff:18: 94:52:85:2f:82:20:32:75:11:ca:23:05:77:cc:b5: 42:69:0e:20:dc:0a:ef:3b:56:34:66:6e:fc:f4:59: 9f:af:11:d1:6c:a3:47:d4:e9:00:b7:db:68:69:fa: d5:b2:04:dd:46:e2:a4:e9:6e:22:50:33:3b:38:c8: 91:6a:55:fa:0c:c3:1b:ce:29:05:47:7d:8a:30:94: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0C:E8:8D:1D:4C:B6:76:C7:D0:9B:3F:86:78:63:A6:A1:FC:AB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/efd966a8-18d6-3657-8691-f77ee28b5096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1a:09:84:f8:b7:8b:a8:1e:5b:73:a8:a5:08:cf:d9:42:c4: ce:f7:6f:78:33:44:04:19:59:b7:c4:5b:9b:d6:f0:f2:ad:58: ce:1b:c6:db:23:dc:51:49:40:02:ce:a5:95:e1:ff:79:bc:f1: c3:eb:53:4e:b3:a6:d7:d5:48:20:48:86:2f:56:4f:07:a4:ba: 92:4c:8c:d6:26:c6:c9:58:c4:0f:e7:25:15:f5:3d:82:ab:d4: 4e:31:3a:54:92:b4:a2:f6:5e:b6:97:0f:52:d5:3b:e7:f5:2a: 21:df:ce:e7:65:90:55:70:a9:1c:9d:0e:e0:64:51:c3:cc:94: 38:ad:03:2b:04:a5:f7:84:a1:f6:16:e6:22:57:4a:83:9f:bc: 6a:af:43:e8:15:4e:47:9d:bb:de:ed:3b:38:a1:bd:94:3e:9c: c1:49:80:71:6b:88:6c:9d:06:64:36:7e:c9:b5:fe:b0:98:88: 8e:a2:53:22:c0:2a:55:7e:f1:24:b1:52:99:90:93:5f:50:c8: df:9c:fa:cf:72:21:85:fa:8f:9e:e8:41:e2:1a:19:7b:9c:a4: ba:c7:03:c5:a0:4e:64:fe:66:45:df:50:6e:13:64:b1:ff:45: 63:a8:74:6c:80:f9:2e:ad:4b:a6:a5:e3:23:fc:0c:26:6b:4c: ff:bf:9c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJdc2Pj53nswRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQ5MmQ4YzMtYmNlMy00MDdhLWI4Y2QtNGIxNjA2MDhkMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN4U+hRqVXFUb/U7p1suueW4QP3N2x6iled2 hWFAo8Xj5bhCrLGR//Xn0jX+EmXllXHbA3QEe9j6igza1LBtCdwCzYgj5Z0IVXp2 DefsQVVl/CZp2lOXw/gLBoFupPP+nemfFOOZi68nxKM1+a+qsO6sZroJQmf98ABb pVomv04yIB2rHQO6dkpG1KoYVjGL51AEgMA2S2LrE7qVGWLBAyFV3Mx/z0Q/v1nQ E8nFtL9B/xiUUoUvgiAydRHKIwV3zLVCaQ4g3ArvO1Y0Zm789FmfrxHRbKNH1OkA t9toafrVsgTdRuKk6W4iUDM7OMiRalX6DMMbzikFR32KMJTK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0M6I0dTLZ2x9CbP4Z4Y6ah/KtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWZkOTY2YTgtMThkNi0z NjU3LTg2OTEtZjc3ZWUyOGI1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEaCYT4t4uoHltzqKUIz9lCxM73b3gzRAQZWbfEW5vW8PKtWM4bxtsj 3FFJQALOpZXh/3m88cPrU06zptfVSCBIhi9WTwekupJMjNYmxslYxA/nJRX1PYKr 1E4xOlSStKL2XraXD1LVO+f1KiHfzudlkFVwqRydDuBkUcPMlDitAysEpfeEofYW 5iJXSoOfvGqvQ+gVTkedu97tOzihvZQ+nMFJgHFriGydBmQ2fsm1/rCYiI6iUyLA KlV+8SSxUpmQk19QyN+c+s9yIYX6j57oQeIaGXucpLrHA8WgTmT+ZkXfUG4TZLH/ RWOodGyA+S6tS6al4yP8DCZrTP+/nCc= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:28 2025 by rpki-client