$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d409e60e-f65c-3774-a31c-98e208ce7e4d.roa File: d409e60e-f65c-3774-a31c-98e208ce7e4d.roa (raw, json) Hash identifier: Bzkk96NPXv/uNJKzKqk82fMhHu5tb3cHM1AQVt75Rp8= Subject key identifier: 07:01:9B:4E:F9:26:E4:F8:3A:4E:28:09:A5:D3:19:E8:9D:68:20:61 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5F372EE8B9CCA55A51BBC600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d409e60e-f65c-3774-a31c-98e208ce7e4d.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:2e:e8:b9:cc:a5:5a:51:bb:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=de53523f-966a-4069-ab65-5fe60340189a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:4f:1a:55:1f:ea:db:05:42:2d:8f:74:15: dc:c7:8b:1f:50:c4:52:77:21:38:0f:06:cd:bb:60: 5b:c2:d1:fb:77:b0:3e:08:fc:d5:bf:a1:09:e9:03: 60:9f:70:27:8b:8c:8f:8a:8d:6d:be:03:b3:85:e3: 78:ac:fc:84:94:37:45:94:a9:56:95:f7:2f:84:2e: 39:d8:fe:47:76:24:a5:9f:57:cc:90:35:5b:7b:50: 7e:9d:5b:70:ef:f7:f7:03:fc:f6:86:58:01:80:d6: 73:26:53:65:67:a7:e1:53:6f:b9:89:62:0b:eb:13: 40:31:e2:d8:cb:4e:c3:be:dd:c3:d7:10:3c:fd:68: 5a:32:59:20:64:e7:75:84:2f:a8:23:1a:be:36:f2: 8f:41:cf:38:ab:b1:58:58:dc:19:e0:ad:e0:54:79: 16:16:df:24:0b:92:b8:1a:61:96:8d:43:60:c1:2b: 2d:8d:0a:d4:e3:93:a7:09:0f:c6:63:b3:bb:72:d5: 14:cf:a2:3f:0a:b2:1a:f2:ec:22:04:75:80:48:d9: 6f:b8:b4:bd:d2:77:51:db:55:38:5c:96:bc:db:d4: 72:11:79:a8:1a:e7:20:35:7b:74:f4:91:55:e9:91: 25:b5:87:b0:1a:56:56:5b:ca:77:23:81:7c:36:0b: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:01:9B:4E:F9:26:E4:F8:3A:4E:28:09:A5:D3:19:E8:9D:68:20:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d409e60e-f65c-3774-a31c-98e208ce7e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:65:43:21:e6:17:27:90:e2:cd:bc:e0:d1:7b:82:48:fd:b4: 6f:55:52:45:6b:55:ae:0e:9f:77:9b:f6:df:32:4c:8d:a0:c2: 3c:ba:39:4b:50:08:52:ec:79:90:f1:95:a1:85:d6:cc:d9:7d: c2:18:e1:14:a4:ea:c0:8e:35:56:94:00:aa:24:7c:ea:dd:3f: c3:b4:42:3b:d0:79:35:ca:77:c6:12:d2:eb:a9:13:af:36:ca: 35:7f:5d:3c:43:e4:63:98:45:8d:c3:47:8d:aa:df:f7:c7:1c: 5a:2e:3a:bc:40:87:74:7b:de:bb:93:82:a0:cc:08:78:54:5e: ca:ff:5b:a1:9f:b0:44:b0:0d:72:7b:8c:5b:1a:8c:f4:de:c6: 10:b2:94:90:45:25:42:71:04:54:2b:38:46:27:d1:98:9f:11: de:9b:78:e6:c5:c3:8d:1a:82:25:d9:88:f0:65:a9:44:b4:e9: 08:c2:89:9e:af:f3:94:46:6d:ba:79:8e:7b:54:d0:34:46:09: be:e0:d9:69:c5:b3:16:60:41:60:27:ec:aa:ce:84:51:c3:bf: 5b:55:b3:4d:46:e3:76:dc:b4:6f:02:24:5b:4e:93:a9:46:42: 9e:a9:8e:95:78:c6:ca:5a:13:3d:21:bc:cb:71:c7:68:82:13: 6c:db:9f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNy7oucylWlG7xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGU1MzUyM2YtOTY2YS00MDY5LWFiNjUtNWZlNjAzNDAxODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRdPGlUf6tsFQi2PdBXcx4sfUMRSdyE4DwbN u2BbwtH7d7A+CPzVv6EJ6QNgn3Ani4yPio1tvgOzheN4rPyElDdFlKlWlfcvhC45 2P5HdiSln1fMkDVbe1B+nVtw7/f3A/z2hlgBgNZzJlNlZ6fhU2+5iWIL6xNAMeLY y07Dvt3D1xA8/WhaMlkgZOd1hC+oIxq+NvKPQc84q7FYWNwZ4K3gVHkWFt8kC5K4 GmGWjUNgwSstjQrU45OnCQ/GY7O7ctUUz6I/CrIa8uwiBHWASNlvuLS90ndR21U4 XJa829RyEXmoGucgNXt09JFV6ZEltYewGlZWW8p3I4F8NgucowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcBm075JuT4Ok4oCaXTGeidaCBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDQwOWU2MGUtZjY1Yy0z Nzc0LWEzMWMtOThlMjA4Y2U3ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFlQyHmFyeQ4s284NF7gkj9tG9VUkVrVa4On3eb9t8yTI2gwjy6OUtQ CFLseZDxlaGF1szZfcIY4RSk6sCONVaUAKokfOrdP8O0QjvQeTXKd8YS0uupE682 yjV/XTxD5GOYRY3DR42q3/fHHFouOrxAh3R73ruTgqDMCHhUXsr/W6GfsESwDXJ7 jFsajPTexhCylJBFJUJxBFQrOEYn0ZifEd6beObFw40agiXZiPBlqUS06QjCiZ6v 85RGbbp5jntU0DRGCb7g2WnFsxZgQWAn7KrOhFHDv1tVs01G43bctG8CJFtOk6lG Qp6pjpV4xspaEz0hvMtxx2iCE2zbn2I= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:42 2025 by rpki-client