$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa File: 83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa (raw, json) Hash identifier: gEEO6WvfPsY75k0KoBByrjx2M4ZA92D/GxKXEGfRse8= Subject key identifier: AB:84:7B:0E:1F:02:F2:68:C4:F0:BD:5A:56:81:63:2D:1E:5C:59:D8 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584B89177C67AA23603E0A2A4180 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 104.237.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7c:67:aa:23:60:3e:0a:2a:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=3080e9d9-983d-4cc2-9aca-726dd55bd189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:26:d4:8c:f7:0a:34:56:9e:a5:89:f2:23: 4f:0a:56:9c:0b:83:93:15:41:d5:f4:8b:f0:50:a1: c2:4e:2b:fa:ac:5e:d0:07:8c:74:fb:74:df:8c:0c: 41:10:02:b6:9c:cc:a6:2b:ae:8b:e9:c1:53:94:62: f9:f1:a2:fb:33:5e:f2:70:6d:06:0b:f2:ef:39:ec: 5d:c9:12:87:7c:85:5d:3d:ba:5c:fd:5f:81:a3:f9: 79:0a:78:74:a1:e4:81:fb:63:15:2c:8c:f6:e8:36: da:06:dc:c7:3a:9a:f4:4b:15:41:d1:8d:66:45:23: ba:74:2f:4d:7c:cc:ec:80:c1:1a:31:3e:b3:a1:2d: f8:16:04:00:13:2f:b0:43:34:be:40:42:3c:31:55: ed:0d:97:3d:68:b1:83:8b:3b:ad:be:6d:c1:d9:6e: 35:ea:7e:3a:f5:9b:6a:66:31:5b:dd:28:13:61:b9: d7:64:b5:b7:37:29:6a:4c:c8:8c:4e:1c:94:c8:09: 69:ef:d9:68:5f:5f:88:b2:b7:3b:8e:93:5e:15:9b: bf:ee:66:37:1e:8e:34:3c:51:cc:26:c7:a1:cd:f0: 11:40:4c:fe:9f:d8:5d:c0:fa:1b:62:7f:51:76:64: 89:87:31:67:e4:1c:8d:8b:2b:4e:7a:6c:d7:1b:1d: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:84:7B:0E:1F:02:F2:68:C4:F0:BD:5A:56:81:63:2D:1E:5C:59:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/83e2a1a2-36cf-3aae-a431-6ae8db35135c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:04:6e:97:29:c2:ed:17:3c:9f:7a:17:4b:6b:c1:7d:63:7b: 5a:ec:73:21:58:d3:38:2a:15:df:3f:96:4c:17:e8:c7:15:a2: 85:be:37:e4:86:71:ac:52:d1:a7:29:16:2b:82:2b:5e:6f:e9: b8:18:5a:8e:3f:17:a4:1e:37:98:26:37:da:57:bf:19:5a:85: a8:6f:11:78:e8:f3:17:cd:f4:6c:10:16:97:32:44:3b:dd:0a: 3f:e4:49:d9:28:b6:97:60:ab:69:af:b0:25:7a:a6:ef:97:c0: c8:b7:9f:b5:d8:c9:31:8b:c7:d3:8f:ec:02:8d:54:a1:e4:96: b6:d2:4e:f6:60:95:f8:bc:f8:09:f4:b7:79:5a:a1:1d:78:8e: 30:c1:d8:92:0b:71:2b:43:d4:2e:c5:4a:e1:59:a0:bb:f6:eb: 56:5a:0b:0b:d9:f7:bc:d2:66:0d:0a:95:e2:df:8b:1f:f8:f7: 88:1a:2c:1d:08:b0:6c:bd:29:4d:cf:39:3e:da:62:86:eb:b8: c2:00:0d:7b:25:4e:25:72:09:07:ec:70:0e:a5:f1:8d:42:5e: 40:d5:43:44:0e:51:7f:ad:ce:45:74:ca:54:17:ea:93:3b:01: fb:a1:84:58:80:b9:5f:f7:f7:73:11:db:79:13:3d:4a:1d:05: fa:f8:e8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3xnqiNgPgoqQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MzA4MGU5ZDktOTgzZC00Y2MyLTlhY2EtNzI2ZGQ1NWJkMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz84m1Iz3CjRWnqWJ8iNPClacC4OTFUHV9Ivw UKHCTiv6rF7QB4x0+3TfjAxBEAK2nMymK66L6cFTlGL58aL7M17ycG0GC/LvOexd yRKHfIVdPbpc/V+Bo/l5Cnh0oeSB+2MVLIz26DbaBtzHOpr0SxVB0Y1mRSO6dC9N fMzsgMEaMT6zoS34FgQAEy+wQzS+QEI8MVXtDZc9aLGDizutvm3B2W416n469Ztq ZjFb3SgTYbnXZLW3NylqTMiMThyUyAlp79loX1+Isrc7jpNeFZu/7mY3Ho40PFHM JsehzfARQEz+n9hdwPobYn9RdmSJhzFn5ByNiytOemzXGx0NpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuEew4fAvJoxPC9WlaBYy0eXFnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvODNlMmExYTItMzZjZi0z YWFlLWE0MzEtNmFlOGRiMzUxMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMEbpcpwu0XPJ96F0trwX1je1rscyFY0zgqFd8/lkwX6McVooW+N+SG caxS0acpFiuCK15v6bgYWo4/F6QeN5gmN9pXvxlahahvEXjo8xfN9GwQFpcyRDvd Cj/kSdkotpdgq2mvsCV6pu+XwMi3n7XYyTGLx9OP7AKNVKHklrbSTvZglfi8+An0 t3laoR14jjDB2JILcStD1C7FSuFZoLv261ZaCwvZ97zSZg0KleLfix/494gaLB0I sGy9KU3POT7aYobruMIADXslTiVyCQfscA6l8Y1CXkDVQ0QOUX+tzkV0ylQX6pM7 AfuhhFiAuV/393MR23kTPUodBfr46Js= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:04 2025 by rpki-client