$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa File: 88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa (raw, json) Hash identifier: jcLlNmq7vdlBYDKUkMQ4CL+IZa+vetVA5pBYZKYB0JM= Subject key identifier: 0E:9F:07:26:64:46:42:02:6F:58:31:6B:B5:B7:F2:4B:0C:3B:2F:FF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BBCDAE45F745AF3DC69D2F400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 30036 IP address blocks: 45.59.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e4:5f:74:5a:f3:dc:69:d2:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=a38ee3ab-64cd-415f-b726-b23440f83c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:27:31:91:40:32:e4:1b:78:69:e2:21:7f: b9:c8:8a:fe:b8:93:78:02:e1:8a:f9:88:11:5c:5a: 0f:d7:15:50:fc:b7:a0:9f:7b:67:74:18:bd:53:d1: 48:8f:6c:fa:50:c2:c8:ed:d8:e8:c5:b6:c2:f9:51: 2a:aa:2a:d6:09:7e:16:0f:6a:f0:98:a4:42:2a:6a: ac:c7:56:5f:88:7e:21:35:ff:d6:25:a3:03:04:a3: 16:ee:d3:90:f8:2a:16:6e:6f:36:5a:32:e6:dd:a1: dc:f4:3c:7d:20:15:03:36:75:af:8a:2e:f0:b5:2a: 1d:b1:9e:31:8f:68:e0:e5:d7:50:e7:b3:92:1b:79: ee:4b:50:c9:7f:10:81:38:de:86:2f:c1:c4:dc:c7: 6b:9c:2e:10:40:1e:7f:24:2c:3a:5d:1e:fd:7f:e8: e6:81:21:7f:84:90:3b:8b:61:57:bb:de:2c:71:05: 23:d6:1f:20:25:8b:64:d2:68:cd:b2:a4:88:3f:1e: 95:a8:f3:37:85:95:c3:2f:85:16:6d:96:49:ad:b9: 51:21:d6:c8:58:04:46:6b:3f:3d:61:bd:33:d4:1c: 57:68:68:7f:63:a9:a7:63:74:e8:82:08:2c:aa:e4: bf:a8:ea:ba:b9:31:7c:8e:53:b9:75:88:63:53:ca: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:07:26:64:46:42:02:6F:58:31:6B:B5:B7:F2:4B:0C:3B:2F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:30:93:0a:dc:ce:b2:17:25:bd:a6:ef:83:8c:f6:04:c0:11: 77:bc:73:1c:d1:fc:92:fe:40:4f:9a:20:47:a4:2f:67:41:50: 85:71:a0:37:a9:20:aa:2f:d0:3d:f9:66:14:3e:ce:62:c7:53: bc:61:e7:da:0b:a6:cf:3a:5c:54:07:c0:2d:6e:34:2e:60:05: f2:03:a9:92:6a:99:6f:5b:3a:cd:f6:61:16:3a:16:de:7d:46: 7e:8c:8e:99:62:ea:7b:06:c5:3f:b7:69:da:2e:08:5e:82:6f: 64:6b:87:74:e0:01:3e:e9:52:79:21:9b:53:0f:97:40:d3:ea: db:4d:90:35:21:cb:e8:c2:56:fd:a6:03:13:4a:74:a3:85:d2: 66:77:8b:48:4f:69:5b:63:70:66:9e:fe:c1:f1:81:ac:3d:c6: e5:6d:fc:30:1a:da:0e:10:86:3d:29:54:ad:35:8a:6a:bd:05: 87:cb:fa:8a:2a:79:67:cf:ee:3d:bf:68:1f:6e:d0:ff:8c:44: a0:eb:98:de:66:d3:6e:9f:ab:79:49:2d:75:52:b5:a7:de:f0: c7:0b:f1:dd:2c:6d:54:af:10:76:83:ac:54:7b:e3:8c:38:34: 76:9e:46:ec:71:54:5a:23:02:31:fa:e6:47:31:e2:c1:4e:b0: b5:8f:84:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uRfdFrz3GnS9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk YTM4ZWUzYWItNjRjZC00MTVmLWI3MjYtYjIzNDQwZjgzYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/snMZFAMuQbeGniIX+5yIr+uJN4AuGK+YgR XFoP1xVQ/Legn3tndBi9U9FIj2z6UMLI7djoxbbC+VEqqirWCX4WD2rwmKRCKmqs x1ZfiH4hNf/WJaMDBKMW7tOQ+CoWbm82WjLm3aHc9Dx9IBUDNnWvii7wtSodsZ4x j2jg5ddQ57OSG3nuS1DJfxCBON6GL8HE3MdrnC4QQB5/JCw6XR79f+jmgSF/hJA7 i2FXu94scQUj1h8gJYtk0mjNsqSIPx6VqPM3hZXDL4UWbZZJrblRIdbIWARGaz89 Yb0z1BxXaGh/Y6mnY3TogggsquS/qOq6uTF8jlO5dYhjU8pVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6fByZkRkICb1gxa7W38ksMOy//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODhlMTUyMmItN2QzNi0z YzBlLTlmOGEtNTA5ZTg5OWY4ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYwkwrczrIXJb2m74OM9gTAEXe8cxzR/JL+QE+aIEekL2dBUIVxoDep IKov0D35ZhQ+zmLHU7xh59oLps86XFQHwC1uNC5gBfIDqZJqmW9bOs32YRY6Ft59 Rn6Mjpli6nsGxT+3adouCF6Cb2Rrh3TgAT7pUnkhm1MPl0DT6ttNkDUhy+jCVv2m AxNKdKOF0mZ3i0hPaVtjcGae/sHxgaw9xuVt/DAa2g4Qhj0pVK01imq9BYfL+ooq eWfP7j2/aB9u0P+MRKDrmN5m026fq3lJLXVStafe8McL8d0sbVSvEHaDrFR744w4 NHaeRuxxVFojAjH65kcx4sFOsLWPhEw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:21 2025 by rpki-client