$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json) Hash identifier: WFbAIqNYI2BsiS4Vscn38zaxKRIeNbTSr72syVs7EyI= Subject key identifier: 8B:7E:E9:16:F8:A7:7E:5C:F5:29:F5:8F:5E:22:22:96:34:26:6A:CD Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584D492A732EC72A950C0FF47360 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 396018 IP address blocks: 104.237.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:73:2e:c7:2a:95:0c:0f:f4:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=856fcede-baa9-4d17-a770-d36e8b3b6163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:8c:d8:84:39:e2:ab:43:1d:87:75:b5:fc: 4a:76:ea:16:18:ca:16:ae:d4:a9:20:37:ae:78:75: 58:99:06:f9:37:3e:a7:8e:19:9a:0e:24:eb:5c:33: 94:ad:fb:35:c8:79:ac:e2:5b:2d:08:99:03:b7:2b: ee:dd:d2:b9:de:28:78:94:5e:a9:e1:4b:5e:f5:e4: a4:12:67:4d:a9:b3:60:5e:05:c6:52:ea:18:28:5e: 52:09:ec:6b:bd:41:57:8d:87:8b:cc:7e:ae:16:a4: f4:41:97:fd:21:b2:95:4a:8f:ef:4c:61:a2:ed:be: f2:85:ab:7d:8b:40:c9:07:2a:d9:75:6a:fd:77:58: a4:28:b8:ba:ed:bd:fa:2f:7f:9e:92:bf:01:43:42: de:09:c9:e5:22:fc:3d:c7:8b:ab:4f:82:3a:68:87: 69:a4:38:85:79:0f:ee:49:a4:45:9f:3c:62:ed:c6: 92:cf:ac:40:93:f3:c3:9c:1d:df:63:53:33:5f:35: 40:72:ed:e7:df:6b:47:a9:5c:80:4d:b8:e8:59:8e: c7:86:a1:c4:83:b0:ca:c9:04:50:e6:e2:61:c8:64: 58:2b:93:33:bc:9b:cb:ea:e1:3a:b7:a5:22:38:da: 7e:43:06:58:6c:70:a5:86:7e:27:8b:03:95:13:8d: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:E9:16:F8:A7:7E:5C:F5:29:F5:8F:5E:22:22:96:34:26:6A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ae:4e:aa:30:82:e3:54:f0:b3:81:bb:b2:53:d1:78:c0:48: eb:76:ec:11:19:e1:6b:e5:8f:60:1f:21:81:68:59:b9:15:ca: 66:8c:34:a2:16:d9:02:8e:73:c4:f6:35:cd:89:d1:58:34:7d: 9d:6a:25:df:a0:b5:3a:ed:b6:e7:7e:51:2e:04:f4:88:93:f8: 6c:51:76:33:fd:5c:6a:bd:c0:96:f0:d7:8a:98:4c:20:d8:cb: 8d:6b:96:7b:91:38:fa:0f:ca:fe:67:3e:4e:83:20:06:4e:bc: 18:a0:47:71:d4:6e:50:1e:03:7f:20:1b:1c:a5:7f:57:45:0b: d4:82:28:55:3d:c5:6d:b2:9a:6a:01:4b:35:b5:09:a7:f1:58: 04:0e:fc:c4:c9:f3:f4:06:aa:9b:14:5b:bc:e1:21:f0:41:ad: 59:b3:b4:ea:78:d5:e8:41:b2:3b:0d:56:92:ce:4c:54:ed:1e: 1e:d9:8d:d9:36:5a:ab:62:7b:01:72:0b:c7:23:bd:47:2f:5b: d6:ef:d4:2a:f1:9b:70:16:c6:42:81:39:38:f2:e1:30:33:ce: 1c:78:15:f4:f5:d5:37:2b:28:49:5c:6a:fd:0a:c4:7a:5c:ef: be:86:03:b1:5b:01:e7:8e:36:d5:e7:04:2e:7a:bf:21:d2:21: 0e:e4:af:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnMuxyqVDA/0c2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODU2ZmNlZGUtYmFhOS00ZDE3LWE3NzAtZDM2ZThiM2I2MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NqM2IQ54qtDHYd1tfxKduoWGMoWrtSpIDeu eHVYmQb5Nz6njhmaDiTrXDOUrfs1yHms4lstCJkDtyvu3dK53ih4lF6p4Ute9eSk EmdNqbNgXgXGUuoYKF5SCexrvUFXjYeLzH6uFqT0QZf9IbKVSo/vTGGi7b7yhat9 i0DJByrZdWr9d1ikKLi67b36L3+ekr8BQ0LeCcnlIvw9x4urT4I6aIdppDiFeQ/u SaRFnzxi7caSz6xAk/PDnB3fY1MzXzVAcu3n32tHqVyATbjoWY7HhqHEg7DKyQRQ 5uJhyGRYK5MzvJvL6uE6t6UiONp+QwZYbHClhn4niwOVE42r1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt+6Rb4p35c9Sn1j14iIpY0JmrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvZjJkY2ZhZWYtN2EwZC0z YjY3LWI3MjktYjc1NWIzOWRiNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWuTqowguNU8LOBu7JT0XjASOt27BEZ4Wvlj2AfIYFoWbkVymaMNKIW 2QKOc8T2Nc2J0Vg0fZ1qJd+gtTrttud+US4E9IiT+GxRdjP9XGq9wJbw14qYTCDY y41rlnuROPoPyv5nPk6DIAZOvBigR3HUblAeA38gGxylf1dFC9SCKFU9xW2ymmoB SzW1CafxWAQO/MTJ8/QGqpsUW7zhIfBBrVmztOp41ehBsjsNVpLOTFTtHh7Zjdk2 WqtiewFyC8cjvUcvW9bv1Crxm3AWxkKBOTjy4TAzzhx4FfT11TcrKElcav0KxHpc 776GA7FbAeeONtXnBC56vyHSIQ7kr/k= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:36 2026 by rpki-client