$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af3f7240-a8ba-3ae8-9089-1c565c75051a.roa File: af3f7240-a8ba-3ae8-9089-1c565c75051a.roa (raw, json) Hash identifier: 7Me5vSp+EeJqMfVYSKlKSHKQsXlnUeMeU93c37a93C0= Subject key identifier: 1E:BE:F8:FD:F1:C4:7F:F8:4D:24:3B:49:D0:02:D6:CB:60:72:29:D3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B973C963A6E944A43D5771720 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af3f7240-a8ba-3ae8-9089-1c565c75051a.roa Signing time: Tue 21 Oct 2025 02:36:50 +0000 ROA not before: Tue 21 Oct 2025 02:36:50 +0000 ROA not after: Mon 19 Jan 2026 03:36:50 +0000 asID: 15169 IP address blocks: 104.134.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:3c:96:3a:6e:94:4a:43:d5:77:17:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 21 02:36:50 2025 GMT Not After : Jan 19 03:36:50 2026 GMT Subject: CN=8a6a16fc-3331-42a8-b19f-aaa45e75f3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:5c:4f:b9:c0:5b:36:10:94:a5:13:78:64: 33:6f:0f:85:ba:88:e3:d7:07:cd:98:bf:b3:b5:d9: ce:3d:ff:88:3c:d4:50:53:c7:ed:ab:11:14:7b:2c: 4d:fc:de:63:a1:ad:ee:2e:c9:fd:51:db:20:0f:5a: 16:68:1f:ba:1a:a0:f3:b5:bb:b7:95:6e:a2:15:2e: fb:8f:ca:bd:68:08:2d:64:36:28:e7:bf:df:25:f2: b3:89:10:34:0c:8a:4e:78:2e:3e:73:84:85:93:b9: 84:27:ab:e2:d8:be:50:80:3e:2a:4a:d9:56:cd:1e: af:d6:7b:b9:43:e3:bb:66:10:3b:1c:e8:2f:dd:ff: 82:f4:1a:38:71:e0:d0:87:8f:4d:9c:c6:7f:b0:59: 71:96:ba:20:4c:44:4b:d3:f0:7c:6a:6f:73:9b:f5: 39:86:b9:fa:61:49:3a:dc:30:d7:96:ac:f6:30:66: 28:d6:e1:d2:99:a9:a1:bb:dd:55:52:39:c4:4b:6e: 61:09:b8:85:75:6e:fe:71:33:6a:24:37:dc:b5:00: 69:94:8e:0a:b3:6d:0b:13:49:50:88:65:01:56:1b: 3d:db:aa:06:d1:41:be:6c:d4:2e:a3:3b:05:6f:d1: 4c:aa:da:fd:ef:1f:e5:e2:49:ec:f4:14:6d:6e:ea: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:F8:FD:F1:C4:7F:F8:4D:24:3B:49:D0:02:D6:CB:60:72:29:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af3f7240-a8ba-3ae8-9089-1c565c75051a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:45:b1:7c:43:80:99:02:14:35:f6:b0:b3:85:8f:ae:bc:14: 2b:65:d1:68:11:c8:0b:f5:b0:0e:c4:68:56:81:e7:22:5f:a4: 39:32:90:5e:b9:f6:24:70:92:c1:03:e0:74:a5:41:3a:36:42: 53:34:f4:93:ae:8b:81:d2:7a:bd:9e:b8:a0:19:eb:74:7e:c2: 58:41:ec:7b:12:82:44:97:46:66:47:72:7f:44:d3:6f:e4:bc: 3a:f6:00:c9:1d:80:e3:70:6e:5d:5b:67:c0:9d:39:3a:b7:cb: 6d:3f:81:b1:e0:35:ce:08:f6:14:1f:63:c3:65:9e:6f:33:bd: ac:58:c8:33:cb:05:7d:a4:5f:af:3d:97:7c:20:d1:12:8d:59: 20:ff:8d:7b:72:c6:ec:00:fb:22:82:0a:35:a1:af:b5:54:66: 1f:91:2a:84:be:40:28:8c:45:7a:7d:08:b1:5c:ad:5e:df:c8: 6e:d1:ae:08:63:08:af:06:f1:53:52:15:47:bf:7d:56:d1:45: 22:d4:5e:9c:66:50:91:8a:4c:cc:a3:cc:15:24:4b:fc:28:89: c0:98:31:19:39:ab:0b:23:29:69:e9:1c:5a:a8:11:02:a3:81: 5d:7e:ed:84:53:ab:c8:05:fd:01:e6:1e:3b:7d:27:5e:fa:d4: 92:1d:1a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXPJY6bpRKQ9V3FyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAyMTAyMzY1MFoXDTI2MDExOTAzMzY1MFowLzEtMCsGA1UEAxMk OGE2YTE2ZmMtMzMzMS00MmE4LWIxOWYtYWFhNDVlNzVmM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE5cT7nAWzYQlKUTeGQzbw+Fuojj1wfNmL+z tdnOPf+IPNRQU8ftqxEUeyxN/N5joa3uLsn9UdsgD1oWaB+6GqDztbu3lW6iFS77 j8q9aAgtZDYo57/fJfKziRA0DIpOeC4+c4SFk7mEJ6vi2L5QgD4qStlWzR6v1nu5 Q+O7ZhA7HOgv3f+C9Bo4ceDQh49NnMZ/sFlxlrogTERL0/B8am9zm/U5hrn6YUk6 3DDXlqz2MGYo1uHSmamhu91VUjnES25hCbiFdW7+cTNqJDfctQBplI4Ks20LE0lQ iGUBVhs926oG0UG+bNQuozsFb9FMqtr97x/l4kns9BRtburEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6++P3xxH/4TSQ7SdAC1stgcinTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWYzZjcyNDAtYThiYS0z YWU4LTkwODktMWM1NjVjNzUwNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNFsXxDgJkCFDX2sLOFj668FCtl0WgRyAv1sA7EaFaB5yJfpDkykF65 9iRwksED4HSlQTo2QlM09JOui4HSer2euKAZ63R+wlhB7HsSgkSXRmZHcn9E02/k vDr2AMkdgONwbl1bZ8CdOTq3y20/gbHgNc4I9hQfY8Nlnm8zvaxYyDPLBX2kX689 l3wg0RKNWSD/jXtyxuwA+yKCCjWhr7VUZh+RKoS+QCiMRXp9CLFcrV7fyG7Rrghj CK8G8VNSFUe/fVbRRSLUXpxmUJGKTMyjzBUkS/woicCYMRk5qwsjKWnpHFqoEQKj gV1+7YRTq8gF/QHmHjt9J1761JIdGng= -----END CERTIFICATE-----Generated at Tue Nov 4 17:12:25 2025 by rpki-client