$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa File: aa0ddac2-635c-30b4-bf37-119ed84e3182.roa (raw, json) Hash identifier: 4DbcSKQpbl0pZBt7kU5pUgf+pZUpCIExSKfguT7OTi0= Subject key identifier: CD:A4:2E:39:E6:48:CE:09:AB:8C:B9:56:0B:1D:22:C2:41:65:8D:C6 Certificate issuer: /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Certificate serial: 010D0C9F4328584D2D3F7DCD9B022D762B121D80 Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 104.237.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7d:cd:9b:02:2d:76:2b:12:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=d7a906a4-e56e-462c-8be5-73dd64d168b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:96:67:d5:82:8d:e1:0e:16:26:f9:3b:bf: 32:6c:25:9b:92:8f:8c:90:95:8b:30:7c:8f:35:fc: 42:ff:3b:fc:0a:0a:36:eb:08:f2:c6:b6:5c:9e:d2: d0:b5:45:e1:c0:51:3a:83:fb:a9:aa:20:6e:4c:5f: f8:05:43:d8:a1:32:38:d3:3e:37:f2:23:23:72:73: d1:a7:37:45:7e:a1:5d:dd:5d:61:0c:e7:9c:56:4c: fa:1d:25:83:72:62:ee:2a:3d:68:56:b3:4b:75:1a: 29:95:de:3d:bb:18:ba:a1:7f:cf:f3:e1:47:4c:75: 73:e1:98:e6:76:d5:ba:6d:be:eb:8b:30:0b:89:27: fa:09:22:d7:3c:cc:6c:fb:18:65:ba:21:db:fa:6f: 16:6e:31:d4:bd:b1:ae:58:7c:c3:b0:23:cb:c1:95: d7:16:4a:aa:07:56:dc:df:e7:fc:15:c2:62:28:78: 84:a5:4c:84:52:88:7c:d3:6a:37:fb:2c:f7:1e:6f: c1:6d:39:45:f4:1d:fd:dc:b2:be:3e:64:8d:b7:9e: 63:00:87:06:97:d2:20:53:c0:c5:f2:a9:da:b6:9d: 11:9f:e5:0a:c1:42:26:bd:bd:b6:e0:f0:eb:55:63: 66:0c:76:89:37:a9:85:fe:a1:b0:72:b1:24:66:70: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A4:2E:39:E6:48:CE:09:AB:8C:B9:56:0B:1D:22:C2:41:65:8D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/aa0ddac2-635c-30b4-bf37-119ed84e3182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl X509v3 Authority Key Identifier: keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer sbgp-ipAddrBlock: critical IPv4: 104.237.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7e:04:01:57:75:6f:7c:01:1b:40:74:78:4c:67:bf:81:02: cf:de:05:9d:73:8c:c4:60:b7:15:2d:7b:80:63:a9:68:0c:04: 1a:6d:aa:a8:9e:34:af:6d:ef:03:1a:e5:80:f0:d6:a2:29:1c: a5:35:33:62:fd:ad:6e:e0:a4:fa:e1:93:3a:72:07:77:96:ba: 02:00:0f:fa:57:3d:5c:45:77:0b:36:b8:6e:93:23:65:58:f1: 86:d3:1f:aa:ee:de:3d:d6:3d:c8:2c:04:54:ca:18:32:f3:7e: 6d:dc:91:6c:2a:fc:44:26:ac:3f:4a:bd:43:55:7c:2e:a3:7f: b0:f2:5a:46:51:77:09:5c:bb:c9:63:08:3f:dd:17:cc:a7:9b: ba:e9:4d:df:c3:33:cb:b3:5e:e3:6b:b6:9b:41:ee:ca:cc:ad: f5:09:9f:f9:c7:62:fb:de:c0:f1:cb:ea:8a:23:97:fa:e0:bd: 11:05:3b:7f:24:9d:2c:b5:4d:cd:2e:32:ab:8a:90:89:3e:47: 60:8e:51:19:f9:21:2c:3b:e3:2b:1c:66:f4:f8:95:e4:d4:eb: 8c:26:91:64:f0:bd:40:30:5e:b7:46:f6:15:45:92:0d:29:a7: c3:cc:d1:d9:41:03:70:c0:1e:6e:91:0b:2c:ea:d7:71:d5:74: 77:de:5b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP33NmwItdisSHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj MTU1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDdhOTA2YTQtZTU2ZS00NjJjLThiZTUtNzNkZDY0ZDE2OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5mWZ9WCjeEOFib5O78ybCWbko+MkJWLMHyP NfxC/zv8Cgo26wjyxrZcntLQtUXhwFE6g/upqiBuTF/4BUPYoTI40z438iMjcnPR pzdFfqFd3V1hDOecVkz6HSWDcmLuKj1oVrNLdRopld49uxi6oX/P8+FHTHVz4Zjm dtW6bb7rizALiSf6CSLXPMxs+xhluiHb+m8WbjHUvbGuWHzDsCPLwZXXFkqqB1bc 3+f8FcJiKHiEpUyEUoh802o3+yz3Hm/BbTlF9B393LK+PmSNt55jAIcGl9IgU8DF 8qnatp0Rn+UKwUImvb224PDrVWNmDHaJN6mF/qGwcrEkZnBPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2kLjnmSM4Jq4y5VgsdIsJBZY3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvYWEwZGRhYzItNjM1Yy0z MGI0LWJmMzctMTE5ZWQ4NGUzMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9+BAFXdW98ARtAdHhMZ7+BAs/eBZ1zjMRgtxUte4BjqWgMBBptqqie NK9t7wMa5YDw1qIpHKU1M2L9rW7gpPrhkzpyB3eWugIAD/pXPVxFdws2uG6TI2VY 8YbTH6ru3j3WPcgsBFTKGDLzfm3ckWwq/EQmrD9KvUNVfC6jf7DyWkZRdwlcu8lj CD/dF8ynm7rpTd/DM8uzXuNrtptB7srMrfUJn/nHYvvewPHL6oojl/rgvREFO38k nSy1Tc0uMquKkIk+R2COURn5ISw74yscZvT4leTU64wmkWTwvUAwXrdG9hVFkg0p p8PM0dlBA3DAHm6RCyzq13HVdHfeW0Y= -----END CERTIFICATE-----Generated at Thu Mar 19 12:32:56 2026 by rpki-client