$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa File: 02ae0dce-8d66-3178-9404-74219b4a48ca.roa (raw, json) Hash identifier: gm841TqWXJtIkacccji8XVGJRI8wx9I0TP+xlLVf3OM= Subject key identifier: BB:88:09:22:53:1F:3C:24:EB:6D:86:B3:39:D5:9B:20:77:34:FC:C7 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584E0D842988115B0B938A8DBD80 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 8075 IP address blocks: 104.237.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:29:88:11:5b:0b:93:8a:8d:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=2c8ef7e7-03b9-4c16-89a3-ed4768b74dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:61:55:72:3f:ef:3b:ed:b0:30:31:9f:0e: 44:31:bf:36:45:6e:e0:e1:95:23:ae:f3:fa:57:35: f1:2d:c2:bd:b1:35:e9:c8:d5:36:97:20:4a:9b:26: ca:cf:48:ed:81:10:00:56:fd:35:d7:54:3a:5b:06: 65:96:07:b0:ce:e6:22:da:e8:94:8b:62:8f:1b:07: 85:c6:21:cd:d9:de:2f:6f:d6:3c:f6:31:87:5c:b6: 29:72:1d:f1:46:0c:30:b8:44:ac:54:76:bd:8f:5e: 7f:bb:a7:c0:53:28:12:ab:c2:0b:f6:d1:2f:3a:75: 03:01:48:ca:97:ef:0b:d8:94:7a:1f:98:78:2b:ab: 15:39:d6:29:4f:ea:0f:70:ae:6e:8a:c3:fc:42:7c: 53:a6:3b:1f:9b:e9:4d:26:8a:60:97:98:10:ed:a9: 28:38:db:54:be:db:00:a4:20:31:aa:d8:d0:79:56: 36:64:53:75:46:05:74:db:69:52:a8:4e:d9:03:21: f1:e1:a7:15:c2:80:1f:96:7d:5b:71:c2:c7:90:e3: a0:fc:c0:88:90:6d:02:a8:5d:d8:01:d6:a8:b6:21: 1a:41:19:fc:a9:41:5e:25:74:5f:e1:4a:99:08:d3: 8b:09:b9:a5:7d:ae:7a:c5:b1:26:3f:fd:c6:f3:01: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:09:22:53:1F:3C:24:EB:6D:86:B3:39:D5:9B:20:77:34:FC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:61:33:25:4c:8d:9a:74:05:0a:13:0d:67:3a:e9:ba:34:b4: 20:c6:98:3d:b5:bd:94:89:fc:84:c7:70:6e:27:28:ca:12:05: 15:e1:ff:8e:51:12:40:f8:3c:e8:01:83:3c:08:f6:51:1e:23: 78:86:ff:f8:dc:67:02:df:60:94:a5:f9:85:38:80:52:e7:f6: 98:cd:65:95:1b:ff:ce:e0:61:7d:8e:11:bb:76:93:32:1a:c8: ff:8b:5f:3d:7d:88:63:c6:e4:59:be:fa:7d:45:ee:cb:2f:fc: 36:68:bb:ce:c3:75:38:1e:31:41:33:36:c7:4b:91:45:9f:b4: f0:d6:ab:1d:c1:8e:8a:99:8d:21:57:5e:14:11:a8:8f:d9:7b: 1f:ce:db:ae:1f:93:1b:eb:d9:20:bb:93:de:05:37:96:d8:ac: 73:4a:a5:32:b7:87:ba:50:41:fe:28:04:e7:58:29:93:7f:62: e8:dd:d8:cf:85:81:48:3c:14:ca:9a:2b:a1:b6:d6:5c:57:5e: 65:78:a3:29:06:09:06:35:68:9f:d2:7f:d5:fa:2d:be:4e:51: c7:0b:57:ce:3a:fa:cf:1a:94:ec:a0:6d:9c:fe:e8:74:8d:73: d1:db:a5:58:7b:e1:ee:f3:cc:fd:77:d5:ee:e0:61:52:df:b5: f3:f4:32:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCmIEVsLk4qNvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk MmM4ZWY3ZTctMDNiOS00YzE2LTg5YTMtZWQ0NzY4Yjc0ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxthVXI/7zvtsDAxnw5EMb82RW7g4ZUjrvP6 VzXxLcK9sTXpyNU2lyBKmybKz0jtgRAAVv0111Q6WwZllgewzuYi2uiUi2KPGweF xiHN2d4vb9Y89jGHXLYpch3xRgwwuESsVHa9j15/u6fAUygSq8IL9tEvOnUDAUjK l+8L2JR6H5h4K6sVOdYpT+oPcK5uisP8QnxTpjsfm+lNJopgl5gQ7akoONtUvtsA pCAxqtjQeVY2ZFN1RgV022lSqE7ZAyHx4acVwoAfln1bccLHkOOg/MCIkG0CqF3Y AdaotiEaQRn8qUFeJXRf4UqZCNOLCbmlfa56xbEmP/3G8wHQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuICSJTHzwk622GsznVmyB3NPzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvMDJhZTBkY2UtOGQ2Ni0z MTc4LTk0MDQtNzQyMTliNGE0OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNhMyVMjZp0BQoTDWc66bo0tCDGmD21vZSJ/ITHcG4nKMoSBRXh/45R EkD4POgBgzwI9lEeI3iG//jcZwLfYJSl+YU4gFLn9pjNZZUb/87gYX2OEbt2kzIa yP+LXz19iGPG5Fm++n1F7ssv/DZou87DdTgeMUEzNsdLkUWftPDWqx3BjoqZjSFX XhQRqI/Zex/O264fkxvr2SC7k94FN5bYrHNKpTK3h7pQQf4oBOdYKZN/Yujd2M+F gUg8FMqaK6G21lxXXmV4oykGCQY1aJ/Sf9X6Lb5OUccLV846+s8alOygbZz+6HSN c9HbpVh74e7zzP131e7gYVLftfP0Mlk= -----END CERTIFICATE-----Generated at Sat Jun 13 13:46:54 2026 by rpki-client