$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa File: 9a249e6e-47df-3766-a58c-3846de9693e3.roa (raw, json) Hash identifier: genby8kpnWXwJYbNMaJ5kjs8C5Jgfqg7W51ROZDZuak= Subject key identifier: 29:AE:19:A8:00:6D:B7:D2:7B:20:E0:FB:81:25:49:FB:7B:A4:1B:15 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584DBA3AE91164EB528161150940 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 12212 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e9:11:64:eb:52:81:61:15:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=0946c20e-a511-4373-aa7e-d54091cc2a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:d2:67:c9:10:32:7e:c0:da:16:3d:b0:6f: 63:0e:30:4c:b1:98:9c:33:55:8c:f7:c0:db:95:59: ab:53:28:de:17:18:d6:52:34:a3:11:c4:50:0f:bb: db:f4:fe:28:eb:92:4b:f4:a9:17:13:23:6f:61:bf: c1:b2:09:ab:d8:1b:9b:c2:7b:f4:66:17:13:d1:cb: 05:8e:9c:23:e1:97:05:f6:5d:a9:7b:8a:0d:fa:77: 61:88:00:82:7e:76:21:47:ca:da:43:e7:7b:71:21: a8:c4:15:b5:9a:de:18:1e:37:ce:bc:90:98:65:d7: 8d:3b:02:f2:91:10:85:f7:dc:52:7e:9f:43:60:e5: f4:a4:49:8f:14:3c:09:86:61:96:3d:b9:01:c0:2c: 5d:8b:2c:a7:18:3d:e9:26:0f:28:9a:06:3a:8b:6e: 98:cb:59:34:ce:a0:96:5e:28:16:c6:60:8d:6f:9d: 09:45:6c:e6:62:13:1a:aa:58:30:65:d8:de:ae:a7: 43:9b:e7:34:e2:f1:0d:a4:9e:b3:53:c7:fe:87:d8: b1:90:9e:82:9e:9b:97:d7:af:59:2c:4a:22:48:54: 59:67:03:40:b8:62:aa:5e:c5:ad:be:c1:62:4b:f1: 2e:94:54:89:42:11:78:6a:92:c5:3a:a3:d8:11:10: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AE:19:A8:00:6D:B7:D2:7B:20:E0:FB:81:25:49:FB:7B:A4:1B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9a249e6e-47df-3766-a58c-3846de9693e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8a:d2:af:ad:a2:45:5a:c2:5a:48:3c:f8:3d:14:a1:df:97: bc:28:d5:76:d9:90:54:b1:b3:47:6c:1d:90:45:33:da:0d:f3: d1:b1:8f:ac:7c:78:7e:6c:91:75:b2:88:ba:00:84:50:01:15: 9f:c5:98:32:bc:b4:c7:0a:20:30:24:a1:d4:7f:bc:42:b1:bd: f9:07:d4:fd:29:26:f5:28:8d:74:3d:14:eb:a4:78:76:5f:e8: d4:7e:77:62:04:66:82:cb:90:6c:8a:a0:67:f1:47:5b:a8:14: 85:17:90:97:9c:1b:6a:7f:80:6e:60:1b:00:4f:66:7f:b8:f0: c9:c6:9f:db:44:33:c9:0c:ce:54:85:50:78:a5:81:f6:57:ef: 81:bd:45:68:bb:ad:e1:ca:56:cd:e6:b3:21:f0:9f:63:8e:4c: d1:ba:59:57:4d:b3:c4:1f:e1:48:66:d0:62:25:b7:be:0c:bc: 64:ba:88:d6:40:6f:d5:0f:d3:1a:e2:3f:2d:b6:d2:39:66:db: c0:07:57:26:17:59:a5:24:fa:a6:79:cb:5c:c6:4e:53:79:cf: 2d:8d:3d:f4:9d:b5:81:65:e0:f5:a1:16:4c:54:a6:eb:70:a9: 75:ce:5f:b9:e3:46:50:d4:45:c3:fd:95:69:2e:fc:39:f5:19: ff:d0:2a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OukRZOtSgWEVCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MDk0NmMyMGUtYTUxMS00MzczLWFhN2UtZDU0MDkxY2MyYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPSZ8kQMn7A2hY9sG9jDjBMsZicM1WM98Db lVmrUyjeFxjWUjSjEcRQD7vb9P4o65JL9KkXEyNvYb/Bsgmr2Bubwnv0ZhcT0csF jpwj4ZcF9l2pe4oN+ndhiACCfnYhR8raQ+d7cSGoxBW1mt4YHjfOvJCYZdeNOwLy kRCF99xSfp9DYOX0pEmPFDwJhmGWPbkBwCxdiyynGD3pJg8omgY6i26Yy1k0zqCW XigWxmCNb50JRWzmYhMaqlgwZdjerqdDm+c04vENpJ6zU8f+h9ixkJ6CnpuX169Z LEoiSFRZZwNAuGKqXsWtvsFiS/EulFSJQhF4apLFOqPYERCjMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmuGagAbbfSeyDg+4ElSft7pBsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvOWEyNDllNmUtNDdkZi0z NzY2LWE1OGMtMzg0NmRlOTY5M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmK0q+tokVawlpIPPg9FKHfl7wo1XbZkFSxs0dsHZBFM9oN89Gxj6x8 eH5skXWyiLoAhFABFZ/FmDK8tMcKIDAkodR/vEKxvfkH1P0pJvUojXQ9FOukeHZf 6NR+d2IEZoLLkGyKoGfxR1uoFIUXkJecG2p/gG5gGwBPZn+48MnGn9tEM8kMzlSF UHilgfZX74G9RWi7reHKVs3msyHwn2OOTNG6WVdNs8Qf4Uhm0GIlt74MvGS6iNZA b9UP0xriPy220jlm28AHVyYXWaUk+qZ5y1zGTlN5zy2NPfSdtYFl4PWhFkxUputw qXXOX7njRlDURcP9lWku/Dn1Gf/QKms= -----END CERTIFICATE-----Generated at Wed May 13 16:38:05 2026 by rpki-client