$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa File: c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa (raw, json) Hash identifier: 9FAuS9Q27tH+cbnU2JZhZZsFumO4JDSXHzN364JF5Xg= Subject key identifier: EC:12:FD:49:F7:D7:D6:CD:EC:30:8B:EA:88:F8:AF:D0:AD:9F:F8:97 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584DFBD5E51496A72D7EC7E80B20 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 396982 IP address blocks: 104.237.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e5:14:96:a7:2d:7e:c7:e8:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=bd124c3e-14d2-4010-a99a-d59fa7bd7c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:3e:5d:93:ca:98:61:c8:da:bd:8c:ed:49: c4:82:52:db:a0:40:66:b7:1e:72:2f:55:7e:34:88: 2c:21:4e:81:85:24:53:e5:24:8f:79:6f:1b:a9:dd: 21:b4:34:2d:54:3d:31:dd:11:38:1a:bd:7f:5d:db: 87:80:71:56:99:8b:6a:6a:90:2e:b1:f0:8d:bf:13: f2:93:76:f0:25:4b:62:26:12:6b:9d:90:50:f6:6b: 4b:31:32:fa:1c:72:91:5c:a6:ec:d6:50:f1:f9:7d: 29:63:93:0d:f9:87:85:c1:7a:a9:22:26:11:04:5b: 91:c9:a3:89:88:62:89:95:a4:fa:53:77:6b:22:f2: 68:d3:31:00:2e:d6:c3:ed:5f:8c:57:59:e3:dd:c1: 19:cf:e1:0f:72:3a:e5:42:ed:a1:2d:b3:8b:e2:93: 48:e5:ea:08:07:4b:bd:f1:b3:95:94:f0:e9:79:72: fe:71:d6:8c:de:a7:75:4a:17:eb:0e:ff:51:a6:44: e4:1d:05:08:21:ed:50:72:06:b7:dc:55:88:f0:b7: 80:b2:a5:d5:7a:8e:62:06:5b:27:a3:b7:9c:68:50: 57:83:f3:c2:f3:4a:2c:ad:f3:15:23:51:17:f0:5e: a1:2a:82:e2:56:a3:4c:35:7b:10:b2:dd:20:83:23: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:12:FD:49:F7:D7:D6:CD:EC:30:8B:EA:88:F8:AF:D0:AD:9F:F8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/c8d15b7c-8c87-3ef4-aa66-1f83de4e04f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:08:c6:68:cc:59:d5:b0:af:2c:15:e2:e9:96:d0:19:2d:d3: 93:49:a8:ae:08:67:5d:ba:6d:60:bc:b4:e5:89:86:a4:95:04: b7:41:7c:d9:b0:6e:ac:e5:3d:69:80:eb:53:9b:b5:6b:85:30: 30:c3:04:25:f2:fa:a2:e2:e1:7f:88:90:ca:86:2e:84:72:2d: 29:99:62:fc:19:fd:69:3e:3b:51:01:dc:e3:13:43:4a:1e:2d: 14:ca:5c:80:ec:1d:1f:70:d8:83:b8:71:e7:fd:4e:1b:7a:4f: ee:98:d9:8a:0a:f7:a7:75:32:04:22:89:61:96:5d:ab:43:24: 9e:ed:b7:89:3c:b2:59:06:76:b2:93:eb:43:fa:9d:f5:d5:99: b0:76:de:8e:0f:11:70:08:76:c0:bb:3c:5d:f8:2d:7b:29:a1: 41:0b:d5:be:f4:26:46:12:6b:99:91:4f:47:65:29:92:56:71: 04:0a:44:8a:41:11:c4:36:5a:80:4e:28:09:b1:42:95:cd:31: 0c:c1:87:5d:b7:48:a8:62:4c:2d:8c:2b:34:4c:4b:78:e9:d5: a9:f0:4f:13:ba:f7:8d:17:06:c8:3c:75:fd:3a:ac:64:95:ad: 8b:f9:cc:5f:9f:8a:33:62:b8:4e:f3:28:27:d1:81:ea:62:50: f8:b9:39:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eUUlqctfsfoCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk YmQxMjRjM2UtMTRkMi00MDEwLWE5OWEtZDU5ZmE3YmQ3Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/g+XZPKmGHI2r2M7UnEglLboEBmtx5yL1V+ NIgsIU6BhSRT5SSPeW8bqd0htDQtVD0x3RE4Gr1/XduHgHFWmYtqapAusfCNvxPy k3bwJUtiJhJrnZBQ9mtLMTL6HHKRXKbs1lDx+X0pY5MN+YeFwXqpIiYRBFuRyaOJ iGKJlaT6U3drIvJo0zEALtbD7V+MV1nj3cEZz+EPcjrlQu2hLbOL4pNI5eoIB0u9 8bOVlPDpeXL+cdaM3qd1ShfrDv9RpkTkHQUIIe1Qcga33FWI8LeAsqXVeo5iBlsn o7ecaFBXg/PC80osrfMVI1EX8F6hKoLiVqNMNXsQst0ggyOckwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwS/Un319bN7DCL6oj4r9Ctn/iXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYzhkMTViN2MtOGM4Ny0z ZWY0LWFhNjYtMWY4M2RlNGUwNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoIxmjMWdWwrywV4umW0Bkt05NJqK4IZ126bWC8tOWJhqSVBLdBfNmw bqzlPWmA61ObtWuFMDDDBCXy+qLi4X+IkMqGLoRyLSmZYvwZ/Wk+O1EB3OMTQ0oe LRTKXIDsHR9w2IO4cef9Tht6T+6Y2YoK96d1MgQiiWGWXatDJJ7tt4k8slkGdrKT 60P6nfXVmbB23o4PEXAIdsC7PF34LXspoUEL1b70JkYSa5mRT0dlKZJWcQQKRIpB EcQ2WoBOKAmxQpXNMQzBh123SKhiTC2MKzRMS3jp1anwTxO6940XBsg8df06rGSV rYv5zF+fijNiuE7zKCfRgepiUPi5OcQ= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:13 2026 by rpki-client