$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa File: 38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa (raw, json) Hash identifier: 0H2z4fFeS97gcwLQeXWPhoVZGkOKSC1t1jGjhn/m3SI= Subject key identifier: 9A:18:8F:9A:02:1B:80:F5:3F:E3:38:65:9F:07:4E:0D:E1:37:81:81 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584E043604362D65D27C2B4E7D40 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 1100 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:04:36:2d:65:d2:7c:2b:4e:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=5943c69d-4b7b-4a98-a94f-8ee617900149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:a7:a8:9b:d7:ec:df:83:f1:0a:a7:0b:81: 73:67:dd:81:0b:78:e4:0f:69:8a:d2:a6:e5:b5:e3: 1f:cb:42:3f:36:0a:c8:f3:7d:de:58:3c:10:00:58: d9:12:d3:5d:de:4f:0b:7d:2d:a8:fd:0b:3d:b0:0e: 0e:5f:1e:fb:7e:a9:2d:44:4d:6a:20:60:92:8b:fb: d5:26:56:cf:5f:6b:2a:2d:4d:8a:8e:81:ce:a7:2e: ac:93:f3:65:36:ca:f0:e0:68:7d:fc:8c:79:1c:23: b8:76:d9:c3:84:d5:22:6f:59:ba:9d:d1:ad:a4:db: 71:c0:01:7b:64:f1:a5:ec:2b:28:71:42:5a:af:74: f6:00:e4:db:ad:9f:2e:20:4f:26:60:c8:52:5e:74: 46:ba:1e:c9:d6:32:73:59:7f:f6:90:14:ca:d0:9e: 38:ca:2a:e5:45:2b:0f:f4:83:77:84:68:38:32:e4: b8:26:b5:13:5b:e0:6f:3a:18:be:92:59:3f:3a:fa: eb:a9:58:78:6a:6e:6a:15:6b:94:c7:e2:73:70:fe: ef:1f:7a:92:f9:19:b4:3c:4c:b1:cf:46:8f:36:e5: 53:f1:3c:3a:76:50:39:d4:66:36:6c:cf:e1:6e:51: 28:72:5f:79:fe:f5:72:b4:31:27:d3:4e:28:c5:36: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:18:8F:9A:02:1B:80:F5:3F:E3:38:65:9F:07:4E:0D:E1:37:81:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:35:f4:97:85:21:d9:c8:78:d1:3e:7d:47:4e:30:1b:24:bf: 8a:1e:f3:ec:fe:fa:e3:11:2a:59:b6:07:fa:2a:77:b4:4f:64: b4:a6:ca:05:61:6c:14:0d:06:b6:9a:3e:06:3d:a5:c0:fd:31: 49:55:6b:46:63:3a:6a:54:5a:cc:58:cd:59:43:c8:6b:b8:67: 54:21:5d:27:2b:85:70:d8:2c:b4:21:2b:a9:28:50:91:8d:cd: cd:de:77:03:ce:21:d6:03:1b:a9:6d:92:ef:11:4a:a3:22:36: 94:30:26:00:52:c1:f6:4d:06:af:91:bc:9b:b4:36:7f:ad:af: c3:18:c3:58:68:8c:8d:3f:ac:ec:73:97:90:64:34:b1:d4:a9: f2:3d:b5:ba:a9:35:96:c6:cb:c9:e2:c6:e8:f7:6a:4f:04:86: 1b:e4:00:1b:19:6e:30:89:fc:56:f9:ad:f8:f1:01:5a:c3:5a: f1:1a:6b:88:2e:c7:75:0f:56:2b:9f:aa:a8:be:79:6c:c7:55: 54:86:86:6a:42:9b:18:67:fa:4e:18:41:6e:c2:9b:3b:a9:24: be:10:66:b2:21:ab:7c:4d:bc:0c:a8:45:7d:bd:6c:ca:9c:ba: 69:3d:8b:48:ef:6c:27:35:62:72:d7:73:51:eb:6f:a6:d3:f4: fc:11:b6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgQ2LWXSfCtOfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NTk0M2M2OWQtNGI3Yi00YTk4LWE5NGYtOGVlNjE3OTAwMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cqnqJvX7N+D8QqnC4FzZ92BC3jkD2mK0qbl teMfy0I/NgrI833eWDwQAFjZEtNd3k8LfS2o/Qs9sA4OXx77fqktRE1qIGCSi/vV JlbPX2sqLU2KjoHOpy6sk/NlNsrw4Gh9/Ix5HCO4dtnDhNUib1m6ndGtpNtxwAF7 ZPGl7CsocUJar3T2AOTbrZ8uIE8mYMhSXnRGuh7J1jJzWX/2kBTK0J44yirlRSsP 9IN3hGg4MuS4JrUTW+BvOhi+klk/OvrrqVh4am5qFWuUx+JzcP7vH3qS+Rm0PEyx z0aPNuVT8Tw6dlA51GY2bM/hblEocl95/vVytDEn004oxTYk5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoYj5oCG4D1P+M4ZZ8HTg3hN4GBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMzhlMGNkNjItNWI5Yy0z NWY4LWFhNDctZTE0YWFkOTUwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG819JeFIdnIeNE+fUdOMBskv4oe8+z++uMRKlm2B/oqd7RPZLSmygVh bBQNBraaPgY9pcD9MUlVa0ZjOmpUWsxYzVlDyGu4Z1QhXScrhXDYLLQhK6koUJGN zc3edwPOIdYDG6ltku8RSqMiNpQwJgBSwfZNBq+RvJu0Nn+tr8MYw1hojI0/rOxz l5BkNLHUqfI9tbqpNZbGy8nixuj3ak8EhhvkABsZbjCJ/Fb5rfjxAVrDWvEaa4gu x3UPViufqqi+eWzHVVSGhmpCmxhn+k4YQW7CmzupJL4QZrIhq3xNvAyoRX29bMqc umk9i0jvbCc1YnLXc1Hrb6bT9PwRtoA= -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:36 2026 by rpki-client