$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa File: 02ae0dce-8d66-3178-9404-74219b4a48ca.roa (raw, json) Hash identifier: Hm7NJx54wcW4NbL8Vr7ifxi0dpQ68RTPNXMJ2TUUmSs= Subject key identifier: 2D:D3:C3:FD:C5:2E:B3:C4:11:4C:96:9F:A7:90:2C:E4:2F:33:76:7D Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584F51D2B208A753798EEDCC6680 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 104.237.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b2:08:a7:53:79:8e:ed:cc:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=a2b4dc12-a4fd-4e72-818b-94548a092761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:bb:e5:4e:39:8a:fa:f1:6a:20:c1:f5:d8: 8d:3d:d8:99:23:75:a0:b0:76:72:5a:f2:0e:c8:94: e8:80:8b:5f:af:0e:fc:33:fb:bd:c8:35:c9:8c:38: 16:6d:f0:9e:1f:98:b9:38:db:a8:e6:0b:c0:81:2d: 3d:ab:0c:8c:22:99:45:7e:27:01:e1:29:ba:c0:c2: 9d:ee:22:0d:45:1d:93:2e:4e:f8:35:a8:03:ed:da: f5:2b:1a:b4:c8:82:a9:75:c5:e0:9a:b4:c2:62:21: e5:7a:01:87:74:a2:88:27:d8:4a:ff:d9:9d:08:e4: 29:78:ee:c2:93:98:96:f4:10:20:83:ae:8e:e2:97: ce:8c:a6:f9:cb:ac:36:e2:45:23:e6:88:dd:38:ce: 49:9f:0b:3a:41:eb:10:11:7d:90:11:02:47:c9:fb: 83:9a:0d:de:c5:29:55:a2:f3:08:d6:39:7a:88:a4: ad:df:68:34:d9:67:de:a4:23:16:31:4a:1d:47:38: 86:de:45:ba:b9:37:10:9c:cb:8c:a9:fb:d6:95:bb: 53:16:e5:50:42:fe:19:a1:06:6b:2f:39:a7:6d:b0: 07:91:2a:ae:50:02:6e:a7:10:79:5b:7c:eb:68:56: 52:61:0d:25:70:64:10:cf:10:d5:4e:81:87:e8:8a: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:C3:FD:C5:2E:B3:C4:11:4C:96:9F:A7:90:2C:E4:2F:33:76:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/02ae0dce-8d66-3178-9404-74219b4a48ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d8:2f:37:40:33:ac:05:d6:f8:ad:05:2e:f1:be:a9:2a:0a: 4d:a6:29:6f:64:1e:f9:72:92:84:7d:5e:cf:0e:7e:d8:70:38: 80:d6:51:62:ac:94:99:28:f8:50:18:af:87:bf:c4:cc:26:a9: ea:ac:b2:c0:d3:4d:8a:d8:90:c7:41:c7:ab:12:b2:3c:09:96: 5e:d7:24:4f:d5:88:c6:08:2d:34:fa:ae:6a:0b:6d:45:07:8c: 30:f5:63:46:45:4d:8f:a4:87:4a:65:22:46:63:cc:06:ef:4b: ff:bf:df:84:02:67:76:88:b5:d0:61:35:6c:5a:f7:81:ad:ae: cb:3a:19:b2:0c:6a:f3:13:eb:af:9e:b5:1f:78:8f:2c:e4:44: 8d:0d:f0:4f:b1:ff:84:bb:5c:48:49:43:75:3d:fe:c3:d7:86: f0:43:fb:bf:ef:a9:5e:d5:e1:49:81:18:3a:bd:8f:ad:7a:9c: 0c:e0:9e:80:a8:22:61:3d:ba:26:eb:05:4a:c7:cf:0a:89:02: 07:0f:78:36:e9:57:7f:19:11:48:d3:ca:d5:e6:c5:8e:ce:3c: ce:29:f5:f4:d3:40:31:46:f1:c2:ad:4b:a0:ae:07:bf:b7:5b: 3b:69:35:95:3d:92:50:d6:40:9f:a8:69:f4:89:db:2d:74:d5: 6d:d5:66:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rIIp1N5ju3MZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YTJiNGRjMTItYTRmZC00ZTcyLTgxOGItOTQ1NDhhMDkyNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz275U45ivrxaiDB9diNPdiZI3WgsHZyWvIO yJTogItfrw78M/u9yDXJjDgWbfCeH5i5ONuo5gvAgS09qwyMIplFficB4Sm6wMKd 7iINRR2TLk74NagD7dr1Kxq0yIKpdcXgmrTCYiHlegGHdKKIJ9hK/9mdCOQpeO7C k5iW9BAgg66O4pfOjKb5y6w24kUj5ojdOM5Jnws6QesQEX2QEQJHyfuDmg3exSlV ovMI1jl6iKSt32g02WfepCMWMUodRziG3kW6uTcQnMuMqfvWlbtTFuVQQv4ZoQZr LzmnbbAHkSquUAJupxB5W3zraFZSYQ0lcGQQzxDVToGH6Iqs3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Tw/3FLrPEEUyWn6eQLOQvM3Z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvMDJhZTBkY2UtOGQ2Ni0z MTc4LTk0MDQtNzQyMTliNGE0OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfYLzdAM6wF1vitBS7xvqkqCk2mKW9kHvlykoR9Xs8OfthwOIDWUWKs lJko+FAYr4e/xMwmqeqsssDTTYrYkMdBx6sSsjwJll7XJE/ViMYILTT6rmoLbUUH jDD1Y0ZFTY+kh0plIkZjzAbvS/+/34QCZ3aItdBhNWxa94Gtrss6GbIMavMT66+e tR94jyzkRI0N8E+x/4S7XEhJQ3U9/sPXhvBD+7/vqV7V4UmBGDq9j616nAzgnoCo ImE9uibrBUrHzwqJAgcPeDbpV38ZEUjTytXmxY7OPM4p9fTTQDFG8cKtS6CuB7+3 WztpNZU9klDWQJ+oafSJ2y101W3VZmE= -----END CERTIFICATE-----Generated at Sat Oct 24 18:49:03 2026 by rpki-client