$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3438322a-72cd-3161-8efa-f31227009d22.roa File: 3438322a-72cd-3161-8efa-f31227009d22.roa (raw, json) Hash identifier: SqkU1CdqSanfpeE14YBCxbp7gMpGjf0AuiBiGJKBUX0= Subject key identifier: C0:F1:0D:05:5B:C7:99:75:29:81:7D:47:C2:90:A5:85:E7:E5:E9:C7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ADC00FB7F1901B93530561B40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3438322a-72cd-3161-8efa-f31227009d22.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 45.59.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:fb:7f:19:01:b9:35:30:56:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=d9eff820-037b-4390-85af-80518d420411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:60:1a:b1:1c:07:e9:7a:18:b4:ad:51:4a: b7:55:7b:6c:e3:2b:72:6b:3c:e0:76:4a:55:bf:12: 0b:9c:61:e0:1e:5a:8d:c5:90:8a:19:22:ef:15:34: ce:d7:62:9f:35:d6:b1:db:33:53:93:61:25:32:eb: c6:a4:ac:16:03:a2:7f:66:ca:4b:ec:2c:28:d7:c8: 25:8a:4b:e8:b4:68:8c:61:f3:43:3a:aa:04:f2:bc: bf:2a:66:a7:a1:a7:83:72:0c:fe:f2:08:52:b3:b6: 3d:e0:bc:2a:74:ba:4f:34:5d:67:72:a3:af:89:27: 09:9a:40:54:2e:66:3b:b0:c8:5d:ce:8c:3b:b7:0d: 17:40:5c:3f:f7:39:94:0c:e6:15:76:6e:53:ce:5b: ff:05:ac:89:84:cb:48:47:3a:e1:ee:31:bb:5f:92: 58:a3:93:9d:20:55:3e:bf:72:0d:c6:7a:56:0e:5d: 54:6c:e8:df:0c:54:84:45:92:5c:49:e3:8f:c8:f7: 35:b0:71:93:94:93:28:dd:03:5f:68:c6:c7:db:55: 2e:d5:2b:d2:b3:60:a3:07:d7:70:c1:07:31:aa:49: 06:0f:de:03:4c:49:ba:e8:12:15:17:9c:23:c2:9a: d2:fd:92:0f:d3:c0:fd:78:24:bc:2a:fc:90:5f:7e: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F1:0D:05:5B:C7:99:75:29:81:7D:47:C2:90:A5:85:E7:E5:E9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3438322a-72cd-3161-8efa-f31227009d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bc:8d:45:61:0f:a6:49:4a:0e:2b:09:19:67:14:e2:d8:dc: a3:07:a4:8d:f5:f3:c0:60:7d:73:36:a9:06:00:77:cf:37:b1: 2e:16:6e:cd:ac:d8:fd:e2:03:ed:0a:08:e0:48:ec:2b:63:ee: f2:9c:f6:b8:ae:d7:f4:a5:14:2d:7a:fa:97:80:05:52:16:ed: 6b:1f:c8:4c:4b:d1:f6:68:f0:b6:3d:db:47:8b:91:b7:f7:f0: 92:2c:e1:62:9f:80:34:69:0e:b9:1d:e5:25:14:12:fd:ff:f2: 8e:15:11:0a:00:cc:c8:6c:c8:0e:0a:80:98:97:47:e0:5d:f2: 9b:df:0e:4f:ac:a6:2c:c9:16:cb:fd:55:ce:a2:d0:4e:36:df: 1e:48:95:00:fb:28:0e:d4:17:c9:18:60:74:a2:c9:a7:af:cc: 85:39:36:6c:7c:76:1b:d5:14:05:ed:de:52:35:0b:fd:9d:2a: ff:d0:65:fd:25:be:c1:2b:be:35:ec:0e:8b:ce:3d:dd:2a:b7: 1b:4e:90:20:57:43:bf:a2:70:0a:13:f1:61:e1:c6:ea:c8:24: 98:5e:8e:93:2d:e0:40:a4:ad:6c:81:11:2a:eb:bc:79:cb:42: 9e:ec:5f:4d:e8:46:09:18:af:9f:5b:ec:15:b0:9f:1c:3e:9a: 58:00:2f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAPt/GQG5NTBWG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk ZDllZmY4MjAtMDM3Yi00MzkwLTg1YWYtODA1MThkNDIwNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0flgGrEcB+l6GLStUUq3VXts4ytyazzgdkpV vxILnGHgHlqNxZCKGSLvFTTO12KfNdax2zNTk2ElMuvGpKwWA6J/ZspL7Cwo18gl ikvotGiMYfNDOqoE8ry/KmanoaeDcgz+8ghSs7Y94LwqdLpPNF1ncqOviScJmkBU LmY7sMhdzow7tw0XQFw/9zmUDOYVdm5Tzlv/BayJhMtIRzrh7jG7X5JYo5OdIFU+ v3INxnpWDl1UbOjfDFSERZJcSeOPyPc1sHGTlJMo3QNfaMbH21Uu1SvSs2CjB9dw wQcxqkkGD94DTEm66BIVF5wjwprS/ZIP08D9eCS8KvyQX34oFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDxDQVbx5l1KYF9R8KQpYXn5enHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzQzODMyMmEtNzJjZC0z MTYxLThlZmEtZjMxMjI3MDA5ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu8jUVhD6ZJSg4rCRlnFOLY3KMHpI3188BgfXM2qQYAd883sS4Wbs2s 2P3iA+0KCOBI7Ctj7vKc9riu1/SlFC16+peABVIW7WsfyExL0fZo8LY920eLkbf3 8JIs4WKfgDRpDrkd5SUUEv3/8o4VEQoAzMhsyA4KgJiXR+Bd8pvfDk+spizJFsv9 Vc6i0E423x5IlQD7KA7UF8kYYHSiyaevzIU5Nmx8dhvVFAXt3lI1C/2dKv/QZf0l vsErvjXsDovOPd0qtxtOkCBXQ7+icAoT8WHhxurIJJhejpMt4ECkrWyBESrrvHnL Qp7sX03oRgkYr59b7BWwnxw+mlgAL1M= -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:12 2025 by rpki-client