$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa File: d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa (raw, json) Hash identifier: 3xiVTaU6NhT6KJz0KGWBMOjrIpISEQnpbKSp3q5c/BE= Subject key identifier: DB:0F:B8:5C:5E:C1:29:65:84:93:E1:43:34:F3:6A:F1:C6:CE:9C:8A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584BB1927A4B4A1EE2E9B6378F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 36383 IP address blocks: 104.135.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:4b:4a:1e:e2:e9:b6:37:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=c28d432a-f32a-4495-8ffb-2b3e5f046b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:bc:ad:6f:db:14:90:65:fb:bd:c5:e9:a4: 64:02:70:41:60:5d:88:77:06:13:d2:34:af:b9:d8: df:64:9b:30:0d:40:ba:fb:10:6c:d9:97:28:aa:aa: f0:a0:22:c7:9e:10:7b:63:5c:0b:1d:3c:c0:35:40: 36:36:60:a2:dd:d7:23:16:6c:55:4f:9a:19:d5:5b: aa:9e:bf:5c:da:a2:b6:88:cc:3e:5e:79:5f:76:06: 7f:19:b0:6e:bd:45:ec:69:36:ae:36:14:ef:8e:15: a9:57:66:cc:5f:2c:a1:75:a1:42:48:39:82:e3:06: c4:3e:98:87:3d:4d:65:65:87:35:41:26:16:07:d8: 9a:a8:77:06:9f:ef:0f:f7:97:5b:97:8c:22:77:fc: 7b:d9:47:4b:9c:23:aa:a4:ef:cb:e9:ae:04:dd:ed: 3b:47:8a:a9:a6:f7:e0:33:99:28:09:a7:ea:b8:f3: 03:d5:23:31:b0:43:05:81:4d:d0:3a:b2:a6:2b:e8: d4:33:47:d4:69:aa:62:af:96:2d:06:7b:d9:cc:82: ed:eb:e4:69:1f:2b:54:8f:15:51:5b:5e:41:a1:d0: f2:03:64:cc:d2:ab:34:4d:fb:a7:ab:f2:eb:b6:06: b6:3e:8f:93:13:e4:9b:e7:53:d6:c3:08:9e:e3:07: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0F:B8:5C:5E:C1:29:65:84:93:E1:43:34:F3:6A:F1:C6:CE:9C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1d3dc5b-00da-3bb2-bbaa-cb1360dc3c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c4:69:b1:4d:32:e1:f3:69:5d:07:92:3f:10:ad:a9:ff:97: 97:c5:9a:45:cb:68:39:43:72:70:73:69:d8:98:c0:7b:cf:20: f4:b8:78:e0:2a:95:93:be:f6:4d:e5:84:a6:78:b9:b2:e9:ae: 62:38:51:c9:19:8a:dd:f8:c1:51:af:8b:f7:88:d7:42:1a:6d: a0:f7:e4:e9:e2:5f:17:0d:a8:d4:f0:b3:15:65:e0:97:d9:be: fe:34:47:c7:12:78:96:57:e3:4c:61:4c:97:37:77:e9:d6:bc: ae:20:91:4b:60:a2:a4:b6:c6:c2:06:15:a1:a5:21:db:68:42: 97:b4:83:4a:8e:96:3b:c3:07:18:bf:25:24:7f:e0:21:16:50: 91:53:14:94:66:7d:ce:b3:5f:39:4a:5e:fa:0a:1b:65:a1:3d: c7:5b:64:43:17:73:7e:fc:2d:21:27:f1:27:3e:1d:de:0a:78: 37:7e:71:7b:db:22:d9:78:d0:8a:f7:47:ee:dc:f2:b0:12:67: 78:e1:bf:7a:6f:29:49:84:22:c3:4d:3a:67:9f:85:2d:dd:4e: 6c:ff:71:bc:81:c3:37:0d:a0:cb:42:97:92:b1:01:0b:b7:85: 4a:94:ea:24:ec:4d:18:11:27:1d:eb:4f:81:f3:3a:f1:69:6e: 46:b1:ec:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknpLSh7i6bY3jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YzI4ZDQzMmEtZjMyYS00NDk1LThmZmItMmIzZTVmMDQ2YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZu8rW/bFJBl+73F6aRkAnBBYF2IdwYT0jSv udjfZJswDUC6+xBs2ZcoqqrwoCLHnhB7Y1wLHTzANUA2NmCi3dcjFmxVT5oZ1Vuq nr9c2qK2iMw+XnlfdgZ/GbBuvUXsaTauNhTvjhWpV2bMXyyhdaFCSDmC4wbEPpiH PU1lZYc1QSYWB9iaqHcGn+8P95dbl4wid/x72UdLnCOqpO/L6a4E3e07R4qppvfg M5koCafquPMD1SMxsEMFgU3QOrKmK+jUM0fUaapir5YtBnvZzILt6+RpHytUjxVR W15BodDyA2TM0qs0Tfunq/Lrtga2Po+TE+Sb51PWwwie4we6NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsPuFxewSllhJPhQzTzavHGzpyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDFkM2RjNWItMDBkYS0z YmIyLWJiYWEtY2IxMzYwZGMzYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDEabFNMuHzaV0Hkj8Qran/l5fFmkXLaDlDcnBzadiYwHvPIPS4eOAq lZO+9k3lhKZ4ubLprmI4UckZit34wVGvi/eI10IabaD35OniXxcNqNTwsxVl4JfZ vv40R8cSeJZX40xhTJc3d+nWvK4gkUtgoqS2xsIGFaGlIdtoQpe0g0qOljvDBxi/ JSR/4CEWUJFTFJRmfc6zXzlKXvoKG2WhPcdbZEMXc378LSEn8Sc+Hd4KeDd+cXvb Itl40Ir3R+7c8rASZ3jhv3pvKUmEIsNNOmefhS3dTmz/cbyBwzcNoMtCl5KxAQu3 hUqU6iTsTRgRJx3rT4HzOvFpbkax7GA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:53 2025 by rpki-client