$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa File: 9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json) Hash identifier: sJylaivY4C3eJUI+PGAbqB2KBUdFKUVf7oaT8F4nDLA= Subject key identifier: 57:B0:6A:67:18:89:E3:7B:F0:09:CB:B9:77:C8:0A:6A:D9:E9:78:CF Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584AA85BB982C705BCFDACE97E80 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14603 IP address blocks: 104.237.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b9:82:c7:05:bc:fd:ac:e9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=a16892d9-272a-4afb-b543-96ca963bf292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:c3:a9:52:95:34:ef:d9:df:9c:65:3d:92: f0:df:9b:74:35:01:ac:a5:54:e6:e7:98:c8:ed:bd: 40:f3:8e:cf:40:b5:62:06:71:d4:fa:70:b4:54:c2: 6a:2d:ff:c2:44:85:85:a4:b6:54:13:36:cc:32:0c: 75:23:66:ea:3a:17:fb:58:9d:f4:31:73:1c:9c:fa: 0f:f5:70:31:07:0c:56:ae:12:43:0d:1a:4d:c5:ef: b6:23:c9:a4:85:4c:4b:3f:8e:31:e7:22:3a:75:05: 0a:32:ab:82:16:c5:2f:9c:a5:f5:81:cf:8c:eb:8d: 0e:78:85:a2:f2:28:de:23:9a:f3:08:af:46:27:d6: cc:ca:e3:85:52:88:17:2d:f4:fc:7f:ed:1f:d2:27: 11:9b:18:f8:09:42:2a:fd:fe:a1:25:4e:65:7b:8a: 32:fc:e7:cc:1d:97:f3:2b:8c:8e:2b:e1:44:73:ff: e8:1a:39:b0:86:e0:3b:df:ae:fc:8e:b9:6a:00:78: 19:cc:21:37:4d:a2:8c:98:e7:bf:6d:ff:7c:c2:26: 09:6c:11:4c:e5:0c:7b:96:de:37:85:83:7b:52:fb: d4:79:3e:01:30:95:ef:ad:64:69:9e:30:43:0e:66: 29:2c:9c:40:42:7f:00:9b:5e:78:74:ba:d2:b9:c5: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B0:6A:67:18:89:E3:7B:F0:09:CB:B9:77:C8:0A:6A:D9:E9:78:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8d:2b:51:b1:e4:46:4e:40:b5:e4:59:63:ca:0c:52:10:b4: 4f:84:88:ad:2a:2a:88:fa:49:c0:ac:1f:07:5e:b3:f1:2f:64: 6e:c2:48:54:b7:3d:8a:fa:7e:ea:12:a9:39:49:8f:42:7d:3e: 5b:21:a5:c4:72:d0:5f:58:57:05:89:00:fc:1e:44:ac:bb:d1: fc:d4:00:3e:a1:51:e7:98:1d:c1:75:04:7c:86:cd:7c:48:8f: 2d:7a:24:d5:bb:57:88:a8:f8:f9:49:24:0c:91:60:59:29:36: 8d:26:23:f2:29:53:85:5b:a5:f1:09:53:a0:84:eb:a6:cf:11: ef:17:f6:31:99:63:c9:44:54:d0:84:db:c1:ab:ed:06:a6:c1: 5c:46:f7:ce:bf:e8:5d:7e:36:2e:ce:5f:f0:48:01:f1:31:24: 36:f3:f3:d8:e4:2d:6f:66:d4:55:2b:cb:8d:84:d9:f8:a7:02: 72:f0:d8:4f:e4:99:8f:28:df:bf:a0:f0:a9:44:ed:30:66:19: 58:78:ed:c4:6b:26:0d:40:3a:71:cd:e5:95:22:68:d9:bb:d5: 64:de:ea:cb:be:b7:f9:67:c4:99:72:96:c7:25:68:33:44:02: d2:b9:39:20:e2:db:04:07:7b:5e:18:71:a1:5a:f3:0a:99:be: 05:c8:3c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7mCxwW8/azpfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YTE2ODkyZDktMjcyYS00YWZiLWI1NDMtOTZjYTk2M2JmMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmofDqVKVNO/Z35xlPZLw35t0NQGspVTm55jI 7b1A847PQLViBnHU+nC0VMJqLf/CRIWFpLZUEzbMMgx1I2bqOhf7WJ30MXMcnPoP 9XAxBwxWrhJDDRpNxe+2I8mkhUxLP44x5yI6dQUKMquCFsUvnKX1gc+M640OeIWi 8ijeI5rzCK9GJ9bMyuOFUogXLfT8f+0f0icRmxj4CUIq/f6hJU5le4oy/OfMHZfz K4yOK+FEc//oGjmwhuA73678jrlqAHgZzCE3TaKMmOe/bf98wiYJbBFM5Qx7lt43 hYN7UvvUeT4BMJXvrWRpnjBDDmYpLJxAQn8Am154dLrSucVlVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFewamcYieN78AnLuXfICmrZ6XjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvOWZlY2FjZGUtNTFhOS0z ZGQ1LTgyZDYtOGQ3ZDU4Y2NiMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeNK1Gx5EZOQLXkWWPKDFIQtE+EiK0qKoj6ScCsHwdes/EvZG7CSFS3 PYr6fuoSqTlJj0J9PlshpcRy0F9YVwWJAPweRKy70fzUAD6hUeeYHcF1BHyGzXxI jy16JNW7V4io+PlJJAyRYFkpNo0mI/IpU4VbpfEJU6CE66bPEe8X9jGZY8lEVNCE 28Gr7QamwVxG986/6F1+Ni7OX/BIAfExJDbz89jkLW9m1FUry42E2finAnLw2E/k mY8o37+g8KlE7TBmGVh47cRrJg1AOnHN5ZUiaNm71WTe6su+t/lnxJlylsclaDNE AtK5OSDi2wQHe14YcaFa8wqZvgXIPCU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:19:58 2025 by rpki-client