$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa File: 9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json) Hash identifier: bSvrJ/9wFyFBUs7pZUTbdWn2UpmbvZ0EUVuwRL7Q/To= Subject key identifier: DD:3F:6C:E5:A6:89:10:64:B8:B6:4D:BC:FE:4C:F4:5F:7E:46:3C:E2 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584ECBD1DFB9A52D66BDECB34D00 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 14603 IP address blocks: 104.237.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:df:b9:a5:2d:66:bd:ec:b3:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=c3d57872-5d45-4c13-b30b-bc302b317bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:06:e0:ea:56:16:19:7b:9d:7d:65:93:32: e3:8d:0f:2f:7c:36:7d:e2:79:5a:3f:da:f1:a7:df: a8:2d:c3:62:3b:03:c3:96:8b:2b:4c:66:f0:8f:ea: d7:b6:ee:55:d0:59:9f:13:45:66:83:5d:67:75:39: ac:ff:c2:97:32:05:c8:77:5d:8f:77:29:7c:79:33: 10:f0:84:6b:cc:94:5f:1b:a6:c1:ae:48:14:a5:37: 9b:d0:12:64:20:d4:e1:cc:47:6f:da:9d:5f:89:d5: c8:73:d4:10:f5:6f:a4:ae:49:ae:ad:25:9c:4c:e1: ec:94:25:c8:c5:bc:82:50:eb:fc:5a:73:38:a0:5d: 60:4e:07:6f:0d:fe:5d:b9:03:4a:7b:fa:a7:be:1f: 62:24:65:94:e0:62:e3:f5:57:04:54:ab:fc:55:c5: b3:a8:6d:1b:54:93:1a:2e:0c:fe:4e:22:41:83:d2: 67:d3:28:8a:df:4c:6d:9a:88:90:1c:1d:61:03:af: 32:c3:40:d1:b0:87:9b:6d:ab:44:2a:38:a5:82:15: 8c:24:ce:de:0e:22:06:76:1f:2f:d3:c6:d3:3f:f6: 4f:40:b1:76:65:7e:e2:f0:86:9f:b2:28:26:47:ef: 30:d8:c2:52:be:57:5e:c1:34:2d:60:8f:54:c4:61: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3F:6C:E5:A6:89:10:64:B8:B6:4D:BC:FE:4C:F4:5F:7E:46:3C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:63:ad:e7:5c:0d:92:8d:2b:22:e3:17:77:4b:47:f6:17:1a: eb:4c:7b:c6:bf:3f:be:a7:5b:92:e1:6e:03:3e:79:f8:4f:1a: 8b:69:ee:58:0e:23:f5:ad:c7:07:c7:35:8b:e7:fe:d6:20:20: f5:09:87:4f:19:42:12:00:23:cc:3a:d2:d7:30:13:1f:59:32: e6:b3:91:46:e8:5d:78:b8:16:fe:70:15:62:6c:11:48:f8:77: bf:41:a7:49:87:ef:bc:fd:65:7b:87:a9:cf:96:e5:d8:19:18: 85:81:37:dd:12:d2:8f:74:34:79:38:21:bf:1a:d8:e4:39:c1: 6d:1c:c3:fb:4c:d2:9e:65:9b:5e:ab:be:9f:38:d5:be:b6:d0: 02:b5:73:39:21:db:5d:31:ee:d3:17:7d:b7:85:fd:97:6a:cc: d0:48:6a:ca:f6:51:ea:1a:e1:33:6e:b8:84:4e:05:60:40:42: 4e:1e:1c:bf:85:a7:4f:f7:28:77:4e:24:cc:11:ec:e9:90:ea: d0:49:fe:38:04:ee:60:80:b6:f7:53:b3:be:65:49:d5:9e:18: 09:f9:9d:85:d4:9e:e4:a5:2e:0a:81:6c:e1:71:e7:37:d8:27: aa:ce:3c:f8:3e:90:58:58:67:1d:48:ca:45:a1:96:fa:1f:79: a1:51:36:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0d+5pS1mveyzTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YzNkNTc4NzItNWQ0NS00YzEzLWIzMGItYmMzMDJiMzE3YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkUG4OpWFhl7nX1lkzLjjQ8vfDZ94nlaP9rx p9+oLcNiOwPDlosrTGbwj+rXtu5V0FmfE0Vmg11ndTms/8KXMgXId12Pdyl8eTMQ 8IRrzJRfG6bBrkgUpTeb0BJkINThzEdv2p1fidXIc9QQ9W+krkmurSWcTOHslCXI xbyCUOv8WnM4oF1gTgdvDf5duQNKe/qnvh9iJGWU4GLj9VcEVKv8VcWzqG0bVJMa Lgz+TiJBg9Jn0yiK30xtmoiQHB1hA68yw0DRsIebbatEKjilghWMJM7eDiIGdh8v 08bTP/ZPQLF2ZX7i8IafsigmR+8w2MJSvldewTQtYI9UxGHURwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0/bOWmiRBkuLZNvP5M9F9+RjziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvOWZlY2FjZGUtNTFhOS0z ZGQ1LTgyZDYtOGQ3ZDU4Y2NiMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdjredcDZKNKyLjF3dLR/YXGutMe8a/P76nW5LhbgM+efhPGotp7lgO I/WtxwfHNYvn/tYgIPUJh08ZQhIAI8w60tcwEx9ZMuazkUboXXi4Fv5wFWJsEUj4 d79Bp0mH77z9ZXuHqc+W5dgZGIWBN90S0o90NHk4Ib8a2OQ5wW0cw/tM0p5lm16r vp841b620AK1czkh210x7tMXfbeF/ZdqzNBIasr2Ueoa4TNuuIROBWBAQk4eHL+F p0/3KHdOJMwR7OmQ6tBJ/jgE7mCAtvdTs75lSdWeGAn5nYXUnuSlLgqBbOFx5zfY J6rOPPg+kFhYZx1IykWhlvofeaFRNsw= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:43 2026 by rpki-client