$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa File: 7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa (raw, json) Hash identifier: OSteYs29EBmn02bZE8Totq6E4Nt5DIZZakTdeVO4XKg= Subject key identifier: 95:52:3A:0A:2A:E1:A2:B4:D8:72:CC:38:61:4F:B7:1B:78:16:D1:20 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584D3F64D9D04E59A5B55C53F7C0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 398395 IP address blocks: 45.59.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d9:d0:4e:59:a5:b5:5c:53:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=b18bfb3a-74f2-4da0-b57c-a8989a6b7007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:60:05:d7:96:db:58:a7:26:31:91:84:ab: 70:83:3f:6b:41:f6:99:78:0d:87:76:06:05:74:98: 9a:58:fe:0c:ac:53:f3:eb:e8:18:2d:27:12:a0:72: bd:8c:29:74:75:ac:d5:a5:4d:4e:cc:c8:e5:94:59: cc:7a:15:bf:2f:8b:72:d1:12:e1:79:1b:b9:8d:63: 09:46:30:4f:77:cf:b8:f3:3d:4c:8c:29:6a:ab:13: c4:74:f8:d5:c4:4a:e6:71:13:b1:fb:ef:11:45:1a: c2:51:76:22:ad:2f:be:c6:0b:b5:a8:5b:75:0a:4a: a6:4f:60:d9:7c:d5:99:13:db:eb:7a:0d:bd:99:dd: f0:8a:6e:21:3f:0f:58:bb:74:bb:b4:63:1d:fe:b1: fe:33:2e:70:35:2d:da:a2:30:e4:95:54:c4:65:de: b6:b9:5b:2d:92:d6:34:f7:eb:bb:5f:4b:59:05:16: c2:4c:a0:65:17:51:50:34:a6:10:5a:ff:30:9a:c0: 73:2b:f9:81:8e:b7:c0:fc:21:fb:3f:93:47:c4:bc: 78:19:ce:b4:ba:be:0d:2c:07:e4:fb:63:ff:78:dd: 2a:4c:c3:36:1a:eb:7a:c0:5e:b0:7b:aa:89:ee:22: 68:52:d2:08:3b:a8:b5:2e:ce:a0:ce:5c:15:7d:db: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:52:3A:0A:2A:E1:A2:B4:D8:72:CC:38:61:4F:B7:1B:78:16:D1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7d8ccc90-1ec6-3aa0-bfa1-28ccabff46a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:53:6f:ee:6c:41:dd:dc:60:fe:1a:ac:fd:a1:73:1f:68:4e: ec:67:58:d6:b6:14:24:29:a0:2c:ed:68:6b:d7:a6:89:14:72: 2d:40:fa:a5:16:86:60:44:4e:ce:2e:54:00:9c:37:68:3b:75: a9:0a:92:23:ce:2c:c8:26:79:7b:0a:a3:e9:29:c1:9f:f8:fe: 50:5d:bf:d5:a6:b2:27:d8:0f:c4:1c:cd:c1:87:f9:8c:09:27: e1:d1:ba:3e:25:f4:22:80:76:c7:75:da:c3:af:2b:67:79:fc: 2b:80:55:e3:44:0c:d1:e7:7f:8d:9b:68:d3:71:04:29:32:07: 8f:28:b2:fa:4f:c6:e3:f4:97:45:d9:3b:9a:fb:da:26:de:c8: 10:2b:f1:24:62:63:4f:48:59:8a:5e:12:84:ad:83:91:48:f7: 95:46:df:45:3d:70:7f:fd:9b:cd:47:80:8c:2e:91:27:2a:14: b4:3f:b5:1a:15:d3:b2:cf:5c:95:95:92:6e:ee:35:93:48:97: aa:43:4f:9c:09:7f:3d:f2:ff:de:ac:81:a1:df:02:d7:39:92: db:31:65:b3:13:77:f9:c5:8b:df:cb:da:ce:ef:42:71:c6:aa: fb:1e:d7:7c:42:e7:ae:a6:10:f5:da:68:b6:02:a8:f5:97:0e: a1:fa:29:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNnQTlmltVxT98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YjE4YmZiM2EtNzRmMi00ZGEwLWI1N2MtYTg5ODlhNmI3MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj25gBdeW21inJjGRhKtwgz9rQfaZeA2HdgYF dJiaWP4MrFPz6+gYLScSoHK9jCl0dazVpU1OzMjllFnMehW/L4ty0RLheRu5jWMJ RjBPd8+48z1MjClqqxPEdPjVxErmcROx++8RRRrCUXYirS++xgu1qFt1CkqmT2DZ fNWZE9vreg29md3wim4hPw9Yu3S7tGMd/rH+My5wNS3aojDklVTEZd62uVstktY0 9+u7X0tZBRbCTKBlF1FQNKYQWv8wmsBzK/mBjrfA/CH7P5NHxLx4Gc60ur4NLAfk +2P/eN0qTMM2Gut6wF6we6qJ7iJoUtIIO6i1Ls6gzlwVfdvNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVSOgoq4aK02HLMOGFPtxt4FtEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvN2Q4Y2NjOTAtMWVjNi0z YWEwLWJmYTEtMjhjY2FiZmY0NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRTb+5sQd3cYP4arP2hcx9oTuxnWNa2FCQpoCztaGvXpokUci1A+qUW hmBETs4uVACcN2g7dakKkiPOLMgmeXsKo+kpwZ/4/lBdv9WmsifYD8QczcGH+YwJ J+HRuj4l9CKAdsd12sOvK2d5/CuAVeNEDNHnf42baNNxBCkyB48osvpPxuP0l0XZ O5r72ibeyBAr8SRiY09IWYpeEoStg5FI95VG30U9cH/9m81HgIwukScqFLQ/tRoV 07LPXJWVkm7uNZNIl6pDT5wJfz3y/96sgaHfAtc5ktsxZbMTd/nFi9/L2s7vQnHG qvse13xC566mEPXaaLYCqPWXDqH6KcA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:06 2026 by rpki-client