$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa File: f0e650e8-42ca-3b0b-82e7-54b60647533e.roa (raw, json) Hash identifier: 3mLyRk7YxXH734BHBM5jdyRMqbclaRWu6WM8n/sD188= Subject key identifier: A1:71:7B:4A:2B:7B:F7:6F:E3:D4:29:68:A9:03:C4:37:60:86:57:B7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3774CA1616A45271861D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36411 IP address blocks: 104.134.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:74:ca:16:16:a4:52:71:86:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=fdcee462-ad98-425e-bd20-bcb63a6774bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:e1:fc:40:f4:ba:b5:dc:c4:4a:0a:db:0d: 3a:49:51:e3:b5:86:ed:ac:81:62:d4:9f:7a:8f:fd: be:78:ae:08:90:ec:08:50:ec:ab:82:b7:21:9e:18: 81:06:5d:88:a8:83:5c:7a:a1:b3:48:1e:b5:e7:32: c9:fb:0e:5c:28:f4:34:63:50:ef:97:4d:75:0e:63: 8e:0f:95:6c:e0:43:66:5b:d9:27:9e:7d:b5:83:98: 62:2d:81:23:19:b1:4f:4b:1e:b4:81:66:9a:44:bc: 4c:0c:b9:23:95:b0:d8:bf:a3:5a:41:3b:6c:b1:46: c2:6d:6f:46:f5:f3:9a:2e:b6:c7:f8:cc:8c:21:01: bb:db:5f:c9:15:05:0a:c4:ad:23:40:51:c2:e7:e1: 1e:2d:f1:d9:83:d3:3b:5d:83:c6:f8:53:6c:ac:70: 9b:53:5c:2f:e5:b6:ea:97:77:f3:cf:ff:f5:37:fe: 22:8f:35:b1:bf:cd:16:28:1f:b5:66:6a:71:0e:ac: 03:e8:f7:67:e9:79:01:6e:6a:54:91:31:5f:3f:c6: d9:a5:fa:10:6c:05:30:33:c6:87:1e:cc:5d:5f:3a: 2b:f2:5a:6d:73:31:39:4c:19:ca:1b:20:03:50:13: d3:0f:3c:6b:42:a2:1d:18:e7:99:38:1e:14:5d:db: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:7B:4A:2B:7B:F7:6F:E3:D4:29:68:A9:03:C4:37:60:86:57:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:35:ba:f9:f3:18:b0:d1:e8:8a:0a:1c:dc:5a:e3:a3:40:4c: c3:62:29:ad:de:10:fe:64:1f:cc:ef:ae:03:2e:88:e6:2e:93: 11:77:62:8d:a7:90:9b:2e:ce:cd:30:9e:c6:34:5f:03:a0:be: 49:ff:ab:8c:b7:bc:e4:e7:de:6e:2f:34:36:fa:65:19:4f:a4: 03:f7:44:42:2c:cd:17:72:ea:3d:c3:fb:e5:e3:1c:2d:35:13: b5:7d:f8:c8:72:97:f1:65:49:78:7f:e8:e4:00:6c:56:e7:a1: f9:b8:c7:a9:57:80:d2:ce:e9:b4:6e:9c:b9:5a:13:8e:e6:12: 85:9d:8b:3f:4d:5b:4a:fb:0f:3b:f8:61:d6:4c:d3:04:06:38: 54:a8:33:cf:f5:ee:a0:3c:73:61:16:d4:10:a9:65:41:4f:1d: 78:0e:e3:e4:d5:c7:c8:cf:0d:96:5b:49:7c:1b:d0:bf:be:c4: 17:2c:aa:df:a5:f8:b4:3f:f3:7f:55:d5:be:d5:2c:db:41:d9: 73:e3:7e:91:67:36:ad:7c:76:da:27:66:78:1f:04:fe:e8:e5: 16:06:83:bf:c4:d6:fd:1e:1e:35:c6:74:6c:e7:b1:81:95:36: 2c:ee:f5:51:a4:c2:a8:e0:60:54:2f:ac:70:ff:cc:14:8d:95: c8:23:fc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3TKFhakUnGGHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmRjZWU0NjItYWQ5OC00MjVlLWJkMjAtYmNiNjNhNjc3NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fzh/ED0urXcxEoK2w06SVHjtYbtrIFi1J96 j/2+eK4IkOwIUOyrgrchnhiBBl2IqINceqGzSB615zLJ+w5cKPQ0Y1Dvl011DmOO D5Vs4ENmW9knnn21g5hiLYEjGbFPSx60gWaaRLxMDLkjlbDYv6NaQTtssUbCbW9G 9fOaLrbH+MyMIQG721/JFQUKxK0jQFHC5+EeLfHZg9M7XYPG+FNsrHCbU1wv5bbq l3fzz//1N/4ijzWxv80WKB+1ZmpxDqwD6Pdn6XkBbmpUkTFfP8bZpfoQbAUwM8aH HsxdXzor8lptczE5TBnKGyADUBPTDzxrQqIdGOeZOB4UXdsGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFxe0ore/dv49QpaKkDxDdghle3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjBlNjUwZTgtNDJjYS0z YjBiLTgyZTctNTRiNjA2NDc1MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA1uvnzGLDR6IoKHNxa46NATMNiKa3eEP5kH8zvrgMuiOYukxF3Yo2n kJsuzs0wnsY0XwOgvkn/q4y3vOTn3m4vNDb6ZRlPpAP3REIszRdy6j3D++XjHC01 E7V9+Mhyl/FlSXh/6OQAbFbnofm4x6lXgNLO6bRunLlaE47mEoWdiz9NW0r7Dzv4 YdZM0wQGOFSoM8/17qA8c2EW1BCpZUFPHXgO4+TVx8jPDZZbSXwb0L++xBcsqt+l +LQ/839V1b7VLNtB2XPjfpFnNq18dtonZngfBP7o5RYGg7/E1v0eHjXGdGznsYGV Nizu9VGkwqjgYFQvrHD/zBSNlcgj/KI= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:57 2025 by rpki-client