$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa File: c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa (raw, json) Hash identifier: jX7c4KTHS2U+f3KybG8y3NcuGAQhhpiLlnQ8ZjcfCb4= Subject key identifier: 9E:50:A2:1A:DB:E6:DD:06:5D:15:6A:FA:78:B7:E7:9C:63:DB:9E:47 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584B5C6C7783D1E23BA9AFD65280 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 396982 IP address blocks: 104.237.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:77:83:d1:e2:3b:a9:af:d6:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=5f9b37cd-1d0d-4861-a044-307e7b34eace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:cb:d4:b5:7b:1c:ba:69:ab:05:bc:38:0d: 80:4d:5e:63:6d:ec:14:30:7c:fd:24:8e:75:6c:38: 4b:dc:04:b4:76:f0:57:08:44:f1:c3:1e:ac:19:c9: 60:e3:87:89:34:99:13:a3:2d:4d:17:22:fe:b5:b8: 55:db:61:f5:4a:f5:36:a7:bd:e6:44:2b:cd:4e:c1: bc:83:b1:64:9e:c3:9e:2e:1e:a8:9f:71:91:05:50: 1d:4c:ed:29:cd:74:88:9d:bc:e0:19:03:49:b1:29: 26:3b:c8:59:af:b2:9b:6e:50:14:e8:07:de:81:33: 5f:b9:04:e9:e7:56:10:a7:4b:62:3a:87:f8:de:5b: c0:f3:39:06:c6:ec:3a:44:c3:52:c9:be:9b:68:ba: 1d:20:1a:59:f1:85:54:84:68:d6:e7:a7:e9:5f:94: a5:8a:5b:bc:33:43:53:16:95:7b:33:f8:8f:93:bb: 3e:7f:12:88:18:6d:07:91:04:55:aa:83:ae:a2:e5: 22:33:c9:5f:5e:eb:d0:fd:3a:a6:d4:86:af:36:14: 6c:2e:b0:52:2f:7a:f6:db:a2:91:d0:78:ce:ca:8b: 0f:6b:f8:c4:c1:f2:14:62:d3:3f:d2:d1:cc:03:84: 66:2a:ea:64:15:d0:16:3a:44:84:74:c5:c9:e1:c1: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:50:A2:1A:DB:E6:DD:06:5D:15:6A:FA:78:B7:E7:9C:63:DB:9E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6a:03:01:c8:3e:61:ec:9a:96:ca:97:47:b3:17:5d:f7:49: 6f:d1:74:ee:d7:ed:71:31:ff:11:46:d1:b5:09:8d:a7:80:89: 1b:ad:72:58:76:33:06:ee:e6:78:54:8c:6c:d9:46:e6:71:aa: 4a:a2:eb:ad:f8:d7:d2:05:d8:37:f6:83:5a:16:1d:7a:c5:8a: ca:6d:7a:30:85:8c:e4:19:5b:22:af:de:19:02:1f:39:da:ff: aa:fd:00:60:8c:31:30:aa:83:88:28:7d:b8:69:6a:21:42:4e: 3f:a5:d8:12:81:62:13:a3:17:8f:a6:a2:cb:24:a4:a4:69:e0: d0:99:d8:76:d3:86:d3:f6:3d:3d:34:26:e4:e2:dd:08:4c:c5: 6d:0e:88:53:6c:ad:3e:11:ca:a4:e4:d8:ab:12:15:6a:36:95: 22:c5:06:92:11:43:73:77:bc:f8:e0:f6:bb:f8:7a:c8:c9:22: fb:23:92:ef:7e:6c:86:f9:ea:43:0e:0b:03:5e:20:4b:a2:1b: 7f:99:f7:d8:24:7c:42:7a:83:79:ad:ab:cc:47:37:b8:16:65: 52:5d:ab:04:10:e2:e8:87:82:0e:12:1b:28:59:76:eb:7e:b8: 18:75:83:71:cf:1e:6b:ea:3c:6d:b6:72:23:0b:59:7d:79:4b: 09:e8:68:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHeD0eI7qa/WUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NWY5YjM3Y2QtMWQwZC00ODYxLWEwNDQtMzA3ZTdiMzRlYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkazL1LV7HLppqwW8OA2ATV5jbewUMHz9JI51 bDhL3AS0dvBXCETxwx6sGclg44eJNJkToy1NFyL+tbhV22H1SvU2p73mRCvNTsG8 g7FknsOeLh6on3GRBVAdTO0pzXSInbzgGQNJsSkmO8hZr7KbblAU6AfegTNfuQTp 51YQp0tiOof43lvA8zkGxuw6RMNSyb6baLodIBpZ8YVUhGjW56fpX5Slilu8M0NT FpV7M/iPk7s+fxKIGG0HkQRVqoOuouUiM8lfXuvQ/Tqm1IavNhRsLrBSL3r226KR 0HjOyosPa/jEwfIUYtM/0tHMA4RmKupkFdAWOkSEdMXJ4cH5xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5Qohrb5t0GXRVq+ni355xj255HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYzhkMTViN2MtOGM4Ny0z ZWY0LWFhNjYtMWY4M2RlNGUwNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItqAwHIPmHsmpbKl0ezF133SW/RdO7X7XEx/xFG0bUJjaeAiRutclh2 Mwbu5nhUjGzZRuZxqkqi663419IF2Df2g1oWHXrFisptejCFjOQZWyKv3hkCHzna /6r9AGCMMTCqg4gofbhpaiFCTj+l2BKBYhOjF4+mosskpKRp4NCZ2HbThtP2PT00 JuTi3QhMxW0OiFNsrT4RyqTk2KsSFWo2lSLFBpIRQ3N3vPjg9rv4esjJIvsjku9+ bIb56kMOCwNeIEuiG3+Z99gkfEJ6g3mtq8xHN7gWZVJdqwQQ4uiHgg4SGyhZdut+ uBh1g3HPHmvqPG22ciMLWX15SwnoaAk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:51 2025 by rpki-client