$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa File: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (raw, json) Hash identifier: 5oELfjjJIu2GfARWzIZMSqnipOINrqZlxvTbtJG+Jsg= Subject key identifier: 5E:D1:BF:F5:7F:20:23:E6:5F:8A:20:22:11:5B:55:F8:9A:0C:92:36 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F4328584F093CDD9E249EB412ACA189C0 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 399769 IP address blocks: 45.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dd:9e:24:9e:b4:12:ac:a1:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=b3e8357d-63b9-4ac1-9eac-410d87e318ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:67:05:4a:91:20:38:50:a2:e4:f6:89:2c:bf: de:c3:fd:78:12:da:ae:ab:47:a9:45:50:f1:c2:e9: ac:3b:3f:64:a8:75:e7:c5:02:73:a3:10:1d:fc:0b: 36:76:48:ba:ea:cd:e0:c9:a5:2f:6e:c8:c3:37:20: d8:85:23:e3:68:98:fa:48:cf:3c:eb:ae:3a:b8:d5: c7:43:d0:b1:9b:7d:a4:c2:8a:d4:9f:66:a3:75:cc: de:ca:a4:50:9e:7d:e6:f4:c7:11:ca:42:88:2b:d2: 67:4e:3f:0f:68:85:63:1c:7c:5c:d0:57:d8:bf:a0: 12:83:d4:5c:57:ba:51:c7:fb:2f:b7:d4:0f:29:3a: 1d:b7:f3:42:f4:4f:13:59:39:74:71:77:b6:04:62: 70:60:99:94:46:f9:1b:83:90:52:aa:d4:67:88:07: 94:3c:a9:f5:6d:6b:bf:9d:7f:b1:d2:ea:a8:d4:2b: 45:e0:9a:00:08:01:de:09:3e:d2:f3:5c:e5:61:12: 40:42:d4:d6:1f:ac:6e:d6:8d:90:c9:42:fc:df:88: c2:c5:65:fc:e6:65:9f:81:4e:84:d6:3c:8f:f3:0f: ed:14:d4:88:34:d0:3b:12:23:d9:0f:bb:20:e4:c9: a6:50:14:99:76:44:15:f2:99:23:40:8f:fb:2e:99: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D1:BF:F5:7F:20:23:E6:5F:8A:20:22:11:5B:55:F8:9A:0C:92:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/5e00859f-bf20-388d-a400-94e4c09e3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7b:1d:94:e1:53:16:33:e5:98:29:bb:07:fe:0d:43:48:5a: 52:d2:c5:fd:99:dc:d7:3c:8b:09:5c:8a:59:74:7d:2e:22:89: da:99:58:d8:0e:04:43:28:33:c4:3e:8d:60:f5:37:2b:b0:97: c3:1b:4c:7e:24:e0:3d:a4:41:31:f3:c0:27:28:b7:48:6a:1d: 5a:a4:eb:0b:c3:aa:84:2c:49:0d:43:f3:eb:0a:fd:81:70:6c: ed:ec:31:89:c9:98:40:fb:64:f1:f9:f8:c4:40:4c:be:f8:0e: 1d:a0:82:81:dd:50:a5:08:c3:9c:62:52:bd:44:89:44:23:16: 91:9c:6f:44:3e:ff:7b:5d:87:3f:ff:f2:d5:99:e0:df:39:d4: 93:a5:ea:81:d2:a3:5f:4d:31:ad:67:47:43:c1:6f:8e:3a:d2: 5f:35:81:ac:b8:56:cd:bd:8b:64:a6:a5:6f:21:30:0d:2d:4b: 3d:ba:cf:f8:6e:b8:88:35:69:de:73:aa:8b:e2:37:c0:a3:c6: b5:7f:7f:af:88:1e:fb:ff:57:75:45:a2:ce:a6:1d:95:97:9e: 23:06:9b:f8:e0:e0:69:67:86:c8:5c:88:62:11:2d:2e:fa:ed: fb:fc:21:3b:f5:2a:2b:ad:1a:89:36:7d:77:a2:6e:92:e6:c7: ff:43:51:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN2eJJ60EqyhicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YjNlODM1N2QtNjNiOS00YWMxLTllYWMtNDEwZDg3ZTMxOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGcFSpEgOFCi5PaJLL/ew/14Etquq0epRVDx wumsOz9kqHXnxQJzoxAd/As2dki66s3gyaUvbsjDNyDYhSPjaJj6SM886646uNXH Q9Cxm32kworUn2ajdczeyqRQnn3m9McRykKIK9JnTj8PaIVjHHxc0FfYv6ASg9Rc V7pRx/svt9QPKTodt/NC9E8TWTl0cXe2BGJwYJmURvkbg5BSqtRniAeUPKn1bWu/ nX+x0uqo1CtF4JoACAHeCT7S81zlYRJAQtTWH6xu1o2QyUL834jCxWX85mWfgU6E 1jyP8w/tFNSINNA7EiPZD7sg5MmmUBSZdkQV8pkjQI/7LplQSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7Rv/V/ICPmX4ogIhFbVfiaDJI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvNWUwMDg1OWYtYmYyMC0z ODhkLWE0MDAtOTRlNGMwOWUzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLS2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF7HZThUxYz5Zgpuwf+DUNIWlLSxf2Z3Nc8iwlcill0fS4iidqZWNgO BEMoM8Q+jWD1Nyuwl8MbTH4k4D2kQTHzwCcot0hqHVqk6wvDqoQsSQ1D8+sK/YFw bO3sMYnJmED7ZPH5+MRATL74Dh2ggoHdUKUIw5xiUr1EiUQjFpGcb0Q+/3tdhz// 8tWZ4N851JOl6oHSo19NMa1nR0PBb4460l81gay4Vs29i2SmpW8hMA0tSz26z/hu uIg1ad5zqoviN8CjxrV/f6+IHvv/V3VFos6mHZWXniMGm/jg4GlnhshciGIRLS76 7fv8ITv1KiutGok2fXeibpLmx/9DUQQ= -----END CERTIFICATE-----Generated at Sat Oct 10 12:54:42 2026 by rpki-client