$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa File: f2dcfaef-7a0d-3b67-b729-b755b39db468.roa (raw, json) Hash identifier: z1n/Q2uDE0WCNq4szhNGIKS2ikcxXzQ0k6WGbb8mEc4= Subject key identifier: 84:3F:2E:96:20:25:60:33:D8:74:C8:09:39:28:41:CC:BA:0F:D2:3C Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584B89177C4357662006861B8820 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 396018 IP address blocks: 104.237.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7c:43:57:66:20:06:86:1b:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=3a27797c-0d87-41b2-a38c-8473e3c0a827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:b2:15:a7:29:85:61:d3:19:16:7f:e2:c6: f3:60:e0:03:3e:3d:77:bc:5b:27:fa:fd:38:6e:be: dc:00:3e:6d:e2:78:c5:59:28:37:1e:18:95:35:2d: 72:2e:5f:a9:dc:43:a5:ae:78:71:7e:36:88:f5:8c: cb:0e:68:42:61:c4:d6:10:18:4a:3b:22:f3:c4:b6: 12:c0:f7:4c:c9:e4:0b:11:4b:f7:2b:bd:07:b2:51: f5:42:4b:5b:54:37:7a:3d:fd:b3:9e:47:c8:d5:18: 5d:e3:00:29:5a:b9:0d:1f:cf:4a:c1:dd:59:ac:4b: d3:ca:0a:e2:88:d4:32:78:1e:09:69:cf:1d:65:7a: 1d:d1:03:8c:aa:1c:65:de:99:27:ea:83:36:91:99: 89:85:cd:ff:21:00:b7:35:2b:5b:86:df:ac:d5:35: d3:6b:f9:02:88:71:4c:2d:4d:e7:d6:50:04:e8:e2: 88:5b:36:f9:da:33:48:b2:e2:d3:d1:30:00:89:8f: 87:24:ba:65:6d:a5:28:06:30:87:70:a9:fc:c1:59: a8:40:a6:ae:47:87:1b:bd:cc:6d:ae:ac:30:a0:d4: 2c:b1:58:a7:c9:3d:9a:7c:2c:8e:f6:92:1f:21:f9: fc:d1:18:6e:84:d5:19:20:5c:6d:bd:81:ac:7e:bd: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3F:2E:96:20:25:60:33:D8:74:C8:09:39:28:41:CC:BA:0F:D2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/f2dcfaef-7a0d-3b67-b729-b755b39db468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0f:0b:02:e5:7f:88:6f:c9:e8:b9:5c:81:a0:0a:61:27:94: a5:f0:d5:68:05:a5:4d:c5:46:ed:77:dc:ca:43:92:d7:66:14: 37:01:7d:ff:15:78:86:bd:8b:5e:3f:83:d0:ae:ea:35:11:b3: 2e:a6:ec:69:c0:37:47:3a:c4:f2:df:f3:67:9d:4a:52:04:55: 1f:4c:e3:97:f5:b5:8a:9a:2b:da:96:2b:64:c2:58:d4:9a:40: e3:d4:31:ba:0c:2f:0e:11:e9:82:d5:85:4c:6a:4e:c8:d4:c9: 49:b7:90:64:23:59:44:6d:83:53:80:26:34:78:d6:47:ea:7a: 10:d4:bf:40:56:a3:6d:d5:be:a6:52:83:82:c1:cc:9c:c5:8a: 05:54:3d:74:89:79:a4:b3:cc:8a:75:7c:a7:ef:ec:bb:9a:1d: a9:4d:7c:ac:e0:a8:6f:7f:3b:03:f1:61:5f:98:92:dd:77:ea: 9d:4c:b5:64:4a:56:1e:55:61:df:6e:a8:cf:b3:aa:79:a0:62: d0:ea:ba:44:a7:55:b7:5b:e4:d4:8e:c5:f1:16:5e:75:63:86: c1:fb:27:3c:bf:b9:53:4f:32:33:47:68:5e:8c:d2:9c:da:29: 19:a6:93:fa:53:99:e4:81:90:22:8f:15:92:61:94:6f:d3:de: 16:41:25:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3xDV2YgBoYbiCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk M2EyNzc5N2MtMGQ4Ny00MWIyLWEzOGMtODQ3M2UzYzBhODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm16yFacphWHTGRZ/4sbzYOADPj13vFsn+v04 br7cAD5t4njFWSg3HhiVNS1yLl+p3EOlrnhxfjaI9YzLDmhCYcTWEBhKOyLzxLYS wPdMyeQLEUv3K70HslH1QktbVDd6Pf2znkfI1Rhd4wApWrkNH89Kwd1ZrEvTygri iNQyeB4Jac8dZXod0QOMqhxl3pkn6oM2kZmJhc3/IQC3NStbht+s1TXTa/kCiHFM LU3n1lAE6OKIWzb52jNIsuLT0TAAiY+HJLplbaUoBjCHcKn8wVmoQKauR4cbvcxt rqwwoNQssVinyT2afCyO9pIfIfn80RhuhNUZIFxtvYGsfr1nQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ/LpYgJWAz2HTICTkoQcy6D9I8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvZjJkY2ZhZWYtN2EwZC0z YjY3LWI3MjktYjc1NWIzOWRiNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgPCwLlf4hvyei5XIGgCmEnlKXw1WgFpU3FRu133MpDktdmFDcBff8V eIa9i14/g9Cu6jURsy6m7GnAN0c6xPLf82edSlIEVR9M45f1tYqaK9qWK2TCWNSa QOPUMboMLw4R6YLVhUxqTsjUyUm3kGQjWURtg1OAJjR41kfqehDUv0BWo23VvqZS g4LBzJzFigVUPXSJeaSzzIp1fKfv7LuaHalNfKzgqG9/OwPxYV+Ykt136p1MtWRK Vh5VYd9uqM+zqnmgYtDqukSnVbdb5NSOxfEWXnVjhsH7Jzy/uVNPMjNHaF6M0pza KRmmk/pTmeSBkCKPFZJhlG/T3hZBJR4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:48 2025 by rpki-client