$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa File: 38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa (raw, json) Hash identifier: Wc3e/dqws3sGdrJmOp9oDa+iUo0WpqAPOKhaJi677pE= Subject key identifier: A6:89:68:D4:F4:BD:A2:09:92:E2:57:7F:F2:70:04:6A:86:06:EE:73 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584D237A2C9C0DE027E1D1D9D440 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 1100 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2c:9c:0d:e0:27:e1:d1:d9:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6a9ab819-d436-4aa8-9caf-b143922e6c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:df:7b:54:22:f4:90:7d:34:af:56:c1:97: 4a:65:e7:b7:fe:13:91:67:52:25:2d:0a:14:52:db: f7:41:9c:32:4a:71:0e:f0:97:02:65:3d:49:02:f8: fc:b3:4c:c4:4c:41:21:b2:fd:75:62:b9:c9:61:00: 7b:6e:c2:01:f4:ba:77:12:56:70:b6:6f:b2:73:39: 34:25:b7:8b:87:2a:ec:76:4a:37:60:84:d7:51:20: 59:78:d6:79:7c:d8:f4:b9:b5:17:ee:f7:38:4c:7e: 06:6a:e6:94:24:4b:e1:ce:1a:de:62:17:f6:c5:41: 52:2c:32:b1:9a:cf:a0:ff:03:4b:2c:5d:a0:53:b7: d7:eb:30:88:33:23:ef:50:2d:33:af:db:43:98:9c: 4e:54:b5:76:1a:a8:13:9f:b9:29:07:4c:62:f8:1f: 86:d1:d0:6e:b2:f8:4c:d8:5e:fa:06:99:ea:8b:e1: c4:0c:fb:3a:11:0c:a4:b3:5c:2b:f6:fc:90:bd:8a: 15:f7:f0:c8:19:9e:fa:fc:67:6a:89:95:4f:9c:2a: 66:36:bf:ce:29:29:ae:c2:e4:7c:f6:aa:ec:a7:d6: 78:c4:72:e6:56:ab:95:e0:4f:25:38:ce:a8:75:a8: d2:1e:8a:ad:05:12:1c:d4:ac:25:4b:55:6c:f1:4d: ad:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:68:D4:F4:BD:A2:09:92:E2:57:7F:F2:70:04:6A:86:06:EE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:86:f0:b1:7f:a8:da:ee:dc:b1:7d:72:a9:8d:3d:1f:1a:8a: d0:a8:97:f3:7c:c7:b8:4d:45:74:55:59:68:09:59:c9:47:73: 3a:9b:e2:ba:05:b4:09:11:83:fd:db:63:63:f3:1e:df:1c:2a: 80:89:78:05:6c:68:d7:a1:e9:12:4f:42:89:2e:a0:c6:73:de: 75:4c:5b:cf:6e:6a:ab:42:1f:df:89:9b:49:10:4c:bb:5e:78: 47:f9:9a:b4:d3:90:bd:61:87:13:70:64:0a:e4:04:98:30:cc: f5:5e:58:41:75:9f:3e:c4:b8:ed:15:b5:a3:8e:cc:5e:31:58: 6d:7f:9a:dd:a9:c1:39:b6:b5:72:a9:9b:42:bc:a7:9d:57:bf: 92:6d:35:0e:99:e9:3d:82:f5:48:c6:2c:6a:ac:d0:b5:2c:99: eb:6f:d0:89:5a:ee:e2:53:d3:95:3e:13:cd:f3:3e:ae:42:73: 30:c5:61:d6:22:81:46:e7:21:d9:d3:b0:73:45:ce:d4:51:bd: 06:69:5a:43:bf:e8:c3:a9:de:53:8b:b5:b8:df:48:36:af:7a: a9:77:6a:91:de:80:99:47:b6:f2:5c:06:35:c6:94:04:44:2f: b0:54:a0:2a:ea:c0:bc:11:67:7a:8a:60:27:0c:aa:85:e2:ef: f1:56:a0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiycDeAn4dHZ1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmE5YWI4MTktZDQzNi00YWE4LTljYWYtYjE0MzkyMmU2YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ/fe1Qi9JB9NK9WwZdKZee3/hORZ1IlLQoU Utv3QZwySnEO8JcCZT1JAvj8s0zETEEhsv11YrnJYQB7bsIB9Lp3ElZwtm+yczk0 JbeLhyrsdko3YITXUSBZeNZ5fNj0ubUX7vc4TH4GauaUJEvhzhreYhf2xUFSLDKx ms+g/wNLLF2gU7fX6zCIMyPvUC0zr9tDmJxOVLV2GqgTn7kpB0xi+B+G0dBusvhM 2F76Bpnqi+HEDPs6EQyks1wr9vyQvYoV9/DIGZ76/GdqiZVPnCpmNr/OKSmuwuR8 9qrsp9Z4xHLmVquV4E8lOM6odajSHoqtBRIc1KwlS1Vs8U2tZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaJaNT0vaIJkuJXf/JwBGqGBu5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMzhlMGNkNjItNWI5Yy0z NWY4LWFhNDctZTE0YWFkOTUwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqG8LF/qNru3LF9cqmNPR8aitCol/N8x7hNRXRVWWgJWclHczqb4roF tAkRg/3bY2PzHt8cKoCJeAVsaNeh6RJPQokuoMZz3nVMW89uaqtCH9+Jm0kQTLte eEf5mrTTkL1hhxNwZArkBJgwzPVeWEF1nz7EuO0VtaOOzF4xWG1/mt2pwTm2tXKp m0K8p51Xv5JtNQ6Z6T2C9UjGLGqs0LUsmetv0Ila7uJT05U+E83zPq5CczDFYdYi gUbnIdnTsHNFztRRvQZpWkO/6MOp3lOLtbjfSDaveql3apHegJlHtvJcBjXGlARE L7BUoCrqwLwRZ3qKYCcMqoXi7/FWoEg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:20 2026 by rpki-client