$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json) Hash identifier: oGnXbJtb8pMItt/0kCR9dYebet+c/Eqa67Qs/X9z7zU= Subject key identifier: A7:C6:5B:5C:62:40:26:A9:A4:05:9D:37:D0:94:33:F5:A2:F9:2E:F6 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584AA85BB9730713A039A8C6A600 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 396018 IP address blocks: 104.237.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b9:73:07:13:a0:39:a8:c6:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=c3289fa1-8571-464c-b7e0-94928691291a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:71:87:85:ee:f8:ed:cf:53:00:09:01:dc:43: b4:7d:31:d0:18:fa:53:98:6b:13:b2:7a:fb:94:9e: df:74:40:bc:ee:87:8f:e0:6a:be:69:2c:64:55:d8: a6:6d:7c:d7:4e:3b:83:0c:fa:43:87:31:df:76:62: 1b:52:0c:40:ae:84:2f:5a:ba:2d:43:a7:12:8a:54: 46:a3:38:53:13:3c:56:3c:70:d5:7a:aa:42:55:bc: f4:5c:5d:14:17:4c:e9:6c:3b:81:1c:66:a7:59:02: 46:2b:cf:e4:86:43:81:55:86:96:5f:dd:0a:dd:78: 31:ce:06:e3:e8:ce:e4:01:95:a1:da:61:dc:63:5c: 0c:63:23:92:1c:4c:88:be:60:a0:dd:86:09:c8:0e: 65:7d:bc:04:b1:b6:57:7f:e8:0f:6d:83:87:60:19: de:f2:f6:26:71:0c:02:18:6f:0b:27:7c:b5:ef:91: a9:43:27:95:a6:66:df:ac:39:f3:82:2f:49:07:d8: 45:29:90:c8:cc:f0:84:53:b5:18:d5:94:df:44:a3: ed:2c:d3:bb:b3:59:dc:dc:c9:ef:fb:09:70:63:da: c2:a1:21:90:3b:30:d6:04:ca:8e:e8:9e:9a:ce:60: 24:f1:5e:fc:ed:5d:06:0d:67:cb:3d:de:e8:22:42: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:5B:5C:62:40:26:A9:A4:05:9D:37:D0:94:33:F5:A2:F9:2E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d5:83:76:68:e7:7e:24:c2:45:03:91:67:65:6e:9f:ca:20: 05:d7:9e:8a:97:d8:63:84:ec:ae:65:d6:3e:84:a9:9a:61:ee: 9b:66:0d:a3:84:bc:17:dd:50:2e:e8:35:c7:c9:1e:84:ab:06: 7c:26:5b:f1:d0:4d:fb:c0:b3:95:64:d9:58:d5:9a:4b:a1:04: 50:29:c6:80:eb:18:d0:55:06:27:a9:f9:06:d6:e0:e9:2b:e1: 8e:c0:60:a6:9f:a2:17:b1:ce:4e:88:8e:b0:f0:ae:75:07:4e: 15:2b:9a:2c:8d:88:cd:e6:ed:5f:b0:7f:e8:98:14:7c:49:c4: bc:46:4a:b1:f4:bb:89:f4:e0:37:48:5a:5c:a8:83:38:cd:3d: f2:aa:e8:8b:b2:7f:74:15:53:46:f1:1f:bb:a4:89:02:e9:9d: a2:e2:04:aa:dc:9f:b1:62:93:81:1d:a2:f0:41:44:3f:df:61: b6:c8:50:69:44:25:bc:1c:cb:ce:bc:9a:4a:a2:58:f3:5d:a2: 5c:17:da:a7:d4:38:32:fa:a0:e5:7d:fc:87:5f:ca:19:74:e8: bd:ae:34:84:d6:a4:e4:b4:cc:42:04:fc:98:44:d8:2b:f0:a4: 3c:08:d1:3f:87:ca:48:ce:4f:af:4d:0b:ae:f0:dd:e2:6f:d1: 34:5b:f4:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7lzBxOgOajGpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YzMyODlmYTEtODU3MS00NjRjLWI3ZTAtOTQ5Mjg2OTEyOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHGHhe747c9TAAkB3EO0fTHQGPpTmGsTsnr7 lJ7fdEC87oeP4Gq+aSxkVdimbXzXTjuDDPpDhzHfdmIbUgxAroQvWrotQ6cSilRG ozhTEzxWPHDVeqpCVbz0XF0UF0zpbDuBHGanWQJGK8/khkOBVYaWX90K3Xgxzgbj 6M7kAZWh2mHcY1wMYyOSHEyIvmCg3YYJyA5lfbwEsbZXf+gPbYOHYBne8vYmcQwC GG8LJ3y175GpQyeVpmbfrDnzgi9JB9hFKZDIzPCEU7UY1ZTfRKPtLNO7s1nc3Mnv +wlwY9rCoSGQOzDWBMqO6J6azmAk8V787V0GDWfLPd7oIkIe/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfGW1xiQCappAWdN9CUM/Wi+S72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvZjJkY2ZhZWYtN2EwZC0z YjY3LWI3MjktYjc1NWIzOWRiNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrVg3Zo534kwkUDkWdlbp/KIAXXnoqX2GOE7K5l1j6EqZph7ptmDaOE vBfdUC7oNcfJHoSrBnwmW/HQTfvAs5Vk2VjVmkuhBFApxoDrGNBVBiep+QbW4Okr 4Y7AYKafohexzk6IjrDwrnUHThUrmiyNiM3m7V+wf+iYFHxJxLxGSrH0u4n04DdI WlyogzjNPfKq6Iuyf3QVU0bxH7ukiQLpnaLiBKrcn7Fik4EdovBBRD/fYbbIUGlE Jbwcy868mkqiWPNdolwX2qfUODL6oOV9/Idfyhl06L2uNITWpOS0zEIE/JhE2Cvw pDwI0T+HykjOT69NC67w3eJv0TRb9C0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:23 2025 by rpki-client