$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/58a3c86b-c67b-3a4e-8a4a-e592cf0d2845.roa File: 58a3c86b-c67b-3a4e-8a4a-e592cf0d2845.roa (raw, json) Hash identifier: VwhuwTz+aft42t0ba/oh0qwf35Qyn1tXrBPDoSqRnXg= Subject key identifier: 11:17:F1:19:0B:AD:D3:D6:72:25:1C:47:44:54:E7:6E:24:CE:C4:8F Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584D93254BA77F9DCB04B48360C0 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/58a3c86b-c67b-3a4e-8a4a-e592cf0d2845.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 14956 IP address blocks: 45.59.118.0/24 maxlen: 24 45.59.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4b:a7:7f:9d:cb:04:b4:83:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=2737186a-33ac-401c-ba31-3a9be758ed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:c4:02:5c:fa:11:66:03:18:65:ae:31:3e: 9b:10:e5:17:79:d4:d7:42:98:19:33:a8:2a:f2:db: 20:69:4d:83:13:d7:c4:71:43:7c:7a:e4:9c:74:4b: 17:c0:36:f4:35:e2:84:07:b0:0a:c2:45:d3:a9:ac: 38:c2:f7:48:89:99:cc:a3:e5:70:0a:1d:92:2c:d0: fb:9f:7e:1f:40:73:a6:c4:09:84:ac:35:0d:34:97: a1:13:cc:fd:08:c6:73:9f:c1:e8:39:21:d8:fb:dd: 83:83:4d:9d:23:0b:4b:09:cf:fc:55:c3:82:5a:76: 89:bd:2d:a9:68:dc:18:83:d2:b3:dd:7a:50:40:ee: 17:48:6e:75:9b:b2:fe:37:22:26:1f:c5:cb:61:89: 9d:5f:b6:23:f5:0a:19:67:6c:cc:c9:fc:65:59:70: 5f:4a:b0:fa:22:11:ae:f5:4b:25:b2:50:40:65:36: 90:70:77:ac:f5:c3:66:47:2e:13:65:21:d1:c5:b0: 68:24:40:e0:61:ed:15:e0:39:35:a8:39:73:ba:0e: 30:6a:2b:a2:f9:df:71:83:20:9e:ce:eb:a6:e9:eb: 7c:13:3a:10:61:d1:f2:d5:63:a8:52:70:53:7c:de: c5:8e:10:48:36:e5:d2:eb:e1:8b:88:b6:d7:c9:34: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:F1:19:0B:AD:D3:D6:72:25:1C:47:44:54:E7:6E:24:CE:C4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/58a3c86b-c67b-3a4e-8a4a-e592cf0d2845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.118.0/24 45.59.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0a:68:15:9a:40:2a:47:52:e0:4e:0f:0f:80:93:9c:97:92: 89:17:82:d5:1e:b3:95:2d:1a:d2:a4:99:81:a5:61:b0:1f:83: c6:d3:ef:21:2a:d7:8b:47:45:72:1e:c2:1d:b8:0a:f2:72:73: 74:d4:a3:c8:41:b2:0f:22:cb:bd:b4:c6:8b:4a:da:6a:88:6e: 3d:a1:6a:50:24:b2:77:37:60:53:4b:5d:14:b6:37:4d:13:f2: a4:a1:e4:bb:45:d4:96:9f:35:c3:20:2e:08:0c:2e:ea:93:a6: a5:1f:ed:2c:a8:c8:4c:a3:ae:b9:1e:d9:4c:8d:9b:41:13:49: 94:cf:0f:6b:f8:18:18:18:d7:b3:0c:62:7c:0d:f2:e0:27:92: 3d:4b:c9:d2:cc:7c:21:af:c6:f1:62:06:03:b1:46:66:2e:1c: 7b:cd:4d:51:fe:0c:2d:6f:c0:92:0b:4e:0f:80:9d:d1:d8:68: fa:9e:e0:4d:b0:8c:5c:79:3e:84:dd:9b:4a:9a:4a:63:0d:6f: d3:33:72:a8:c6:0b:d5:f2:f0:e1:15:5e:bd:eb:4e:a3:b9:99: ae:71:e7:0e:fc:45:b2:1a:6e:ce:45:52:94:35:29:f2:92:8e: 20:58:f0:80:32:4c:01:73:27:95:6d:66:8b:5e:39:e1:40:35: f5:b9:c1:3e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2TJUunf53LBLSDYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MjczNzE4NmEtMzNhYy00MDFjLWJhMzEtM2E5YmU3NThlZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vnEAlz6EWYDGGWuMT6bEOUXedTXQpgZM6gq 8tsgaU2DE9fEcUN8euScdEsXwDb0NeKEB7AKwkXTqaw4wvdIiZnMo+VwCh2SLND7 n34fQHOmxAmErDUNNJehE8z9CMZzn8HoOSHY+92Dg02dIwtLCc/8VcOCWnaJvS2p aNwYg9Kz3XpQQO4XSG51m7L+NyImH8XLYYmdX7Yj9QoZZ2zMyfxlWXBfSrD6IhGu 9UslslBAZTaQcHes9cNmRy4TZSHRxbBoJEDgYe0V4Dk1qDlzug4waiui+d9xgyCe zuum6et8EzoQYdHy1WOoUnBTfN7FjhBINuXS6+GLiLbXyTQmOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBEX8RkLrdPWciUcR0RU524kzsSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvNThhM2M4NmItYzY3Yi0z YTRlLThhNGEtZTU5MmNmMGQyODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALTt2AwQA LTt4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF4KaBWaQCpHUuBODw+Ak5yXkokXgtUes5UtGtKkmYGlYbAf g8bT7yEq14tHRXIewh24CvJyc3TUo8hBsg8iy720xotK2mqIbj2halAksnc3YFNL XRS2N00T8qSh5LtF1JafNcMgLggMLuqTpqUf7SyoyEyjrrke2UyNm0ETSZTPD2v4 GBgY17MMYnwN8uAnkj1LydLMfCGvxvFiBgOxRmYuHHvNTVH+DC1vwJILTg+AndHY aPqe4E2wjFx5PoTdm0qaSmMNb9MzcqjGC9Xy8OEVXr3rTqO5ma5x5w78RbIabs5F UpQ1KfKSjiBY8IAyTAFzJ5VtZoteOeFANfW5wT4= -----END CERTIFICATE-----Generated at Wed May 6 18:35:38 2026 by rpki-client