$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa File: 9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa (raw, json) Hash identifier: MdnYdi4WH5QpAmVyGp+YYddxPQaoUm8b4nQahAiBDYM= Subject key identifier: FF:8B:2F:EB:D3:55:DF:EC:D3:F4:10:F5:EE:10:DE:FE:05:EC:FC:B4 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584B89177C542D25EE6746F9E800 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 14603 IP address blocks: 104.237.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7c:54:2d:25:ee:67:46:f9:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=1d2f1348-cbf2-4632-b10c-c2a82ae926a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:29:fe:b4:de:d1:d8:aa:1d:a4:86:d2:97: 71:93:71:20:e8:e7:b1:14:45:d2:75:25:78:bf:af: f7:58:34:12:aa:38:32:4f:43:2c:73:04:da:fa:8e: 94:20:3d:1e:1a:92:87:5e:40:64:43:2f:f0:a3:b8: b7:87:3a:de:cd:7e:6b:2a:56:65:b5:c7:56:a2:01: 72:9a:fc:9c:a6:e0:3a:12:cf:39:4f:e1:25:9a:78: 32:b4:de:1d:54:68:44:a2:3a:5b:77:58:41:db:4e: e3:97:23:31:84:ba:81:a6:7b:91:88:5f:86:7e:ed: 8b:f7:66:bc:40:9c:02:2c:19:21:e9:63:39:35:5d: 51:fd:9b:13:78:2c:29:6d:b4:85:b2:6a:3a:b5:6b: d6:f3:3d:6f:d4:6e:e8:d0:42:ef:77:13:43:4e:57: ac:d7:f7:be:ad:c6:f4:32:50:4b:09:c1:e3:f1:f7: 27:5b:c5:26:2f:76:48:4b:1e:84:cf:ae:76:e0:7e: db:03:a7:71:c4:b4:73:34:7e:e5:14:08:c9:24:f3: ab:7b:9d:54:b5:61:ab:bf:81:5d:96:df:55:7b:ba: 63:a6:ac:ba:57:ad:c7:72:2c:75:0b:a9:20:34:dd: fa:28:e2:8c:44:90:fe:38:11:ad:90:64:9d:88:10: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8B:2F:EB:D3:55:DF:EC:D3:F4:10:F5:EE:10:DE:FE:05:EC:FC:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/9fecacde-51a9-3dd5-82d6-8d7d58ccb0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9d:fb:78:84:65:7a:01:4f:70:98:45:5d:d1:94:b3:ed:59: a0:3d:38:4e:21:51:e5:5a:12:c0:00:d7:b3:81:37:83:58:af: e9:08:a4:c8:5e:8d:45:8e:ce:23:ec:f3:35:12:7e:b4:76:72: 62:fb:20:64:ab:73:d7:f8:07:a1:3d:23:df:8a:6a:8f:62:80: e4:3d:60:59:aa:d8:62:e5:2e:69:13:fa:2c:4b:17:53:71:79: 5b:43:99:f6:41:d8:f9:68:97:28:5d:34:99:64:ca:a8:c6:e4: 6f:ae:9d:fc:90:76:fa:23:21:48:21:d1:70:94:5e:d1:75:b0: 04:2e:49:22:28:8c:89:f0:46:70:93:92:a0:08:bd:8d:62:22: 44:71:40:3c:6a:7f:87:92:06:db:5e:61:8f:b0:e0:78:5b:6d: 9b:58:6f:15:bb:57:67:4e:17:f0:26:e5:51:82:33:dc:02:41: 99:fb:d6:b5:a3:21:f1:9f:e1:cf:3d:17:99:0b:ec:69:11:26: 05:56:8b:71:a6:02:68:6f:21:84:99:a7:aa:e2:74:bd:d5:5f: 87:8d:74:64:a9:53:8e:d6:2f:71:9e:e8:ab:02:3d:db:3a:cf: 93:3f:c8:b3:fb:56:da:9e:ad:fe:d7:1f:bf:de:3c:b9:51:9a: 9e:94:14:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3xULSXuZ0b56AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MWQyZjEzNDgtY2JmMi00NjMyLWIxMGMtYzJhODJhZTkyNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Ap/rTe0diqHaSG0pdxk3Eg6OexFEXSdSV4 v6/3WDQSqjgyT0MscwTa+o6UID0eGpKHXkBkQy/wo7i3hzrezX5rKlZltcdWogFy mvycpuA6Es85T+ElmngytN4dVGhEojpbd1hB207jlyMxhLqBpnuRiF+Gfu2L92a8 QJwCLBkh6WM5NV1R/ZsTeCwpbbSFsmo6tWvW8z1v1G7o0ELvdxNDTles1/e+rcb0 MlBLCcHj8fcnW8UmL3ZISx6Ez6524H7bA6dxxLRzNH7lFAjJJPOre51UtWGrv4Fd lt9Ve7pjpqy6V63Hcix1C6kgNN36KOKMRJD+OBGtkGSdiBBspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+LL+vTVd/s0/QQ9e4Q3v4F7Py0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvOWZlY2FjZGUtNTFhOS0z ZGQ1LTgyZDYtOGQ3ZDU4Y2NiMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHid+3iEZXoBT3CYRV3RlLPtWaA9OE4hUeVaEsAA17OBN4NYr+kIpMhe jUWOziPs8zUSfrR2cmL7IGSrc9f4B6E9I9+Kao9igOQ9YFmq2GLlLmkT+ixLF1Nx eVtDmfZB2PlolyhdNJlkyqjG5G+unfyQdvojIUgh0XCUXtF1sAQuSSIojInwRnCT kqAIvY1iIkRxQDxqf4eSBtteYY+w4HhbbZtYbxW7V2dOF/Am5VGCM9wCQZn71rWj IfGf4c89F5kL7GkRJgVWi3GmAmhvIYSZp6ridL3VX4eNdGSpU47WL3Ge6KsCPds6 z5M/yLP7Vtqerf7XH7/ePLlRmp6UFDU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:42 2025 by rpki-client