$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa File: d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa (raw, json) Hash identifier: dwR+C9t8LV1KVPfHNuFEqwni7VvgE33mNuBh57uH+/0= Subject key identifier: 53:2D:AB:E1:D4:25:9E:BB:09:99:0A:85:9E:5E:DB:7D:36:33:AB:49 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584F963866F0062FC2D2DA464980 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 30823 IP address blocks: 45.59.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:66:f0:06:2f:c2:d2:da:46:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=ed1b3473-6e8b-4797-afd7-2a21d7142e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:64:bf:20:c3:8a:08:00:3a:34:65:98:db: 71:22:b1:1d:be:35:0d:7b:7e:a9:dd:92:cd:a9:42: bb:5e:39:45:d2:d7:97:46:83:3c:d1:00:16:2f:71: 68:2a:ba:be:17:0c:d7:75:97:bf:8e:ee:fa:53:01: 9c:96:be:79:96:4e:c0:27:30:23:e2:af:45:57:59: 4c:10:ec:72:52:11:34:25:86:5f:e9:2f:7a:58:63: d8:f5:d0:89:68:c1:69:88:d0:1b:76:04:bb:d5:e8: bd:04:c8:31:e6:f1:63:77:56:dd:c2:21:77:31:1d: 50:6c:7a:e0:10:df:3d:9e:89:e5:7e:7b:12:37:c8: 38:3c:45:21:49:7c:de:6c:8b:27:f2:9c:06:6b:f4: 0a:1d:b5:e9:cb:3c:b2:0c:1c:e7:74:87:16:f5:fc: 4c:bf:af:86:ec:e8:6d:1e:49:c1:7b:fe:89:9f:8b: 59:2c:39:df:76:0a:22:bc:4d:9b:40:33:be:d9:26: b9:35:c8:a1:77:1e:30:43:7e:c8:4f:0c:fd:91:52: 0a:68:1d:74:7e:fe:6a:0e:b9:09:2f:c3:54:08:24: 52:cb:04:7c:d8:10:70:cf:66:e3:fa:3e:bb:5c:e4: 52:5f:9c:3f:e6:8b:57:09:4c:68:bf:24:d2:c4:e6: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2D:AB:E1:D4:25:9E:BB:09:99:0A:85:9E:5E:DB:7D:36:33:AB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2d:cd:7f:c3:66:fe:13:bd:bc:7c:0b:e6:3b:cf:fe:fc:52: 3e:fe:c9:02:c1:1c:74:8d:de:9e:30:ec:ec:dd:36:71:ff:01: 15:4a:1b:d9:76:78:2f:df:d9:aa:c4:fb:9a:48:73:a7:c9:59: 4d:83:e4:47:09:ce:e5:f3:53:67:eb:ad:95:6e:92:67:25:e6: 10:76:0a:3a:c3:39:09:77:c8:e0:e0:38:d7:74:05:94:92:61: 9d:ee:6f:ee:78:26:3c:2f:1a:a6:d0:aa:c5:a1:67:66:d2:b0: 7d:87:09:68:c3:c0:2c:e3:df:95:f5:8a:3e:01:a7:3a:a9:00: 74:ca:92:02:53:21:7b:8c:38:7a:ce:67:3d:31:8a:a7:1f:4f: 31:41:bc:e0:5c:2f:62:93:63:f8:f2:d0:f6:72:4c:40:13:73: 68:2c:bc:93:dd:45:44:d0:ce:e9:1a:ff:40:fc:14:4c:b9:da: db:3b:08:cc:0b:2b:c0:d5:8d:d4:fb:c3:ef:51:78:0a:82:84: 13:fc:90:e7:00:3e:83:2f:3e:2a:a4:ec:81:74:37:5c:3e:a6: e8:ef:62:b4:00:fa:c3:0f:83:7b:06:45:32:f0:85:93:4f:df: 3a:d4:e8:d5:32:e3:b4:7e:97:a3:68:44:e4:c4:71:5d:96:95: 39:5a:9f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGbwBi/C0tpGSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk ZWQxYjM0NzMtNmU4Yi00Nzk3LWFmZDctMmEyMWQ3MTQyZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAJkvyDDiggAOjRlmNtxIrEdvjUNe36p3ZLN qUK7XjlF0teXRoM80QAWL3FoKrq+FwzXdZe/ju76UwGclr55lk7AJzAj4q9FV1lM EOxyUhE0JYZf6S96WGPY9dCJaMFpiNAbdgS71ei9BMgx5vFjd1bdwiF3MR1QbHrg EN89nonlfnsSN8g4PEUhSXzebIsn8pwGa/QKHbXpyzyyDBzndIcW9fxMv6+G7Oht HknBe/6Jn4tZLDnfdgoivE2bQDO+2Sa5Ncihdx4wQ37ITwz9kVIKaB10fv5qDrkJ L8NUCCRSywR82BBwz2bj+j67XORSX5w/5otXCUxovyTSxOZ8YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMtq+HUJZ67CZkKhZ5e2302M6tJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZDA4N2FhYjAtNzgyMS0z ZWIyLWJjNGUtMTczN2Y2MGQyZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJItzX/DZv4Tvbx8C+Y7z/78Uj7+yQLBHHSN3p4w7OzdNnH/ARVKG9l2 eC/f2arE+5pIc6fJWU2D5EcJzuXzU2frrZVukmcl5hB2CjrDOQl3yODgONd0BZSS YZ3ub+54JjwvGqbQqsWhZ2bSsH2HCWjDwCzj35X1ij4BpzqpAHTKkgJTIXuMOHrO Zz0xiqcfTzFBvOBcL2KTY/jy0PZyTEATc2gsvJPdRUTQzuka/0D8FEy52ts7CMwL K8DVjdT7w+9ReAqChBP8kOcAPoMvPiqk7IF0N1w+pujvYrQA+sMPg3sGRTLwhZNP 3zrU6NUy47R+l6NoROTEcV2WlTlan5Y= -----END CERTIFICATE-----Generated at Sat Oct 24 14:44:34 2026 by rpki-client