$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa File: 21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa (raw, json) Hash identifier: VqrhGCL0s7zRKoaZV5ALNwXXLPJTLegWKTQf88babBQ= Subject key identifier: FB:FF:82:D7:EB:F4:4B:ED:DA:12:BC:81:8B:14:74:20:73:D7:63:09 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584B477C78860BC86B9BC7EA6900 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 54702 IP address blocks: 45.45.197.0/24 maxlen: 24 45.45.198.0/24 maxlen: 24 45.45.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:78:86:0b:c8:6b:9b:c7:ea:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=6936cfd6-4960-49c9-938d-f46693916d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:d9:be:44:4c:ce:97:d9:9c:80:7f:7f:34: ec:8a:b1:f3:1c:e4:bf:47:47:b6:09:b2:49:ec:56: 83:a3:0a:d3:3b:bb:e0:86:1d:4f:f4:c1:e6:fe:83: f9:7c:ab:3d:56:a8:dd:62:da:4c:38:f5:e8:a9:ce: 9d:e3:7a:d2:01:1b:64:87:08:4e:1b:07:ec:bb:64: fd:e8:90:b9:2f:5e:32:26:da:38:e6:f9:92:d1:36: 21:22:8c:67:33:d8:b7:43:51:c1:d5:53:ff:8d:3d: a5:29:e3:75:68:b9:e9:2b:17:be:5b:94:08:ec:3d: c0:f1:28:d0:66:c2:32:ed:bc:c6:9c:37:ad:96:30: d8:55:21:28:6d:51:de:c7:5f:3a:f3:d5:7e:fc:2f: 8d:13:14:0f:08:ab:61:12:02:c8:43:1e:ce:1c:eb: 1d:7e:19:07:b0:97:7d:e3:2e:6d:c5:43:f9:d8:4d: c9:37:3e:cc:af:82:10:30:4c:92:a5:71:92:28:03: 80:11:39:ee:81:66:84:21:a7:c5:ef:b4:42:e5:cc: 7a:60:9e:dc:28:4c:db:3c:5b:0e:84:00:21:2f:2d: 14:5e:44:f1:1c:59:84:70:a2:fd:73:85:a1:f2:95: 9d:73:5d:5b:a2:11:f2:d3:ca:1f:5e:56:c4:a7:f1: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FF:82:D7:EB:F4:4B:ED:DA:12:BC:81:8B:14:74:20:73:D7:63:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.197.0-45.45.199.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:86:67:85:12:c9:00:82:3c:a1:32:db:7e:fa:b6:15:90:92: 0c:40:12:45:ea:a5:0e:bf:64:2d:25:81:e5:40:aa:21:8b:c3: c4:e7:1f:f4:a3:6c:da:95:f9:0b:98:cb:88:0d:d0:77:c5:3a: 48:6f:5a:a7:11:5e:e8:b3:eb:47:9b:1d:f7:ab:21:46:22:f3: 54:f5:03:f9:b7:ac:fd:89:fd:ee:9c:eb:44:2d:bd:b1:98:1a: e6:6e:36:ee:dd:cd:97:24:d9:8f:1a:bc:93:b9:bb:5a:4f:0a: 91:50:bd:44:cf:84:49:ec:e8:f6:d8:7d:0a:2f:5f:20:f1:e2: 2f:6a:5b:28:a8:8e:e0:3f:29:ec:d9:9e:b9:fd:e4:b0:f0:d1: 2d:63:d6:f1:6f:ca:bd:44:d6:6e:d8:9d:b3:c4:9d:3c:5e:e7: 96:4f:6c:78:5a:d9:eb:3f:69:2b:cd:4a:8d:97:27:e6:df:53: a9:96:bd:3b:fb:6b:48:70:f1:cf:04:2d:e5:8d:b7:16:b2:66: 45:3d:6e:fa:01:63:f4:be:57:c0:33:d9:e0:8e:84:26:7d:76: be:ee:9b:ec:14:c4:ca:f7:4c:6d:44:1a:3a:42:db:3e:fb:72: d8:33:46:2c:37:07:e1:df:90:41:63:fa:65:97:2a:b0:79:4f: 4c:f6:b9:d6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtHfHiGC8hrm8fqaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NjkzNmNmZDYtNDk2MC00OWM5LTkzOGQtZjQ2NjkzOTE2ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3jZvkRMzpfZnIB/fzTsirHzHOS/R0e2CbJJ 7FaDowrTO7vghh1P9MHm/oP5fKs9VqjdYtpMOPXoqc6d43rSARtkhwhOGwfsu2T9 6JC5L14yJto45vmS0TYhIoxnM9i3Q1HB1VP/jT2lKeN1aLnpKxe+W5QI7D3A8SjQ ZsIy7bzGnDetljDYVSEobVHex18689V+/C+NExQPCKthEgLIQx7OHOsdfhkHsJd9 4y5txUP52E3JNz7Mr4IQMEySpXGSKAOAETnugWaEIafF77RC5cx6YJ7cKEzbPFsO hAAhLy0UXkTxHFmEcKL9c4Wh8pWdc11bohHy08ofXlbEp/EQ8wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPv/gtfr9Evt2hK8gYsUdCBz12MJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMjE4OThkMDYtZWEwZC0z NGE5LWI0MTUtMGJkZWY0ZGQ5ZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtLcUD BAMtLcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAuIZnhRLJAII8oTLbfvq2FZCSDEASReqlDr9kLSWB5UCq IYvDxOcf9KNs2pX5C5jLiA3Qd8U6SG9apxFe6LPrR5sd96shRiLzVPUD+bes/Yn9 7pzrRC29sZga5m427t3NlyTZjxq8k7m7Wk8KkVC9RM+ESezo9th9Ci9fIPHiL2pb KKiO4D8p7Nmeuf3ksPDRLWPW8W/KvUTWbtids8SdPF7nlk9seFrZ6z9pK81KjZcn 5t9TqZa9O/trSHDxzwQt5Y23FrJmRT1u+gFj9L5XwDPZ4I6EJn12vu6b7BTEyvdM bUQaOkLbPvty2DNGLDcH4d+QQWP6ZZcqsHlPTPa51g== -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:37 2025 by rpki-client