$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa File: 38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa (raw, json) Hash identifier: r9GHlMi/pxpzXWKR7D6Jn+/NtMvp9IFzHiOqKLHUVsc= Subject key identifier: C1:43:73:DB:DE:93:FB:2E:C2:4F:C0:DA:E2:42:43:AE:30:00:4D:23 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584F49753F834541B3ACBDCB1880 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1100 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:3f:83:45:41:b3:ac:bd:cb:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a71db8f5-c408-4ff0-a167-a405ed44f183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:56:ee:cb:6a:ac:a6:de:b8:4c:7a:9e:ff: ec:92:d2:46:70:29:2d:d3:46:75:53:71:da:a5:b0: 99:f6:ea:42:73:91:9e:47:44:de:59:e2:ea:4a:bd: 75:d0:fb:62:06:22:16:be:6c:0e:19:46:f4:39:fc: ce:7d:eb:f8:c7:1f:c6:8c:a7:84:dc:38:bb:99:fc: a5:dc:da:8c:9a:4d:46:98:60:e9:23:34:3e:fb:69: f2:1f:cc:87:8f:27:ed:1a:60:24:9c:9e:b0:8a:6c: 94:0f:7a:51:09:d5:da:76:49:e1:1f:4c:ba:19:25: 94:6c:61:bb:b9:a2:28:fb:71:ec:24:1a:9d:5c:13: b1:a3:6a:73:69:23:e9:e4:4a:aa:ab:b8:36:7f:8b: ea:6b:e4:b4:49:c4:5d:ed:10:f4:34:c6:18:61:f4: 41:8a:7e:44:1e:f6:fe:9d:c7:e6:f8:41:1a:37:1c: ef:3f:ed:c3:5c:9e:49:6a:38:96:42:8d:23:10:01: 95:fb:39:86:d0:95:9f:e4:1e:70:a1:86:89:db:af: 91:ac:6d:8c:bc:14:55:a8:8d:c3:93:70:aa:c4:4f: c6:d3:2a:ce:bd:0e:d5:93:81:34:19:6f:98:72:0f: b2:a5:ad:e2:72:37:68:49:c2:eb:a5:01:2f:1a:02: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:73:DB:DE:93:FB:2E:C2:4F:C0:DA:E2:42:43:AE:30:00:4D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7a:21:90:0f:52:b8:05:a4:9f:7c:d1:0f:be:b8:dc:db:2f: 2a:cd:33:bc:75:76:a7:48:19:e9:0e:5e:2d:fb:ee:35:04:f0: f4:37:c6:43:de:c5:92:10:d6:0c:9c:dd:45:b0:56:38:e4:fc: 6a:2e:8e:73:12:6c:c6:92:14:35:32:3e:7e:4c:d7:9d:a9:ad: 05:8b:33:4b:5a:b8:19:4f:88:a6:10:f5:68:9a:59:18:80:c0: 29:9a:35:84:0c:7d:33:6c:13:63:2e:8c:3c:d1:70:fc:60:b6: 6e:f2:f6:2c:2a:14:04:8f:67:d8:91:7c:08:eb:71:73:30:36: dc:64:ca:3b:95:12:02:93:5f:80:60:c6:8c:a2:99:03:d2:7b: 63:ec:d0:24:16:62:03:72:79:05:a3:21:57:4f:8d:31:f4:62: 44:f3:59:e8:ed:79:e6:3b:1a:9b:71:1f:71:06:90:51:a5:ea: 1e:f5:7f:68:1a:6a:2b:73:4f:70:61:2d:14:8a:ee:c7:e9:f7: 86:fd:50:9b:4b:52:02:41:4b:4f:33:4b:dd:14:58:36:ed:eb: 36:68:d5:21:17:12:27:98:1e:ad:23:d3:75:be:91:f5:5a:3f: 0c:fa:5d:f6:33:8a:13:a9:4a:fb:33:fa:61:78:13:2b:4f:92: 70:93:d4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdT+DRUGzrL3LGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTcxZGI4ZjUtYzQwOC00ZmYwLWExNjctYTQwNWVkNDRmMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4xW7stqrKbeuEx6nv/sktJGcCkt00Z1U3Ha pbCZ9upCc5GeR0TeWeLqSr110PtiBiIWvmwOGUb0OfzOfev4xx/GjKeE3Di7mfyl 3NqMmk1GmGDpIzQ++2nyH8yHjyftGmAknJ6wimyUD3pRCdXadknhH0y6GSWUbGG7 uaIo+3HsJBqdXBOxo2pzaSPp5Eqqq7g2f4vqa+S0ScRd7RD0NMYYYfRBin5EHvb+ ncfm+EEaNxzvP+3DXJ5JajiWQo0jEAGV+zmG0JWf5B5woYaJ26+RrG2MvBRVqI3D k3CqxE/G0yrOvQ7Vk4E0GW+Ycg+ypa3icjdoScLrpQEvGgLkOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFDc9vek/suwk/A2uJCQ64wAE0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMzhlMGNkNjItNWI5Yy0z NWY4LWFhNDctZTE0YWFkOTUwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB16IZAPUrgFpJ980Q++uNzbLyrNM7x1dqdIGekOXi377jUE8PQ3xkPe xZIQ1gyc3UWwVjjk/GoujnMSbMaSFDUyPn5M152prQWLM0tauBlPiKYQ9WiaWRiA wCmaNYQMfTNsE2MujDzRcPxgtm7y9iwqFASPZ9iRfAjrcXMwNtxkyjuVEgKTX4Bg xoyimQPSe2Ps0CQWYgNyeQWjIVdPjTH0YkTzWejteeY7GptxH3EGkFGl6h71f2ga aitzT3BhLRSK7sfp94b9UJtLUgJBS08zS90UWDbt6zZo1SEXEieYHq0j03W+kfVa Pwz6XfYzihOpSvsz+mF4EytPknCT1BQ= -----END CERTIFICATE-----Generated at Sun Oct 4 00:33:52 2026 by rpki-client