$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa File: 9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json) Hash identifier: rUTLBqD9PaITxlMBnUJkdlDjCEi5PYekLCxaQMtD7dE= Subject key identifier: 28:3A:53:C5:62:58:E3:D1:44:5F:51:CE:65:86:70:DC:15:CF:1E:85 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584D492A733BD3B0E74E651E9300 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14603 IP address blocks: 104.237.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:73:3b:d3:b0:e7:4e:65:1e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=bc0c8f6b-6182-4fc9-b860-923aa0470a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bb:00:90:7b:8c:ea:ae:92:a1:6d:f2:60:9b: fa:41:20:2e:4d:de:cc:a8:0e:67:c8:09:b3:f0:47: 9d:be:23:3e:b4:fd:c2:ed:b1:15:75:21:ad:0f:02: 26:e8:ad:09:6e:e0:ea:40:7b:1f:91:3b:07:dd:09: 45:ea:dd:b5:3f:c7:f6:5a:cd:1b:bc:e2:14:70:e7: 8d:2c:71:0f:f7:14:d8:f6:83:43:c0:1a:4b:17:f7: ef:21:16:c3:c1:c0:1c:92:f9:2b:61:15:04:26:bf: 32:ac:84:b2:37:bf:b6:e3:cd:56:21:a4:e2:2d:2e: c8:ee:df:95:77:d8:9d:f1:60:f7:17:96:a9:6f:f6: e9:55:df:30:81:bb:cd:c8:2c:15:ef:62:88:0d:bd: ea:aa:ad:b0:a7:a4:22:c0:27:ce:d6:b1:48:32:d0: 33:ae:71:67:d5:eb:28:0a:e3:5c:a3:92:55:61:cc: ed:71:7c:40:22:38:04:89:c0:58:f8:a7:56:bf:29: f8:82:b7:24:46:01:76:3b:d5:81:42:79:bc:c4:92: 9a:c1:cc:a8:71:7f:34:44:a4:62:0b:2e:22:ad:66: e0:c0:ce:43:61:c8:30:d8:dc:68:b1:f2:0e:34:62: 22:09:c0:d5:61:e7:cf:46:d2:4d:66:21:26:55:ae: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3A:53:C5:62:58:E3:D1:44:5F:51:CE:65:86:70:DC:15:CF:1E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:2c:14:c3:a7:80:5d:f1:54:a5:0b:35:fd:ec:8d:86:87: d6:a7:43:8b:b0:e3:c4:84:93:10:b1:71:d5:23:c6:5a:91:27: ad:91:b3:81:9a:2a:90:5f:77:a5:bd:10:c5:2d:ec:17:a4:67: 94:22:b3:23:fd:59:ed:91:3f:95:83:ce:17:32:2f:a2:a5:5a: 2c:15:0e:fe:8d:c5:99:d8:64:df:c1:6e:2b:87:94:eb:c8:4f: 90:67:63:91:2f:3f:06:64:f6:72:01:17:b8:bb:ad:6b:2d:18: 3b:84:2c:ce:6b:32:85:1e:12:9b:ee:f0:6a:62:e9:5e:51:9c: 27:78:72:24:9c:df:53:b5:42:fa:83:70:a2:ec:41:45:67:9f: ab:82:1f:f1:04:62:6d:2d:d2:b8:1d:74:84:7c:01:64:03:5a: 71:c4:61:a0:14:54:80:9f:fa:98:3a:c8:80:80:36:c3:5a:42: da:a5:1a:ed:72:93:d1:23:45:f8:0e:ef:69:40:be:41:73:bb: f1:03:50:ee:93:b8:5f:e9:67:93:d1:9c:e0:11:93:0f:07:da: a1:71:69:7e:bf:f5:cc:08:f8:5a:ba:b0:f9:5f:55:bb:1e:6f: 3b:c7:23:5c:0a:7d:52:cd:33:a0:de:b8:f7:ce:52:fb:e2:5b: 4c:92:22:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnM707DnTmUekwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YmMwYzhmNmItNjE4Mi00ZmM5LWI4NjAtOTIzYWEwNDcwYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrsAkHuM6q6SoW3yYJv6QSAuTd7MqA5nyAmz 8EedviM+tP3C7bEVdSGtDwIm6K0JbuDqQHsfkTsH3QlF6t21P8f2Ws0bvOIUcOeN LHEP9xTY9oNDwBpLF/fvIRbDwcAckvkrYRUEJr8yrISyN7+2481WIaTiLS7I7t+V d9id8WD3F5apb/bpVd8wgbvNyCwV72KIDb3qqq2wp6QiwCfO1rFIMtAzrnFn1eso CuNco5JVYcztcXxAIjgEicBY+KdWvyn4grckRgF2O9WBQnm8xJKawcyocX80RKRi Cy4irWbgwM5DYcgw2NxosfIONGIiCcDVYefPRtJNZiEmVa5ufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg6U8ViWOPRRF9RzmWGcNwVzx6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvOWZlY2FjZGUtNTFhOS0z ZGQ1LTgyZDYtOGQ3ZDU4Y2NiMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9/LBTDp4Bd8VSlCzX97I2Gh9anQ4uw48SEkxCxcdUjxlqRJ62Rs4Ga KpBfd6W9EMUt7BekZ5QisyP9We2RP5WDzhcyL6KlWiwVDv6NxZnYZN/BbiuHlOvI T5BnY5EvPwZk9nIBF7i7rWstGDuELM5rMoUeEpvu8Gpi6V5RnCd4ciSc31O1QvqD cKLsQUVnn6uCH/EEYm0t0rgddIR8AWQDWnHEYaAUVICf+pg6yICANsNaQtqlGu1y k9EjRfgO72lAvkFzu/EDUO6TuF/pZ5PRnOARkw8H2qFxaX6/9cwI+Fq6sPlfVbse bzvHI1wKfVLNM6DeuPfOUvviW0ySIr8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:09 2026 by rpki-client