$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa File: 38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa (raw, json) Hash identifier: +DIpgFx8kUGYNCq71drka53PbTiVmOAfGyj6yqXoW6M= Subject key identifier: 0D:4B:37:6B:ED:D7:77:56:90:55:87:B2:19:5E:3C:1B:F6:DB:B7:9A Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584B620208FE6485CF1CF18E0300 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 1100 IP address blocks: 45.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:08:fe:64:85:cf:1c:f1:8e:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=59c354b3-ea9c-46a1-a351-4dfd5ded4862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:5f:a3:a9:df:9d:c7:b4:27:39:94:4e:b6: 70:e8:33:2d:64:c0:4f:13:5a:3e:88:00:19:17:7b: 53:13:fd:61:09:23:b2:6d:0b:7a:9c:41:8b:94:08: 13:c3:4f:1c:f0:51:fb:1d:ae:32:6c:69:bb:17:be: fb:67:48:a9:b0:b2:9f:1f:99:1a:84:a0:64:ff:b9: 5e:6f:fa:af:25:f4:da:35:b8:58:b7:53:dc:f2:69: 61:50:ff:30:31:9f:b4:7e:f6:9d:47:97:bd:d7:14: 62:64:fb:41:94:60:81:f1:95:2d:e9:86:e3:3a:aa: 55:7c:2e:d2:6f:a7:a5:77:62:95:22:8d:24:b2:18: 64:d9:e2:68:ed:72:fb:d9:51:2e:9c:89:d3:72:73: 58:81:4e:cc:f0:cb:b7:04:7a:8d:18:da:ab:16:d1: cb:e6:55:e2:79:6d:dc:cc:98:16:8a:de:ce:69:70: e6:88:77:de:a3:27:b0:7b:f9:a3:d0:0c:79:6e:3d: 98:35:71:fe:08:75:ee:c0:b8:5a:97:4c:25:cf:ec: be:66:2f:65:dd:27:3c:d6:85:79:32:dc:90:b7:c9: cd:62:7c:a1:c4:e3:99:db:eb:3c:88:f2:01:a6:ff: 26:c4:e4:d1:a7:fd:e7:5e:ca:94:6c:26:76:48:2b: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4B:37:6B:ED:D7:77:56:90:55:87:B2:19:5E:3C:1B:F6:DB:B7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/38e0cd62-5b9c-35f8-aa47-e14aad950d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c8:c9:46:57:85:da:f8:08:c0:b6:42:f6:37:67:a8:c2:a6: 9d:f0:5c:44:fa:3e:15:0a:03:0d:43:d3:5f:bf:75:1e:aa:15: 9c:e6:38:5d:b0:57:cd:59:1b:a9:42:5b:83:11:dd:c6:92:e0: 7e:10:18:4d:2c:9b:09:79:72:fa:3d:6d:2d:09:98:f6:b5:f4: ae:f8:52:d7:f0:3c:91:b9:54:8f:86:69:93:c5:2a:60:17:40: f1:07:33:27:fd:68:25:cd:53:ce:2f:34:10:62:09:81:d1:18: 4f:e0:c5:43:2c:13:df:3a:c1:d7:6b:dd:49:e1:db:02:63:31: dc:fd:2d:15:3d:bf:86:d2:e9:46:64:af:c8:18:14:93:46:88: 55:26:3d:d7:c4:5a:9e:89:fe:07:c8:c6:1b:c6:02:c9:32:7e: cd:d6:cb:c8:4f:20:d4:96:30:f7:5b:75:96:32:67:a0:1e:1d: 20:51:8d:95:cc:b9:67:48:25:1e:0a:f2:40:41:06:12:a9:3d: d5:bc:5d:33:b0:9f:e6:24:59:d2:b7:ed:fc:0a:db:cd:f2:5c: 96:5d:36:3e:24:d1:45:34:01:a2:ff:b3:5d:9d:02:74:13:3f: 6a:12:ff:e8:56:7a:7d:6b:7a:aa:02:28:28:3e:d4:c2:1b:b9: 17:95:9a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgj+ZIXPHPGOAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTljMzU0YjMtZWE5Yy00NmExLWEzNTEtNGRmZDVkZWQ0ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+lfo6nfnce0JzmUTrZw6DMtZMBPE1o+iAAZ F3tTE/1hCSOybQt6nEGLlAgTw08c8FH7Ha4ybGm7F777Z0ipsLKfH5kahKBk/7le b/qvJfTaNbhYt1Pc8mlhUP8wMZ+0fvadR5e91xRiZPtBlGCB8ZUt6YbjOqpVfC7S b6eld2KVIo0kshhk2eJo7XL72VEunInTcnNYgU7M8Mu3BHqNGNqrFtHL5lXieW3c zJgWit7OaXDmiHfeoyewe/mj0Ax5bj2YNXH+CHXuwLhal0wlz+y+Zi9l3Sc81oV5 MtyQt8nNYnyhxOOZ2+s8iPIBpv8mxOTRp/3nXsqUbCZ2SCsnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1LN2vt13dWkFWHshlePBv227eaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMzhlMGNkNjItNWI5Yy0z NWY4LWFhNDctZTE0YWFkOTUwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDIyUZXhdr4CMC2QvY3Z6jCpp3wXET6PhUKAw1D01+/dR6qFZzmOF2w V81ZG6lCW4MR3caS4H4QGE0smwl5cvo9bS0JmPa19K74UtfwPJG5VI+GaZPFKmAX QPEHMyf9aCXNU84vNBBiCYHRGE/gxUMsE986wddr3Unh2wJjMdz9LRU9v4bS6UZk r8gYFJNGiFUmPdfEWp6J/gfIxhvGAskyfs3Wy8hPINSWMPdbdZYyZ6AeHSBRjZXM uWdIJR4K8kBBBhKpPdW8XTOwn+YkWdK37fwK283yXJZdNj4k0UU0AaL/s12dAnQT P2oS/+hWen1reqoCKCg+1MIbuReVmhs= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:03 2025 by rpki-client