$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa File: 0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa (raw, json) Hash identifier: yXbHSvawBz0LP87MgI4D5F/4h7NmZhHXqOTSegXDQd0= Subject key identifier: AE:66:16:7E:F3:8B:E5:C6:F1:54:34:3D:D7:2B:03:3A:64:18:E8:C4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D300A2DA6FBBA5FED89DDA7C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 45.59.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:2d:a6:fb:ba:5f:ed:89:dd:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=02ab873a-23b3-4cf3-901a-0a86fd3f3217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:d0:88:41:14:cc:83:35:30:05:bc:a0:51: 52:2b:40:86:17:19:79:27:9e:40:cf:e2:0e:b2:e7: 27:81:d6:58:8b:4e:15:29:2b:3e:6f:e7:85:a4:bb: e2:e5:f6:ac:58:4f:09:58:08:e8:b6:b3:96:de:4a: df:31:18:96:f5:e2:9f:5f:43:b0:a5:39:ff:38:fa: 30:8d:4f:2c:6f:bb:e2:64:00:6f:ad:bc:80:78:9d: 72:72:cd:8f:4a:0e:50:9b:b2:38:96:01:68:89:7d: a5:0d:01:73:b9:51:8e:11:d5:65:06:55:b7:35:ab: 74:e6:81:c7:26:c7:88:27:58:de:81:ad:81:70:9e: 62:a1:f6:10:27:b2:0c:aa:13:59:20:a2:8c:d2:ea: c9:11:b3:7c:0a:d5:01:72:73:17:05:4f:84:84:6e: 14:a2:c6:52:13:a0:99:d0:2f:8b:25:e8:fc:af:c3: 31:46:50:56:d6:94:4e:0d:a8:29:31:9d:50:7d:02: 93:47:be:34:ae:5a:e9:b3:a3:2b:ff:42:62:d4:42: 3c:8d:0c:1b:9f:2c:f7:10:06:7b:7d:67:91:c3:21: 4f:69:98:72:26:51:e9:23:08:1d:95:c0:07:17:16: 82:13:8f:ef:ae:c0:82:db:ca:98:77:4d:c1:26:05: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:66:16:7E:F3:8B:E5:C6:F1:54:34:3D:D7:2B:03:3A:64:18:E8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0541c0b6-a35e-3101-b265-eeb4d3cb2b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:63:63:55:36:f5:95:73:bc:3b:f6:f3:44:13:d8:62:ae:97: 5e:22:21:8b:f2:fa:73:fb:b4:4a:a1:7e:40:ee:92:81:24:bd: 8f:34:3b:6a:46:0b:6d:71:fb:6e:1b:ec:30:3a:5e:81:dd:ea: e6:4a:0b:fc:2a:fd:5d:56:57:b5:e0:93:58:83:e6:75:70:ef: b6:e3:97:6b:0b:7b:b5:21:9e:1f:1e:42:1b:1c:2b:b4:5e:09: 60:00:49:ff:7f:ce:91:fc:09:a4:9d:9d:1e:85:07:e9:a1:a9: a4:34:a7:e4:ea:f4:74:32:7a:38:2c:b5:9f:df:c5:f1:2d:07: eb:7b:cd:e3:bc:9f:5a:64:98:d2:c2:a8:27:c3:15:60:dc:11: 2d:85:a8:15:ce:0b:dd:42:89:91:c7:3b:d1:73:5a:5e:a2:88: ac:13:a1:50:4a:09:58:72:cb:c9:cb:bf:eb:ef:f5:72:4f:e2: 67:b5:f7:ad:65:72:9d:06:2d:d4:75:f6:84:ed:25:63:ae:4d: ba:67:cc:93:96:59:92:d9:98:30:e2:ab:56:16:69:2b:a9:5d: b1:eb:c6:61:00:50:34:a7:56:55:c5:8e:9b:2e:34:66:9c:51: 7a:b1:d1:96:21:28:32:f9:af:5c:d7:f2:f7:98:74:3d:ce:d8: 83:c2:10:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCi2m+7pf7Yndp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDJhYjg3M2EtMjNiMy00Y2YzLTkwMWEtMGE4NmZkM2YzMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRbQiEEUzIM1MAW8oFFSK0CGFxl5J55Az+IO sucngdZYi04VKSs+b+eFpLvi5fasWE8JWAjotrOW3krfMRiW9eKfX0OwpTn/OPow jU8sb7viZABvrbyAeJ1ycs2PSg5Qm7I4lgFoiX2lDQFzuVGOEdVlBlW3Nat05oHH JseIJ1jega2BcJ5iofYQJ7IMqhNZIKKM0urJEbN8CtUBcnMXBU+EhG4UosZSE6CZ 0C+LJej8r8MxRlBW1pRODagpMZ1QfQKTR740rlrps6Mr/0Ji1EI8jQwbnyz3EAZ7 fWeRwyFPaZhyJlHpIwgdlcAHFxaCE4/vrsCC28qYd03BJgXl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5mFn7zi+XG8VQ0PdcrAzpkGOjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDU0MWMwYjYtYTM1ZS0z MTAxLWIyNjUtZWViNGQzY2IyYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELTsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhjY1U29ZVzvDv280QT2GKul14iIYvy+nP7tEqhfkDukoEkvY80O2pG C21x+24b7DA6XoHd6uZKC/wq/V1WV7Xgk1iD5nVw77bjl2sLe7Uhnh8eQhscK7Re CWAASf9/zpH8CaSdnR6FB+mhqaQ0p+Tq9HQyejgstZ/fxfEtB+t7zeO8n1pkmNLC qCfDFWDcES2FqBXOC91CiZHHO9FzWl6iiKwToVBKCVhyy8nLv+vv9XJP4me1961l cp0GLdR19oTtJWOuTbpnzJOWWZLZmDDiq1YWaSupXbHrxmEAUDSnVlXFjpsuNGac UXqx0ZYhKDL5r1zX8veYdD3O2IPCEMA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:36 2026 by rpki-client