$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e0d943d-7e25-3862-bcf6-0191f70459bd.roa File: 9e0d943d-7e25-3862-bcf6-0191f70459bd.roa (raw, json) Hash identifier: o0tF9LVJ8Q6vllJCbFdfnm8nFn1k0oqPKUj2DZfZ5xg= Subject key identifier: 59:9D:87:4A:9E:84:8C:06:14:7A:AE:EF:44:EA:E2:89:76:97:2C:3C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9D96E368917CE6837CDE4080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e0d943d-7e25-3862-bcf6-0191f70459bd.roa Signing time: Fri 23 Jan 2026 02:00:30 +0000 ROA not before: Fri 23 Jan 2026 02:00:30 +0000 ROA not after: Thu 23 Apr 2026 01:00:30 +0000 asID: 30036 IP address blocks: 45.59.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9d:96:e3:68:91:7c:e6:83:7c:de:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 23 02:00:30 2026 GMT Not After : Apr 23 01:00:30 2026 GMT Subject: CN=d051c3d1-9c1c-47e9-b453-cdede7d9e26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:2d:14:24:c9:f5:f9:e6:da:92:a5:21:0a: c1:db:d9:74:ad:32:29:f8:f7:5e:e4:f3:f4:2c:11: af:d4:ca:87:af:de:d4:41:69:43:c9:ad:dd:80:ae: 81:35:1c:e2:55:48:22:87:51:50:2c:1f:14:ef:cc: c1:76:82:ba:dc:b8:47:66:5c:7c:1b:93:64:84:77: f6:e7:ac:73:ce:c4:7c:3d:8a:18:33:58:d4:e6:23: 6c:31:dc:dd:da:dc:b0:53:87:41:d4:42:87:65:0f: 89:75:35:5a:a6:08:fc:fd:85:bf:43:7b:d7:c3:8e: 31:a3:43:3e:e2:9e:04:23:90:24:ad:ee:10:39:cb: 97:6a:40:6f:48:48:06:b3:41:d3:22:10:d0:ca:3b: 8f:ff:24:fe:66:db:c8:1f:e5:b5:bf:3a:f2:41:57: 04:a1:bf:98:d9:c0:98:2f:02:91:e8:2e:80:23:ac: 5a:f7:32:f5:b2:ed:c7:1d:85:73:47:df:cf:64:79: 78:3c:74:35:12:1d:5f:37:3b:c6:22:f6:9c:94:0f: 6e:39:ac:7d:40:eb:e5:68:1c:f8:15:e1:33:82:35: 31:8c:fc:d6:ba:b5:c6:32:43:c4:95:98:0b:a3:d5: 09:00:86:bc:bd:f3:5f:61:61:cb:c5:88:1b:b2:f9: b8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:87:4A:9E:84:8C:06:14:7A:AE:EF:44:EA:E2:89:76:97:2C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9e0d943d-7e25-3862-bcf6-0191f70459bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 45.59.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:70:94:d7:27:cc:e9:ea:ad:dd:57:8b:ca:a4:77:79:80:ec: c0:e1:1f:99:e8:34:78:2e:b7:2c:3a:19:c7:e4:95:54:24:f2: 22:82:2b:fd:aa:9d:7c:de:b1:c1:13:85:46:02:66:fe:82:90: 05:d6:75:56:69:4e:85:2d:4b:15:0a:1d:f3:9c:fa:be:ab:fa: 0d:34:a2:dc:85:5c:fe:40:68:3f:d7:d9:a7:7d:92:7f:45:9e: 5b:ef:d1:f9:7a:82:f2:17:cd:cc:4c:e9:c5:f3:03:97:f2:69: cc:cd:20:1a:0a:08:37:0f:01:66:b4:7b:63:d7:19:45:4e:a6: fe:ef:62:71:70:86:34:35:42:cb:f5:d0:0d:e1:d3:65:0f:26: 6c:03:01:c6:31:5b:8e:65:03:0d:6c:db:38:2a:85:fe:e0:77: f1:da:00:18:11:e2:85:7a:71:6b:04:70:b8:23:4b:84:e6:b9: 36:77:68:d1:b9:70:60:94:59:13:45:97:56:e1:42:a4:77:40: f5:6f:80:26:7d:1b:82:07:51:6a:86:11:d9:9b:47:30:92:10: c6:61:3e:d6:c4:1d:f5:fc:ee:b5:80:93:68:6d:78:dd:9d:7e: 3c:ab:b8:7b:58:4d:b9:60:c5:1a:55:25:c5:fc:81:9f:2a:64: 59:f1:eb:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEydluNokXzmg3zeQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMzAyMDAzMFoXDTI2MDQyMzAxMDAzMFowLzEtMCsGA1UEAxMk ZDA1MWMzZDEtOWMxYy00N2U5LWI0NTMtY2RlZGU3ZDllMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVEtFCTJ9fnm2pKlIQrB29l0rTIp+Pde5PP0 LBGv1MqHr97UQWlDya3dgK6BNRziVUgih1FQLB8U78zBdoK63LhHZlx8G5NkhHf2 56xzzsR8PYoYM1jU5iNsMdzd2tywU4dB1EKHZQ+JdTVapgj8/YW/Q3vXw44xo0M+ 4p4EI5Akre4QOcuXakBvSEgGs0HTIhDQyjuP/yT+ZtvIH+W1vzryQVcEob+Y2cCY LwKR6C6AI6xa9zL1su3HHYVzR9/PZHl4PHQ1Eh1fNzvGIvaclA9uOax9QOvlaBz4 FeEzgjUxjPzWurXGMkPElZgLo9UJAIa8vfNfYWHLxYgbsvm4aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmdh0qehIwGFHqu70Tq4ol2lyw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWUwZDk0M2QtN2UyNS0z ODYyLWJjZjYtMDE5MWY3MDQ1OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVwlNcnzOnqrd1Xi8qkd3mA7MDhH5noNHgutyw6GcfklVQk8iKCK/2q nXzescEThUYCZv6CkAXWdVZpToUtSxUKHfOc+r6r+g00otyFXP5AaD/X2ad9kn9F nlvv0fl6gvIXzcxM6cXzA5fyaczNIBoKCDcPAWa0e2PXGUVOpv7vYnFwhjQ1Qsv1 0A3h02UPJmwDAcYxW45lAw1s2zgqhf7gd/HaABgR4oV6cWsEcLgjS4TmuTZ3aNG5 cGCUWRNFl1bhQqR3QPVvgCZ9G4IHUWqGEdmbRzCSEMZhPtbEHfX87rWAk2hteN2d fjyruHtYTblgxRpVJcX8gZ8qZFnx60U= -----END CERTIFICATE-----Generated at Sun Mar 1 20:56:19 2026 by rpki-client