$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6faa8c5-84e5-3774-9d85-9e8b79a7d731.roa File: a6faa8c5-84e5-3774-9d85-9e8b79a7d731.roa (raw, json) Hash identifier: 2PVMyqT7xBUxTiAcuvPh7u71SJDxh4LIG73qbgRgoaQ= Subject key identifier: 9E:23:1C:54:3E:C4:0B:30:81:EF:61:BE:0F:72:32:84:8F:81:30:A5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F3739A41C3CC22311C54D40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6faa8c5-84e5-3774-9d85-9e8b79a7d731.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36411 IP address blocks: 104.134.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:39:a4:1c:3c:c2:23:11:c5:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c43217f2-0545-4d87-acea-0b18e18740a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:d1:ac:c0:18:20:db:7f:1e:78:54:de:50: 3a:6e:53:41:3f:ba:5a:fa:08:b1:0f:06:0f:0f:37: a1:92:f3:90:d0:f5:8c:69:8f:75:8a:02:37:74:b2: 8e:0d:5a:c4:f6:79:3a:eb:d9:b3:b9:8b:07:b0:4c: 11:5c:ba:32:98:c7:9a:a7:62:63:3c:db:18:d6:65: d1:7c:e5:ef:70:4f:33:71:ba:64:64:33:ac:f2:ab: 42:2f:4f:47:f0:a1:fa:dc:3c:44:27:42:5c:f3:3f: 65:d3:40:2a:18:67:19:f2:58:3a:e5:68:4e:d7:0a: 0e:1a:7f:a2:a2:a0:3a:31:43:ac:d6:52:02:fc:b3: d2:de:a5:56:80:1a:d2:2e:4a:12:74:da:b4:64:eb: f7:34:b2:9e:b4:05:b6:06:57:e4:48:af:f2:54:55: 8d:f7:48:65:8b:4f:fc:44:4c:b2:f1:55:1c:c2:5e: 95:b7:06:c3:79:42:d8:cb:25:27:17:43:ac:f1:0d: 62:db:37:b1:35:61:cc:86:f5:dc:76:b0:c9:4b:db: e0:0a:02:ce:75:39:48:e8:24:b8:33:fc:95:35:b9: 23:4f:e4:53:43:62:bd:02:5a:31:f9:15:0d:28:47: 10:58:87:5c:4d:51:04:53:89:e3:93:1b:ff:d7:fe: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:1C:54:3E:C4:0B:30:81:EF:61:BE:0F:72:32:84:8F:81:30:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6faa8c5-84e5-3774-9d85-9e8b79a7d731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:50:d5:f3:d5:c4:4b:24:7e:1d:1d:78:84:91:1f:17:c3:58: 62:2d:7e:1f:f3:9c:e6:d1:dd:60:60:13:9d:5a:fd:e5:0d:e0: 32:63:e3:0c:66:c9:a0:f4:df:35:46:7a:4e:53:33:a1:45:38: f1:0c:ee:c1:f5:04:96:55:a1:fa:e4:5c:c3:c9:fd:b7:8c:8d: d7:a4:32:33:30:1d:c1:4e:ea:46:3a:52:a6:d2:68:da:5f:90: 9f:c3:63:8c:74:7a:e4:8f:b6:c8:9a:d0:da:02:7c:50:fb:8e: d0:f5:c9:07:bb:92:32:89:0f:de:5f:71:1c:d1:4e:d7:37:5d: 5c:27:ff:27:67:85:c3:96:dd:2d:f3:c4:5d:9b:36:a0:91:7e: 13:e7:d1:72:c4:0b:ec:f2:51:7f:c6:8a:ed:c3:5b:22:17:2f: 77:77:e1:a5:a9:97:bc:a9:da:48:88:f2:34:e9:8c:86:99:46: f2:5e:de:8c:6d:24:c2:e3:95:0a:39:fd:1d:6d:0d:17:d5:f5: 16:fa:f2:29:80:c0:34:e6:ec:76:6a:74:0a:e1:e2:bf:c1:23: 4c:48:ab:c0:ce:9c:0a:76:9b:ee:0c:d6:44:be:9c:6b:6c:45: 01:60:44:9f:e8:77:9b:02:f7:a5:a3:2f:2b:b5:b8:69:7a:e5: ff:29:f8:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzmkHDzCIxHFTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzQzMjE3ZjItMDU0NS00ZDg3LWFjZWEtMGIxOGUxODc0MGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgzRrMAYINt/HnhU3lA6blNBP7pa+gixDwYP DzehkvOQ0PWMaY91igI3dLKODVrE9nk669mzuYsHsEwRXLoymMeap2JjPNsY1mXR fOXvcE8zcbpkZDOs8qtCL09H8KH63DxEJ0Jc8z9l00AqGGcZ8lg65WhO1woOGn+i oqA6MUOs1lIC/LPS3qVWgBrSLkoSdNq0ZOv3NLKetAW2BlfkSK/yVFWN90hli0/8 REyy8VUcwl6VtwbDeULYyyUnF0Os8Q1i2zexNWHMhvXcdrDJS9vgCgLOdTlI6CS4 M/yVNbkjT+RTQ2K9Alox+RUNKEcQWIdcTVEEU4njkxv/1/52UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4jHFQ+xAswge9hvg9yMoSPgTClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTZmYWE4YzUtODRlNS0z Nzc0LTlkODUtOWU4Yjc5YTdkNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpQ1fPVxEskfh0deISRHxfDWGItfh/znObR3WBgE51a/eUN4DJj4wxm yaD03zVGek5TM6FFOPEM7sH1BJZVofrkXMPJ/beMjdekMjMwHcFO6kY6UqbSaNpf kJ/DY4x0euSPtsia0NoCfFD7jtD1yQe7kjKJD95fcRzRTtc3XVwn/ydnhcOW3S3z xF2bNqCRfhPn0XLEC+zyUX/Giu3DWyIXL3d34aWpl7yp2kiI8jTpjIaZRvJe3oxt JMLjlQo5/R1tDRfV9Rb68imAwDTm7HZqdArh4r/BI0xIq8DOnAp2m+4M1kS+nGts RQFgRJ/od5sC96WjLyu1uGl65f8p+P8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:14 2025 by rpki-client