$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa File: 2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa (raw, json) Hash identifier: rW9r1S3upx0wfl8SnYFRMI7e/EId2v1RZ4ZzfrPufqo= Subject key identifier: EB:DB:1A:55:C5:5F:1F:9C:9F:D7:74:38:83:C3:6C:73:58:F9:29:4F Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584D2D3F7DBEF6EA5FC19C2D7000 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 104.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7d:be:f6:ea:5f:c1:9c:2d:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=eba2da4f-58f8-4eee-a43e-5dc38b3616c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:ed:d2:4e:51:b7:db:ea:56:de:c6:62:da: 54:5a:f3:17:c4:6f:42:ba:03:0a:2a:ce:93:cd:98: 26:09:15:03:e1:e1:92:cc:72:f3:dd:85:9f:a0:f5: ad:28:a6:5b:42:df:62:f6:a6:30:be:19:1e:36:53: 0f:a6:7c:ec:d4:cb:e6:86:30:9a:b6:d7:53:13:36: 9c:f3:ed:76:48:33:5d:e6:d4:23:16:8b:ab:db:c3: 7e:5b:d4:f4:ae:e1:ef:c0:f9:05:52:71:06:64:81: fd:b9:25:94:e4:f0:59:40:7c:02:93:58:bf:aa:2f: 74:e3:a3:2f:01:78:cf:1a:3e:45:7b:a2:09:3c:34: 98:58:d2:f7:34:7a:11:03:59:a2:3f:2f:8f:26:86: be:8d:84:b2:25:6d:5c:56:07:b1:43:61:57:c2:6a: 04:37:ae:66:c6:32:a4:ec:94:2e:d3:e6:1d:45:a3: c9:f2:69:75:29:22:46:96:66:f6:19:06:20:a6:1f: 48:96:62:93:0b:26:d4:72:96:d6:ca:8e:71:f6:ba: 3e:1b:23:01:45:a2:cd:05:e3:55:fb:b9:37:85:70: 91:f9:de:78:0d:2b:af:20:87:06:e6:9a:27:03:cf: 55:6a:58:8d:b2:fd:2b:a7:53:55:e1:77:94:7d:3a: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:1A:55:C5:5F:1F:9C:9F:D7:74:38:83:C3:6C:73:58:F9:29:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/2117ef64-3fd7-3416-8a86-787ec1ef82d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5a:1b:d4:a7:a1:e2:1f:6c:ca:2f:71:0e:a8:1e:39:4c:3c: 4f:f2:d2:15:58:c9:ff:77:7e:b1:e7:bd:3e:41:ef:32:51:71: 88:fb:82:cf:f8:97:1a:93:08:f7:5e:e6:fd:ec:89:9f:2a:f5: a8:56:aa:63:bf:88:d5:b4:24:ff:cb:79:96:2c:b1:f8:ba:d9: 0b:7c:ff:08:12:5b:0f:00:91:eb:e9:ca:9a:96:1a:92:0b:e9: 0b:c8:22:19:d2:15:19:e8:87:5e:d5:f2:26:bb:b4:bf:3a:af: 96:e2:fb:30:73:9c:ac:09:c5:f5:cb:a9:50:56:37:62:3b:94: 1c:35:a0:a1:5d:83:15:48:63:21:9d:c9:35:ca:20:89:76:8d: c5:83:d0:98:bb:79:c2:58:ef:7f:48:dc:bc:41:c3:29:06:5a: cf:7f:64:df:09:5f:0f:ad:e2:4f:c2:f3:9a:d9:2c:19:fc:99: 1c:b6:9c:bb:bf:84:8a:8f:26:56:e6:6d:7c:8e:58:62:c7:0f: bd:51:e6:8c:d5:33:1c:17:65:58:4b:e3:35:ae:e0:ff:97:1b: 2b:c4:f3:9f:f7:c3:a9:7e:7d:2a:e0:73:2b:d2:7c:62:4c:32: c0:ad:5f:cd:90:db:d2:56:c3:5a:59:b3:ed:6e:4e:6c:d9:ed: cc:a1:af:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP32+9upfwZwtcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZWJhMmRhNGYtNThmOC00ZWVlLWE0M2UtNWRjMzhiMzYxNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/7t0k5Rt9vqVt7GYtpUWvMXxG9CugMKKs6T zZgmCRUD4eGSzHLz3YWfoPWtKKZbQt9i9qYwvhkeNlMPpnzs1MvmhjCattdTEzac 8+12SDNd5tQjFour28N+W9T0ruHvwPkFUnEGZIH9uSWU5PBZQHwCk1i/qi9046Mv AXjPGj5Fe6IJPDSYWNL3NHoRA1miPy+PJoa+jYSyJW1cVgexQ2FXwmoEN65mxjKk 7JQu0+YdRaPJ8ml1KSJGlmb2GQYgph9IlmKTCybUcpbWyo5x9ro+GyMBRaLNBeNV +7k3hXCR+d54DSuvIIcG5ponA89ValiNsv0rp1NV4XeUfTrJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvbGlXFXx+cn9d0OIPDbHNY+SlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvMjExN2VmNjQtM2ZkNy0z NDE2LThhODYtNzg3ZWMxZWY4MmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANaG9SnoeIfbMovcQ6oHjlMPE/y0hVYyf93frHnvT5B7zJRcYj7gs/4 lxqTCPde5v3siZ8q9ahWqmO/iNW0JP/LeZYssfi62Qt8/wgSWw8AkevpypqWGpIL 6QvIIhnSFRnoh17V8ia7tL86r5bi+zBznKwJxfXLqVBWN2I7lBw1oKFdgxVIYyGd yTXKIIl2jcWD0Ji7ecJY739I3LxBwykGWs9/ZN8JXw+t4k/C85rZLBn8mRy2nLu/ hIqPJlbmbXyOWGLHD71R5ozVMxwXZVhL4zWu4P+XGyvE85/3w6l+fSrgcyvSfGJM MsCtX82Q29JWw1pZs+1uTmzZ7cyhr70= -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:01 2026 by rpki-client