$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa File: aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json) Hash identifier: +kVFOYXAW4+Ro3dE07ZjSkbSp9pt2quddYvD56vKX5Y= Subject key identifier: F2:AA:87:D7:EC:1E:78:12:57:8D:61:3C:EC:E0:F2:FF:C5:86:6E:CA Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584E0D8426DA457C257B030E3C20 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 104.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:26:da:45:7c:25:7b:03:0e:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=97dda6f5-867b-4ba4-9e61-387211d2c798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:90:65:e0:65:28:9e:ca:df:83:4e:2c:09: 77:ba:1e:fc:4d:6d:94:02:bf:e1:3c:8f:cb:a6:48: 9d:06:99:e5:c1:d5:0a:47:31:6b:78:c2:76:1f:e1: 27:7b:fb:f4:df:a1:66:bf:31:3d:84:d2:7f:62:2d: 5e:44:68:61:10:0f:5e:57:2f:c5:88:8b:71:1a:0a: 3d:01:dc:c3:74:3a:c8:00:8f:ab:01:a3:de:aa:90: f8:91:78:d5:7d:b8:72:a3:59:83:2b:97:ad:68:db: 4d:2c:e1:d1:c0:0b:1d:2a:a2:9f:0c:2a:63:af:38: 31:4a:8c:b5:7b:51:91:84:b9:e7:75:bb:7e:2d:74: 56:28:26:76:69:34:ed:e8:34:4e:3f:cf:07:e1:5e: cf:ab:e8:3e:68:47:dc:ba:61:6f:5d:36:b5:8e:bd: 28:20:d2:e1:6f:be:e7:48:40:68:5f:96:e7:ca:f7: 34:94:0e:93:a0:56:e0:e4:01:a0:32:ad:2a:54:81: 7c:80:a9:44:13:86:d3:85:ba:83:42:d3:cb:81:ca: 59:ce:47:02:ad:19:51:3b:7e:75:7f:d0:f4:81:92: a6:8c:23:43:4e:62:5a:55:92:7a:b5:5d:d0:3d:0c: 5c:57:dd:99:97:a9:12:77:b0:09:70:e6:66:33:ce: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:87:D7:EC:1E:78:12:57:8D:61:3C:EC:E0:F2:FF:C5:86:6E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:46:37:56:33:43:bf:47:cb:fa:d3:cd:73:47:2c:b2:85:0d: 95:3d:bf:fa:0e:f5:77:f3:40:4a:cf:41:4d:4f:85:fa:f1:8d: 11:00:44:e3:a3:89:4f:cd:88:9d:02:0f:a8:3a:af:42:49:0d: 15:cb:e1:01:9a:62:09:b9:8a:64:d0:36:6c:ad:1a:fd:c6:ea: b4:82:7b:f4:d7:58:e5:02:a8:c6:78:b6:f0:69:da:86:ee:58: 59:a3:de:19:8d:37:fd:af:8e:71:22:3b:1d:f9:6b:d3:87:ca: 1d:d6:eb:af:3c:1b:bf:48:32:2b:5d:5d:9f:e6:e8:fe:f0:db: e7:7a:bc:0c:cf:88:16:f7:9a:44:1b:58:2d:2c:63:26:dd:e4: 2e:fa:7b:bd:88:cf:5f:91:55:f2:ee:b5:f0:99:00:ae:3c:d6: ca:93:8a:aa:3e:7f:e7:4d:8f:b6:c2:cd:ea:79:3b:91:34:37: 1d:34:21:68:67:32:f3:6f:83:89:25:7e:26:82:9d:3e:55:3d: 5b:33:d2:c0:ca:d2:14:db:6b:00:bb:28:ad:6e:55:fa:d3:cb: 9b:96:22:0e:97:32:22:3a:c2:0a:13:5b:65:9a:d5:10:e6:69: d5:83:0b:c9:e3:0b:e5:b6:be:fa:49:c9:5a:9d:b3:07:7f:d3: 2e:de:e2:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCbaRXwlewMOPCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk OTdkZGE2ZjUtODY3Yi00YmE0LTllNjEtMzg3MjExZDJjNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlqQZeBlKJ7K34NOLAl3uh78TW2UAr/hPI/L pkidBpnlwdUKRzFreMJ2H+Ene/v036FmvzE9hNJ/Yi1eRGhhEA9eVy/FiItxGgo9 AdzDdDrIAI+rAaPeqpD4kXjVfbhyo1mDK5etaNtNLOHRwAsdKqKfDCpjrzgxSoy1 e1GRhLnndbt+LXRWKCZ2aTTt6DROP88H4V7Pq+g+aEfcumFvXTa1jr0oINLhb77n SEBoX5bnyvc0lA6ToFbg5AGgMq0qVIF8gKlEE4bThbqDQtPLgcpZzkcCrRlRO351 f9D0gZKmjCNDTmJaVZJ6tV3QPQxcV92Zl6kSd7AJcOZmM87UUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKqh9fsHngSV41hPOzg8v/Fhm7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYWEwZGRhYzItNjM1Yy0z MGI0LWJmMzctMTE5ZWQ4NGUzMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5GN1YzQ79Hy/rTzXNHLLKFDZU9v/oO9XfzQErPQU1PhfrxjREAROOj iU/NiJ0CD6g6r0JJDRXL4QGaYgm5imTQNmytGv3G6rSCe/TXWOUCqMZ4tvBp2obu WFmj3hmNN/2vjnEiOx35a9OHyh3W6688G79IMitdXZ/m6P7w2+d6vAzPiBb3mkQb WC0sYybd5C76e72Iz1+RVfLutfCZAK481sqTiqo+f+dNj7bCzep5O5E0Nx00IWhn MvNvg4klfiaCnT5VPVsz0sDK0hTbawC7KK1uVfrTy5uWIg6XMiI6wgoTW2Wa1RDm adWDC8njC+W2vvpJyVqdswd/0y7e4pc= -----END CERTIFICATE-----Generated at Sat Jun 13 22:29:58 2026 by rpki-client