$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa File: aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json) Hash identifier: Br9WynXKrR3s6xO4NCzwuYDkr9bCgPYn8skWaq+21kw= Subject key identifier: 5E:91:85:5D:2D:03:A2:B6:9C:22:9D:84:F9:C6:C7:2B:77:49:33:AA Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584A8C70CC5863651F1740FA4C00 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 104.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:cc:58:63:65:1f:17:40:fa:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=59f367a3-6fd9-4f5e-9031-ce9937ccdd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:11:0e:ac:18:52:61:63:f1:1d:b0:07:da: dd:b5:f7:9c:09:9f:11:8c:83:cd:84:30:e7:bb:ec: 2c:6d:f3:7d:91:1d:e8:f0:c8:01:65:17:6c:88:a9: 0e:9d:b9:70:7a:c1:11:ea:dd:42:66:1f:c1:53:6d: e9:d2:09:22:a1:7f:92:e4:b8:96:3c:76:a9:e1:35: 3e:b0:b9:86:a5:01:88:a5:78:a8:3a:fb:95:d7:0c: d2:a6:22:1d:2f:ff:c3:aa:33:36:e5:eb:cd:a6:92: 15:ac:7e:64:d1:b6:c4:44:db:6e:12:6e:70:0a:d0: b6:ee:5d:ee:46:50:14:a3:d6:ce:a8:c5:12:b5:d5: a5:7d:11:32:1a:e5:76:30:88:6b:77:34:91:43:78: df:e2:05:61:01:e7:fa:14:fa:c5:fd:cb:56:89:66: 43:99:75:04:ab:ef:a7:e0:be:2b:77:df:02:d2:c1: 86:74:d5:5d:aa:15:57:bb:38:bf:7a:98:70:e7:5c: 38:9c:1f:11:79:68:0c:1f:94:1b:e7:97:be:0a:a9: 3a:d3:02:f1:48:99:7b:7f:3d:18:db:46:d1:59:ee: 55:e2:5f:49:85:80:4f:a2:ff:cf:c4:04:11:f6:39: be:18:91:f1:0a:25:51:a1:6f:25:0f:ec:39:f7:9e: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:85:5D:2D:03:A2:B6:9C:22:9D:84:F9:C6:C7:2B:77:49:33:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0f:fe:cd:0a:1d:83:73:8a:c2:25:66:a2:8f:f7:fb:ae:21: 43:f8:60:52:1d:6c:ef:be:5c:b3:73:04:e2:fb:98:59:9a:18: 5c:63:83:eb:2f:09:96:21:42:e3:d8:89:04:41:9d:8a:0c:7d: 00:cf:56:3f:e4:de:30:54:4c:90:b6:60:ad:14:3b:21:1a:a8: f8:b3:ba:b3:e0:5d:4a:55:d5:29:04:09:7b:77:ed:14:93:09: 28:fe:d7:3a:7c:fd:7a:bf:07:d7:bc:2e:b0:86:28:ee:cd:f2: 6b:cc:af:83:62:3f:ef:29:09:0e:cf:5f:3a:6c:81:31:9f:ac: 49:e5:da:00:19:33:61:ad:0d:83:4b:fd:cc:9e:60:d1:c9:b4: 39:84:92:27:58:f1:dc:23:c7:a1:35:a7:97:30:88:67:bf:84: 6e:e3:04:85:b9:58:5a:13:c4:02:d8:2f:20:90:d8:b8:df:f6: 0b:ea:b9:53:f8:12:b7:1f:b4:eb:79:03:45:58:d6:fb:89:b6: dd:3a:53:d7:7e:ef:1c:37:7c:04:81:18:53:ab:6b:aa:c5:b5: d1:c9:4c:83:bf:72:dd:cf:23:0f:01:2f:78:37:c9:93:2b:08: 5c:6b:0a:71:05:1a:11:fb:4d:7f:44:81:fb:6f:65:a3:91:10: 6d:a4:85:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMxYY2UfF0D6TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NTlmMzY3YTMtNmZkOS00ZjVlLTkwMzEtY2U5OTM3Y2NkZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYERDqwYUmFj8R2wB9rdtfecCZ8RjIPNhDDn u+wsbfN9kR3o8MgBZRdsiKkOnblwesER6t1CZh/BU23p0gkioX+S5LiWPHap4TU+ sLmGpQGIpXioOvuV1wzSpiIdL//DqjM25evNppIVrH5k0bbERNtuEm5wCtC27l3u RlAUo9bOqMUStdWlfREyGuV2MIhrdzSRQ3jf4gVhAef6FPrF/ctWiWZDmXUEq++n 4L4rd98C0sGGdNVdqhVXuzi/ephw51w4nB8ReWgMH5Qb55e+Cqk60wLxSJl7fz0Y 20bRWe5V4l9JhYBPov/PxAQR9jm+GJHxCiVRoW8lD+w5957tSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6RhV0tA6K2nCKdhPnGxyt3STOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYWEwZGRhYzItNjM1Yy0z MGI0LWJmMzctMTE5ZWQ4NGUzMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgP/s0KHYNzisIlZqKP9/uuIUP4YFIdbO++XLNzBOL7mFmaGFxjg+sv CZYhQuPYiQRBnYoMfQDPVj/k3jBUTJC2YK0UOyEaqPizurPgXUpV1SkECXt37RST CSj+1zp8/Xq/B9e8LrCGKO7N8mvMr4NiP+8pCQ7PXzpsgTGfrEnl2gAZM2GtDYNL /cyeYNHJtDmEkidY8dwjx6E1p5cwiGe/hG7jBIW5WFoTxALYLyCQ2Ljf9gvquVP4 ErcftOt5A0VY1vuJtt06U9d+7xw3fASBGFOra6rFtdHJTIO/ct3PIw8BL3g3yZMr CFxrCnEFGhH7TX9EgftvZaOREG2kha4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:18 2025 by rpki-client