$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa File: aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json) Hash identifier: 9sywcw84g+uXl1lPCg0WkP4mz1Jz0Pe7t9G4gdX6qTc= Subject key identifier: 78:D7:6A:7A:87:7F:43:59:C7:A0:86:0E:75:22:75:08:67:2C:53:FD Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584B6D2C97797EF227B3F45E3640 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 16509 IP address blocks: 104.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:97:79:7e:f2:27:b3:f4:5e:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=4f701148-3df1-4268-bfea-0e45d77e7462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:70:aa:f0:85:90:5c:35:05:fa:de:c9:b9:15: 59:d5:a5:ae:5f:2b:c8:ec:0a:17:1a:e2:2e:31:ee: 4d:57:be:6e:18:d9:86:c0:c0:c2:4f:87:49:01:16: 5b:1f:ee:01:3d:4b:6f:f6:66:ca:a5:c6:b8:54:27: a5:6c:68:89:cb:a2:73:7a:eb:35:ff:cc:06:2d:68: a7:5c:b0:79:52:da:0f:68:91:33:03:f1:81:d8:bd: 7d:23:df:a7:20:69:13:c0:dc:19:e1:9e:68:55:c4: 69:d1:bb:8d:aa:81:ac:03:05:5f:2c:3a:f5:b3:b3: 52:46:3d:4e:81:44:93:68:b5:d6:3b:33:03:f7:cd: 36:ba:c6:3a:2c:b6:01:47:04:2e:38:07:a0:39:9e: a5:e6:75:12:ab:b9:7b:80:f1:78:29:ef:d4:e1:1e: 7c:07:c8:78:72:b8:c5:07:09:7c:6e:dd:4b:fb:ec: b0:2f:a2:8e:12:e0:15:00:91:ad:c7:4b:e5:04:03: 1e:2d:1f:24:28:96:a3:d1:ac:5d:b6:f5:69:2b:d3: 91:d4:da:5f:64:b5:c7:66:83:a2:2b:ae:e7:35:64: 71:19:af:bd:01:a3:13:1d:01:8e:f9:9f:be:3c:8a: d8:9f:58:5a:20:4c:62:f9:3b:96:28:7c:a8:71:f7: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D7:6A:7A:87:7F:43:59:C7:A0:86:0E:75:22:75:08:67:2C:53:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:94:6a:17:86:38:29:73:ce:5a:0b:6f:65:86:f5:13:cd:0f: 83:04:92:e5:28:72:f6:80:46:cd:f1:11:a3:f1:10:74:e5:a5: 68:ac:70:a2:6f:a5:fa:56:b8:b5:e7:71:2f:5c:db:9f:f3:0f: e0:02:da:3c:08:d9:79:fb:af:65:0a:73:3d:d3:f1:c9:d4:c1: 5e:40:97:6b:06:7e:fb:8f:b9:1f:3a:1a:99:3e:1c:bf:ff:6a: 25:22:46:3c:75:a1:03:47:02:93:7c:29:d8:f0:e3:10:dd:67: 3b:2c:7d:8d:e5:a3:04:12:74:51:72:b9:15:b1:5c:ef:65:8e: 3e:6b:b3:01:3b:4b:82:d7:f8:ed:7b:d3:1d:c9:f1:84:0a:5d: 7a:08:2a:ac:9a:5b:a2:0f:f8:b1:6a:0d:22:0b:1c:3e:1c:94: 68:15:21:ce:65:0d:21:a1:19:67:70:08:42:13:7c:9f:5b:15: 05:e0:76:88:fd:3d:12:01:7a:0b:90:71:b3:ed:67:92:38:f5: 32:95:2e:da:59:6e:2f:8a:a8:dd:f3:6c:3b:9a:6d:dc:e6:47: 28:36:e9:9f:ec:fe:10:66:3b:0d:aa:7a:0c:0a:d1:1d:14:4c: cd:f4:1b:1b:10:b3:8a:18:ef:09:c7:c0:0c:2c:cf:de:30:f9: ce:29:31:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJd5fvIns/ReNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGY3MDExNDgtM2RmMS00MjY4LWJmZWEtMGU0NWQ3N2U3NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XCq8IWQXDUF+t7JuRVZ1aWuXyvI7AoXGuIu Me5NV75uGNmGwMDCT4dJARZbH+4BPUtv9mbKpca4VCelbGiJy6Jzeus1/8wGLWin XLB5UtoPaJEzA/GB2L19I9+nIGkTwNwZ4Z5oVcRp0buNqoGsAwVfLDr1s7NSRj1O gUSTaLXWOzMD9802usY6LLYBRwQuOAegOZ6l5nUSq7l7gPF4Ke/U4R58B8h4crjF Bwl8bt1L++ywL6KOEuAVAJGtx0vlBAMeLR8kKJaj0axdtvVpK9OR1NpfZLXHZoOi K67nNWRxGa+9AaMTHQGO+Z++PIrYn1haIExi+TuWKHyocfdKSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjXanqHf0NZx6CGDnUidQhnLFP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYWEwZGRhYzItNjM1Yy0z MGI0LWJmMzctMTE5ZWQ4NGUzMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByUaheGOClzzloLb2WG9RPND4MEkuUocvaARs3xEaPxEHTlpWiscKJv pfpWuLXncS9c25/zD+AC2jwI2Xn7r2UKcz3T8cnUwV5Al2sGfvuPuR86Gpk+HL// aiUiRjx1oQNHApN8Kdjw4xDdZzssfY3lowQSdFFyuRWxXO9ljj5rswE7S4LX+O17 0x3J8YQKXXoIKqyaW6IP+LFqDSILHD4clGgVIc5lDSGhGWdwCEITfJ9bFQXgdoj9 PRIBeguQcbPtZ5I49TKVLtpZbi+KqN3zbDuabdzmRyg26Z/s/hBmOw2qegwK0R0U TM30GxsQs4oY7wnHwAwsz94w+c4pMXQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:07 2025 by rpki-client