$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa File: 0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa (raw, json) Hash identifier: d2u1xfdGTSb2a2llPBmPazi4t80Lvhmq3UE2hcHUsaE= Subject key identifier: F8:90:7C:9D:3C:84:56:01:6A:C4:50:8F:2D:64:5E:A6:E6:8A:BE:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3769E241ABEA64979DAD00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.134.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:69:e2:41:ab:ea:64:97:9d:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=ba6e26bc-1dc3-46a7-9210-874b18d3bb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:08:e0:f0:89:6d:24:7f:06:50:7c:a1:91: 79:4c:70:11:75:8e:52:e1:d0:f4:b0:57:4b:58:4f: 25:d4:fe:e5:d2:2f:ec:35:58:fa:2e:dc:0f:da:7a: 9e:9b:76:9d:0a:e0:ca:49:50:f7:ae:0c:21:0c:7b: 16:e4:2a:25:74:7c:fa:54:7b:dd:de:d1:bc:47:46: b8:c4:b7:c9:8d:1a:10:91:0a:27:00:24:39:ec:1c: 08:67:86:a4:41:5b:ef:32:53:26:da:ff:18:08:be: 09:92:3b:84:99:da:46:8e:fc:50:b1:f0:98:c9:e0: a9:d0:40:6f:18:f8:0a:e3:4a:5d:cd:67:0b:fa:19: 02:b8:1d:5a:e1:1e:ff:68:fb:86:e0:61:56:25:22: 68:19:1a:b9:61:30:9c:0b:e8:a7:5e:73:9c:45:10: 06:1b:1c:98:3d:29:20:e4:36:38:c5:1d:79:39:62: 3c:06:c7:de:f1:65:8a:09:10:2f:f8:be:c1:45:ea: 1a:9a:b6:ff:1a:f6:83:70:08:e7:68:8d:5a:5c:30: 4d:0b:db:35:8a:19:1f:d4:1b:6f:7c:e0:63:49:a7: 99:c2:57:aa:b9:93:2b:44:1c:48:9a:95:b9:02:73: db:90:96:c5:74:8f:a8:6a:cb:b2:01:78:34:bd:01: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:90:7C:9D:3C:84:56:01:6A:C4:50:8F:2D:64:5E:A6:E6:8A:BE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a5:62:a5:79:2e:3b:25:de:0c:56:18:35:ae:d1:04:6f:30: 61:e5:3b:65:72:87:af:55:be:d4:27:24:8c:56:f2:2a:86:9b: e9:bf:87:97:08:96:a8:d8:ad:67:c8:b1:5c:d5:0a:3b:19:55: d8:20:35:c4:13:c8:8f:f3:3b:5b:f2:7c:3c:a4:33:9b:2b:a9: 5e:1f:22:49:9d:7a:04:85:db:72:78:0d:da:b7:e9:13:6b:75: 19:76:65:b1:61:8b:05:8f:88:d3:df:a9:84:dc:c4:24:06:2b: 89:70:13:00:bd:5a:31:14:b0:d2:7b:9b:ce:3e:2f:bf:83:1b: 9f:c3:49:f7:5e:52:4d:c0:77:61:e2:6c:3d:27:d1:08:71:27: 2e:26:7a:f5:92:1e:96:a4:04:fd:6b:bb:5b:fe:50:d3:af:d5: cb:56:26:f3:1c:ff:7f:72:e7:43:67:45:6a:7a:97:4f:cc:48: 01:34:d9:9b:12:ff:c9:7b:2d:63:b4:8b:10:44:76:cb:e6:d0: 70:89:b9:cc:75:28:37:f3:75:ad:97:51:37:ac:87:35:35:95: 8e:bc:a1:4c:41:c2:e6:12:fb:a4:bd:9e:47:bb:9e:24:18:74: ad:6e:b1:29:30:4f:f2:42:6a:20:a5:e3:a9:3c:42:92:8d:76: c1:85:54:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2niQavqZJedrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YmE2ZTI2YmMtMWRjMy00NmE3LTkyMTAtODc0YjE4ZDNiYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox0I4PCJbSR/BlB8oZF5THARdY5S4dD0sFdL WE8l1P7l0i/sNVj6LtwP2nqem3adCuDKSVD3rgwhDHsW5ColdHz6VHvd3tG8R0a4 xLfJjRoQkQonACQ57BwIZ4akQVvvMlMm2v8YCL4JkjuEmdpGjvxQsfCYyeCp0EBv GPgK40pdzWcL+hkCuB1a4R7/aPuG4GFWJSJoGRq5YTCcC+inXnOcRRAGGxyYPSkg 5DY4xR15OWI8Bsfe8WWKCRAv+L7BReoamrb/GvaDcAjnaI1aXDBNC9s1ihkf1Btv fOBjSaeZwlequZMrRBxImpW5AnPbkJbFdI+oasuyAXg0vQFhmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiQfJ08hFYBasRQjy1kXqbmir5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGJhMzNjMDctM2ExYS0z ZTM5LWFkNmQtMDBhMWRlMzA1YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGylYqV5Ljsl3gxWGDWu0QRvMGHlO2Vyh69VvtQnJIxW8iqGm+m/h5cI lqjYrWfIsVzVCjsZVdggNcQTyI/zO1vyfDykM5srqV4fIkmdegSF23J4Ddq36RNr dRl2ZbFhiwWPiNPfqYTcxCQGK4lwEwC9WjEUsNJ7m84+L7+DG5/DSfdeUk3Ad2Hi bD0n0QhxJy4mevWSHpakBP1ru1v+UNOv1ctWJvMc/39y50NnRWp6l0/MSAE02ZsS /8l7LWO0ixBEdsvm0HCJucx1KDfzda2XUTeshzU1lY68oUxBwuYS+6S9nke7niQY dK1usSkwT/JCaiCl46k8QpKNdsGFVOY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:58:57 2025 by rpki-client