$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/91333e8f-84c7-38a5-b21f-858f90a37c75.roa File: 91333e8f-84c7-38a5-b21f-858f90a37c75.roa (raw, json) Hash identifier: 0ZwBiiHtCKHtqjHxXp9Kk0+ssrM5FSako2MEs6H+d2o= Subject key identifier: 67:95:8F:46:F7:6E:FB:2B:FA:20:58:FA:B0:9D:C1:6A:78:42:3D:51 Certificate issuer: /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06 Certificate serial: 010D0C9F4328584D4BF4F081B0D4AF94632DD900 Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/91333e8f-84c7-38a5-b21f-858f90a37c75.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 202736 IP address blocks: 45.59.129.0/24 maxlen: 24 45.59.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:f0:81:b0:d4:af:94:63:2d:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06 Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=9fcb95fb-ef78-4d01-9fb7-d4588149b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:df:8d:ef:19:02:f5:f1:ff:24:e1:0d:29: 36:3e:4b:cb:0e:23:13:9a:43:0d:5b:3c:f4:7e:65: 0d:6d:19:31:1a:b9:92:48:84:39:ce:10:4b:6d:a3: d9:17:35:e3:2c:15:32:01:33:32:fb:9c:96:78:c8: c6:71:81:30:ad:5a:12:d2:f4:d2:3e:b0:d0:ec:df: 52:d3:d8:e3:aa:36:dc:0b:2b:4c:81:c0:bf:31:56: fe:21:ad:62:4c:8e:c7:ee:3f:87:55:67:a9:1f:34: ce:c2:84:d9:dd:ea:6f:00:4d:86:f7:a4:b2:75:25: 0d:4e:f3:39:27:47:c6:06:ff:8e:98:ce:5b:71:bd: 26:d5:3c:09:56:8d:45:e0:af:ed:fb:df:1d:56:ac: 44:74:64:95:7e:4d:8d:ac:0b:53:6d:42:9e:98:10: 35:fd:d5:60:13:91:00:3e:e3:5f:58:22:96:25:7c: 4d:74:17:1e:1a:5b:12:15:ac:3f:d3:87:64:30:5c: a1:c0:b4:21:bb:48:68:8a:b9:15:52:35:a6:28:c7: 29:48:0b:37:b6:d6:b0:8e:76:db:70:81:43:9d:d2: 5a:b4:97:7e:2e:8a:30:f1:a7:7d:b6:0c:46:9b:60: 20:45:29:28:bf:c0:79:d8:03:fe:43:15:2e:f1:97: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:95:8F:46:F7:6E:FB:2B:FA:20:58:FA:B0:9D:C1:6A:78:42:3D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/91333e8f-84c7-38a5-b21f-858f90a37c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl X509v3 Authority Key Identifier: keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer sbgp-ipAddrBlock: critical IPv4: 45.59.129.0-45.59.130.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:71:6f:2a:0f:24:e8:26:07:12:ae:8d:3d:67:21:7c:8d:94: 00:a5:bd:69:11:8e:b9:cb:00:dd:20:7f:9e:1a:87:5b:d8:62: b6:b0:1d:97:52:80:d0:b6:1e:68:31:6c:f5:1c:2e:5e:cb:1e: 99:fd:ee:6c:52:7a:2c:3b:b7:63:45:d0:a8:7c:06:2e:58:4c: 69:51:95:09:b7:bf:db:0c:97:04:9d:6c:86:b2:31:bf:a3:dc: d3:9a:ca:9b:7a:87:5e:5b:52:27:2a:40:f7:45:3c:3f:2a:91: 57:63:2f:8f:32:2c:c0:0f:18:fb:6c:99:33:79:bf:12:1f:23: e6:b8:fa:91:bc:b9:80:e6:fe:79:8c:71:ab:a8:c8:bd:5e:0e: 0a:00:33:de:28:af:85:63:e0:2b:00:7a:8a:80:4c:fb:87:69: a9:ab:a5:b3:c6:89:ab:bd:ad:17:ef:7a:f4:2f:76:bc:bf:50: 64:20:71:36:11:e2:d9:e6:4d:b3:e2:ce:f2:54:d0:13:9b:ef: 8b:11:8c:8f:f4:c7:12:89:66:ad:19:72:7c:56:e9:b2:b6:3f: 7d:46:66:4b:c6:ff:97:42:82:dc:78:97:57:77:f3:4d:dc:b4: f4:5a:21:ad:59:e0:c1:a5:a9:2b:66:b0:8c:98:34:cd:9f:f5: 4d:8f:8d:88 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1L9PCBsNSvlGMt2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkzOWVlN2UtODFiMi00NmNmLTlhNDMtMzY0N2ZmMTMy YTA2MB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk OWZjYjk1ZmItZWY3OC00ZDAxLTlmYjctZDQ1ODgxNDliNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOrfje8ZAvXx/yThDSk2PkvLDiMTmkMNWzz0 fmUNbRkxGrmSSIQ5zhBLbaPZFzXjLBUyATMy+5yWeMjGcYEwrVoS0vTSPrDQ7N9S 09jjqjbcCytMgcC/MVb+Ia1iTI7H7j+HVWepHzTOwoTZ3epvAE2G96SydSUNTvM5 J0fGBv+OmM5bcb0m1TwJVo1F4K/t+98dVqxEdGSVfk2NrAtTbUKemBA1/dVgE5EA PuNfWCKWJXxNdBceGlsSFaw/04dkMFyhwLQhu0hoirkVUjWmKMcpSAs3ttawjnbb cIFDndJatJd+Loow8ad9tgxGm2AgRSkov8B52AP+QxUu8Ze3lwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGeVj0b3bvsr+iBY+rCdwWp4Qj1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5 ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3ZmYxMzJhMDYvOTEzMzNlOGYtODRjNy0z OGE1LWIyMWYtODU4ZjkwYTM3Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTkzOWVlN2UtODFiMi00NmNmLTlh NDMtMzY0N2ZmMTMyYTA2L2E5MzllZTdlLTgxYjItNDZjZi05YTQzLTM2NDdmZjEz MmEwNi5jcmwwHwYDVR0jBBgwFoAUQmeYS3HKGRxt4aBeVAy4qvqLKGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3 ZmYxMzJhMDYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtO4ED BAAtO4IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANHFvKg8k6CYHEq6NPWchfI2UAKW9aRGOucsA3SB/nhqH W9hitrAdl1KA0LYeaDFs9RwuXssemf3ubFJ6LDu3Y0XQqHwGLlhMaVGVCbe/2wyX BJ1shrIxv6Pc05rKm3qHXltSJypA90U8PyqRV2MvjzIswA8Y+2yZM3m/Eh8j5rj6 kby5gOb+eYxxq6jIvV4OCgAz3iivhWPgKwB6ioBM+4dpqauls8aJq72tF+969C92 vL9QZCBxNhHi2eZNs+LO8lTQE5vvixGMj/THEolmrRlyfFbpsrY/fUZmS8b/l0KC 3HiXV3fzTdy09FohrVngwaWpK2awjJg0zZ/1TY+NiA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:40 2026 by rpki-client