$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/21d3df1a-6e87-35a1-905b-b669e1e05a27.roa File: 21d3df1a-6e87-35a1-905b-b669e1e05a27.roa (raw, json) Hash identifier: y69G9Ts180U9Gp5LM2Ns4Kgg6oKo/DCYxvj4WAQddns= Subject key identifier: 82:87:89:3D:B7:8A:5E:43:A7:83:78:CC:C8:D7:68:16:87:52:49:EC Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584F23C284CFCC83D1BDB2C50580 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/21d3df1a-6e87-35a1-905b-b669e1e05a27.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 14956 IP address blocks: 45.59.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:84:cf:cc:83:d1:bd:b2:c5:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=83544445-f6de-4ac4-b3e6-350292ccb4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:5f:70:ef:49:15:8b:24:11:2f:ed:18:e4: 2e:0d:5f:12:93:2f:b1:ad:d0:b0:db:ac:4d:33:e2: 0e:9b:4b:3e:af:52:da:4b:f8:17:b4:88:ed:fb:f1: 55:92:af:c6:b2:dd:fd:9c:78:20:91:61:1b:9c:7e: 0d:e2:95:33:70:5a:1f:5c:93:11:ba:74:a6:e9:f8: 69:11:b1:b2:72:36:01:65:6a:a8:46:47:c6:f0:c9: 09:3a:22:2f:65:87:f6:f4:47:da:59:18:e6:d3:d2: 63:96:b5:07:f6:8a:ba:f8:01:f5:a8:ee:06:47:69: fa:07:02:91:7f:52:1f:80:8e:de:20:8e:cb:09:61: 49:37:28:19:89:cd:96:95:dc:ef:d7:f3:5b:cc:f9: eb:bc:2c:a7:ee:b2:fb:2f:53:51:07:a8:82:c1:29: 33:20:2e:92:0d:23:84:c2:22:9a:52:b6:dd:31:61: 96:97:b9:ff:94:d1:4d:63:a9:e9:37:52:81:57:14: 43:df:e5:8a:6c:1f:f6:76:22:87:c4:34:d1:63:23: d8:b0:f2:49:0c:ec:05:21:4a:d4:e3:a5:fe:f5:80: 36:6a:05:3d:83:1f:b3:93:18:37:e0:ee:a6:d6:0d: 77:1f:15:58:31:c7:e4:6a:14:a2:00:85:77:16:03: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:87:89:3D:B7:8A:5E:43:A7:83:78:CC:C8:D7:68:16:87:52:49:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/21d3df1a-6e87-35a1-905b-b669e1e05a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8e:e0:00:89:96:40:e2:d2:ce:97:27:9b:61:bb:3a:7a:59: ad:c7:15:cc:1c:60:df:ff:96:d1:43:2d:3c:6c:96:59:80:82: 1d:a9:5a:14:11:7a:d5:0f:ae:77:5b:bf:d8:58:3c:cc:de:7f: f4:a8:f7:17:86:50:67:25:0b:c4:cb:2e:9c:28:22:d5:cc:d6: c3:dd:4b:a7:9e:40:88:f6:98:e9:7f:46:a1:53:88:29:4f:4a: bc:5d:dd:82:47:69:bf:f6:94:9e:27:72:a1:0c:f1:d1:1f:bd: df:fe:14:22:27:60:16:a7:55:37:c2:8e:f4:da:c0:3c:86:53: 4e:c1:8c:94:fa:af:3b:77:14:44:47:9c:37:4b:62:6f:7b:9a: 95:51:87:6f:5b:99:3b:0b:42:14:94:66:6c:43:86:43:2a:c6: a6:98:b2:f0:5a:ec:6f:df:b3:0e:7b:21:ce:ac:ec:e9:98:9d: 24:11:1b:b4:0d:3f:7d:d6:fe:2f:f0:0d:05:0d:b6:24:26:69: 8e:96:a9:f8:96:c6:98:55:64:6a:cd:75:a9:df:a9:74:26:93: e0:71:10:88:1a:02:e5:d1:a7:c5:4b:25:88:0c:d3:8f:5d:67: 9a:a4:b3:62:27:e9:c5:e2:ff:4a:a9:10:2e:89:59:f8:0b:0c: 8b:1a:2e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwoTPzIPRvbLFBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ODM1NDQ0NDUtZjZkZS00YWM0LWIzZTYtMzUwMjkyY2NiNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRlfcO9JFYskES/tGOQuDV8Sky+xrdCw26xN M+IOm0s+r1LaS/gXtIjt+/FVkq/Gst39nHggkWEbnH4N4pUzcFofXJMRunSm6fhp EbGycjYBZWqoRkfG8MkJOiIvZYf29EfaWRjm09JjlrUH9oq6+AH1qO4GR2n6BwKR f1IfgI7eII7LCWFJNygZic2Wldzv1/NbzPnrvCyn7rL7L1NRB6iCwSkzIC6SDSOE wiKaUrbdMWGWl7n/lNFNY6npN1KBVxRD3+WKbB/2diKHxDTRYyPYsPJJDOwFIUrU 46X+9YA2agU9gx+zkxg34O6m1g13HxVYMcfkahSiAIV3FgPhvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKHiT23il5Dp4N4zMjXaBaHUknsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMjFkM2RmMWEtNmU4Ny0z NWExLTkwNWItYjY2OWUxZTA1YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2O4ACJlkDi0s6XJ5thuzp6Wa3HFcwcYN//ltFDLTxsllmAgh2pWhQR etUPrndbv9hYPMzef/So9xeGUGclC8TLLpwoItXM1sPdS6eeQIj2mOl/RqFTiClP Srxd3YJHab/2lJ4ncqEM8dEfvd/+FCInYBanVTfCjvTawDyGU07BjJT6rzt3FERH nDdLYm97mpVRh29bmTsLQhSUZmxDhkMqxqaYsvBa7G/fsw57Ic6s7OmYnSQRG7QN P33W/i/wDQUNtiQmaY6WqfiWxphVZGrNdanfqXQmk+BxEIgaAuXRp8VLJYgM049d Z5qks2In6cXi/0qpEC6JWfgLDIsaLv4= -----END CERTIFICATE-----Generated at Sun Sep 27 03:49:08 2026 by rpki-client