$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa File: 0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa (raw, json) Hash identifier: VP5BVXL3I2WeB1Kh9UEoaywwrtZ4WRxX30AHZTGJmYY= Subject key identifier: 6F:D6:D8:97:2A:FF:D5:0E:40:7F:3F:3D:91:DF:95:3C:B6:B2:10:9C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F00DCCB3134A4F3F04219CE80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 45.59.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:cb:31:34:a4:f3:f0:42:19:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=7ff98fd3-02dd-451c-860c-1d924c87026c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:e0:84:40:0c:6c:3c:2a:24:b9:94:a2:cd: 60:37:b4:a4:57:ac:86:63:d0:eb:f5:b4:34:4b:76: 37:75:ba:f4:c7:5c:5d:b2:dd:9f:cd:41:e2:1e:14: 6e:81:30:80:d7:22:d2:c7:b7:cc:2b:d8:79:e6:c0: a8:34:84:df:71:30:5c:21:1c:fa:18:19:6f:ac:16: 50:2a:61:91:b2:af:cc:a6:a6:d3:d7:62:12:83:50: 4b:9e:88:f2:bb:e6:d9:6e:e2:2a:ea:f2:b5:01:5a: 12:2b:54:66:f8:01:db:f3:c2:da:bd:52:6d:6c:13: f9:5c:ed:dc:b4:47:a5:92:51:f2:e5:a5:a3:d6:cd: 38:a7:1c:86:50:89:c4:5c:68:bd:db:ac:8f:0f:3c: c3:95:41:33:4c:4e:13:af:8e:9c:2c:26:c7:fc:57: a9:1b:55:fb:dc:04:20:14:40:b5:69:00:d3:e1:4c: 1c:dd:40:6f:85:83:3a:96:dd:85:de:fe:5b:b2:c5: 9e:26:42:56:80:52:1c:b9:88:49:38:e0:38:ca:5e: c1:0c:85:b9:87:46:66:21:df:92:2c:5b:8e:36:39: 27:a8:f3:3e:65:d3:8b:9b:b7:f8:c7:12:51:7f:f5: 9a:5b:b8:e2:be:0f:e2:eb:50:65:49:a2:e9:13:33: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D6:D8:97:2A:FF:D5:0E:40:7F:3F:3D:91:DF:95:3C:B6:B2:10:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fd3dad9-a391-3edb-96a3-c59e44a0127d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:66:8b:31:ca:66:08:17:84:16:7c:4b:68:a9:97:b4:a5:00: 1b:fe:c6:cc:a3:b3:27:08:38:51:c1:63:fa:18:d2:79:4a:90: 0b:7b:31:ee:85:0d:c5:11:88:18:e0:f3:90:a5:12:db:15:4d: cf:5c:8f:e6:19:c2:d1:c9:82:d4:e3:de:01:61:d4:c6:38:bd: 15:90:02:55:03:22:44:0d:b7:b7:01:7f:50:02:31:82:3e:2a: 0d:26:1b:5f:46:14:31:50:58:af:4d:08:ec:5c:40:17:90:f4: 22:64:af:17:6c:0c:d0:fb:88:6c:d7:9b:c1:f2:37:93:e0:7c: 3c:36:81:4c:01:e3:be:a1:f5:68:e0:ab:9d:3e:34:a5:35:54: 20:8a:c2:df:77:4b:64:ee:ef:dc:39:d0:32:09:db:42:f4:8f: 6a:9a:07:0f:1a:80:bb:66:ed:1b:0f:a8:3d:0e:e9:c6:13:6f: 65:c0:d1:4a:71:70:56:0b:9a:eb:c0:f5:63:c8:46:fe:61:0e: 09:76:99:f8:d1:31:78:00:09:cc:50:e8:ff:90:b4:a4:aa:24: ab:03:9f:3d:2f:a6:9f:7e:b5:06:bb:35:64:7f:81:9a:2f:2f: 5b:22:32:28:8e:c1:26:b9:de:70:0e:55:ff:07:53:55:00:72: 59:16:f5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MsxNKTz8EIZzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk N2ZmOThmZDMtMDJkZC00NTFjLTg2MGMtMWQ5MjRjODcwMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGvghEAMbDwqJLmUos1gN7SkV6yGY9Dr9bQ0 S3Y3dbr0x1xdst2fzUHiHhRugTCA1yLSx7fMK9h55sCoNITfcTBcIRz6GBlvrBZQ KmGRsq/MpqbT12ISg1BLnojyu+bZbuIq6vK1AVoSK1Rm+AHb88LavVJtbBP5XO3c tEelklHy5aWj1s04pxyGUInEXGi926yPDzzDlUEzTE4Tr46cLCbH/FepG1X73AQg FEC1aQDT4Uwc3UBvhYM6lt2F3v5bssWeJkJWgFIcuYhJOOA4yl7BDIW5h0ZmId+S LFuONjknqPM+ZdOLm7f4xxJRf/WaW7jivg/i61BlSaLpEzNJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/W2Jcq/9UOQH8/PZHflTy2shCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZkM2RhZDktYTM5MS0z ZWRiLTk2YTMtYzU5ZTQ0YTAxMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdmizHKZggXhBZ8S2ipl7SlABv+xsyjsycIOFHBY/oY0nlKkAt7Me6F DcURiBjg85ClEtsVTc9cj+YZwtHJgtTj3gFh1MY4vRWQAlUDIkQNt7cBf1ACMYI+ Kg0mG19GFDFQWK9NCOxcQBeQ9CJkrxdsDND7iGzXm8HyN5PgfDw2gUwB476h9Wjg q50+NKU1VCCKwt93S2Tu79w50DIJ20L0j2qaBw8agLtm7RsPqD0O6cYTb2XA0Upx cFYLmuvA9WPIRv5hDgl2mfjRMXgACcxQ6P+QtKSqJKsDnz0vpp9+tQa7NWR/gZov L1siMiiOwSa53nAOVf8HU1UAclkW9XE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:37:17 2026 by rpki-client