$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa File: b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa (raw, json) Hash identifier: /mkEBJSj/gUxHF2T8dV8jMG85kY+ggwdIEpteggcZkg= Subject key identifier: DE:37:59:99:CD:CD:8B:8E:47:31:EF:8B:9B:DB:2D:D7:65:31:48:BF Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584F4973DD39F2CCCF02C5ACA6C0 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 210574 IP address blocks: 45.59.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:dd:39:f2:cc:cf:02:c5:ac:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5bad94d2-a5e3-4150-92b6-32c589612593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:e1:e8:00:f6:19:5c:52:b5:78:7f:1b:ca: 51:02:6d:4b:c8:e0:e8:40:10:83:f1:4f:0a:63:70: 25:71:78:f0:fd:a4:f7:58:6a:b0:e3:09:0b:b5:e7: 05:56:87:76:1f:a4:fb:4c:b3:b9:bb:87:58:6f:3a: 19:dd:3a:7b:a5:c5:06:5e:e8:75:8b:68:3e:1c:c1: 0c:be:87:ea:bd:a3:e9:55:78:b2:d3:42:a6:47:ca: 0d:b6:41:26:c7:97:b3:e1:d2:fe:4c:03:82:d9:99: 27:a3:18:5c:27:7d:6d:a9:da:7c:26:eb:75:7e:78: 02:69:80:49:50:19:bb:6e:9e:19:2a:6c:f1:5e:52: 3e:45:3b:1e:8e:64:4f:e1:5c:89:0a:42:97:4f:82: a9:40:03:52:63:0d:c4:92:a2:df:e3:23:5e:41:f8: f6:2b:1d:31:6f:40:80:fa:7e:13:a0:d8:e7:33:7b: 63:dd:2f:06:4b:c5:f8:e6:05:e7:fa:5d:ea:ff:c9: d7:46:25:b6:0f:93:63:37:fe:a8:e0:77:3e:15:a6: 71:7a:ae:e5:80:16:36:a5:25:89:2a:c9:1a:15:e6: 0e:fd:7c:2c:ed:ec:60:04:59:a2:e3:1a:d9:cd:b9: e3:e9:3d:bc:de:7e:88:ca:65:a9:c8:10:0a:e5:61: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:37:59:99:CD:CD:8B:8E:47:31:EF:8B:9B:DB:2D:D7:65:31:48:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c7:d2:f4:2d:32:f5:ab:45:98:c2:60:3c:7e:bf:80:7e:d7: 24:d7:b6:0d:b9:11:d2:46:96:88:43:27:a6:f7:f6:2a:39:0a: dd:6b:c1:ab:5f:89:88:7c:9b:6a:6f:96:36:f3:db:9b:38:b4: 3f:a6:35:03:b5:65:86:34:83:53:8e:0a:3a:03:82:e9:1d:be: 55:18:b6:96:75:5a:3a:48:58:0a:96:e7:7d:10:6c:6f:2f:82: ed:41:fb:58:f8:d7:2b:f7:3a:d9:65:34:c7:e6:e6:6d:cc:e2: 74:5f:ce:41:6f:81:0c:95:48:8e:e3:22:b7:5e:18:40:da:53: 63:bb:57:94:e8:ae:5b:b1:a5:14:fc:2a:e5:2c:6b:3d:ff:fa: 77:75:aa:30:4e:29:6c:12:be:78:03:ec:6b:69:df:3c:6a:28: ae:43:bb:44:e1:6e:7a:55:e3:c3:b9:07:2d:00:5f:a2:0f:4a: ab:3d:c3:80:d9:1f:8c:59:24:8c:d7:66:43:08:07:a9:1a:c7: 39:ba:ab:f2:b2:f1:5c:cd:b9:f4:55:f3:c1:2e:08:c2:a0:1d: bd:f7:b8:80:b3:0c:e7:ee:a2:73:0d:3b:d4:8f:a0:fb:27:c5: 3a:82:59:6a:35:bd:9f:5f:ff:6a:35:95:1a:f3:3a:4b:24:28: 3f:c9:b0:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9058szPAsWspsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWJhZDk0ZDItYTVlMy00MTUwLTkyYjYtMzJjNTg5NjEyNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35/h6AD2GVxStXh/G8pRAm1LyODoQBCD8U8K Y3AlcXjw/aT3WGqw4wkLtecFVod2H6T7TLO5u4dYbzoZ3Tp7pcUGXuh1i2g+HMEM vofqvaPpVXiy00KmR8oNtkEmx5ez4dL+TAOC2ZknoxhcJ31tqdp8Jut1fngCaYBJ UBm7bp4ZKmzxXlI+RTsejmRP4VyJCkKXT4KpQANSYw3EkqLf4yNeQfj2Kx0xb0CA +n4ToNjnM3tj3S8GS8X45gXn+l3q/8nXRiW2D5NjN/6o4Hc+FaZxeq7lgBY2pSWJ KskaFeYO/Xws7exgBFmi4xrZzbnj6T283n6IymWpyBAK5WEehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN43WZnNzYuORzHvi5vbLddlMUi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYjUwN2EyZjQtOTdiNi0z MTg5LTg3MGItN2M2M2ZkM2EyM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnH0vQtMvWrRZjCYDx+v4B+1yTXtg25EdJGlohDJ6b39io5Ct1rwatf iYh8m2pvljbz25s4tD+mNQO1ZYY0g1OOCjoDgukdvlUYtpZ1WjpIWAqW530QbG8v gu1B+1j41yv3OtllNMfm5m3M4nRfzkFvgQyVSI7jIrdeGEDaU2O7V5TorluxpRT8 KuUsaz3/+nd1qjBOKWwSvngD7Gtp3zxqKK5Du0ThbnpV48O5By0AX6IPSqs9w4DZ H4xZJIzXZkMIB6kaxzm6q/Ky8VzNufRV88EuCMKgHb33uICzDOfuonMNO9SPoPsn xTqCWWo1vZ9f/2o1lRrzOkskKD/JsOk= -----END CERTIFICATE-----Generated at Tue Sep 29 01:47:01 2026 by rpki-client