$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa File: 9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa (raw, json) Hash identifier: 7kBF0Q2+HI3xn5XxNaKqp3yXakPle7Gd0XwFzQGos6U= Subject key identifier: 3C:27:C2:B9:C1:A9:0B:34:BC:37:01:1A:1E:15:85:1E:8C:12:32:A1 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584D80FFE485B2C16DA52CCAF980 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 397423 IP address blocks: 45.59.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e4:85:b2:c1:6d:a5:2c:ca:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=b84868c0-0ee1-488a-8f2a-cc5abea5ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:3b:66:33:58:50:0a:2f:dc:7a:ac:9d:44: 57:1f:8e:4e:24:69:ee:a6:d9:30:ac:6d:e7:ad:32: b4:f5:82:aa:38:47:41:07:0f:ca:7d:ad:bf:0f:62: 5b:fa:7d:81:ad:5b:15:14:ab:8d:5c:a4:c8:38:2d: 86:4a:9b:c1:a3:c1:df:38:c2:c1:1e:84:70:3e:c0: b1:b1:2b:b5:3d:6d:07:63:b8:8f:be:97:3e:54:1e: fe:3d:cf:9f:a4:65:e2:6e:ca:65:a2:d5:85:2f:95: 06:a5:d6:91:07:5f:73:25:00:38:f0:61:4d:d2:be: 7e:ae:4a:94:1a:c0:6f:80:a9:25:29:9b:a5:ac:97: 2e:e8:56:c8:a1:4e:09:db:50:16:cb:0a:0d:aa:59: 42:b0:a7:67:ea:58:bb:76:f1:1f:18:dc:1e:b1:71: 30:a0:43:13:6b:58:43:c7:9f:70:2d:a5:67:3b:a5: 3f:6c:2f:17:f5:a2:e1:3f:66:a4:12:14:e1:64:b4: 9b:2c:10:6a:8c:2b:8a:f0:ce:21:12:a0:e6:48:a7: 63:0f:5f:3c:a0:cd:cc:d8:a7:f8:19:83:9b:5d:75: 40:30:ea:9f:a5:e2:ca:13:e1:4b:c2:fa:26:98:35: b3:29:e3:bd:51:99:13:2c:a9:5b:70:6f:f4:bb:90: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:27:C2:B9:C1:A9:0B:34:BC:37:01:1A:1E:15:85:1E:8C:12:32:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/9003b81d-d6dc-3a33-a6a2-99ade3a133b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 45.59.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:44:ac:51:b7:b0:2a:f0:9e:a9:1a:a4:e6:f4:f5:5c:65:bb: a2:ed:19:ab:29:be:44:b8:a9:e1:5e:c5:ab:8f:97:ff:98:0f: fb:0c:25:a4:90:94:52:77:23:83:db:c5:49:b9:b3:96:a1:3f: 34:40:b2:7d:cb:be:6b:cf:4c:c4:51:50:9f:54:42:eb:3d:84: d3:ff:22:24:18:8e:4a:2e:57:19:df:8f:b8:6f:22:61:ed:97: 1a:55:5d:9a:19:60:3d:0c:85:f5:39:3f:09:22:a6:5a:f6:59: 05:f6:08:c5:d3:be:f7:11:dc:b6:3a:1a:9a:d3:95:5f:6f:e5: 50:1a:61:f0:31:e9:15:6b:e2:c2:10:c7:5c:d2:6b:30:7a:ae: f5:26:0b:54:2c:6a:f4:3e:1d:7d:3f:6c:8e:08:a2:68:5d:a1: 5d:18:25:c1:88:25:59:cd:86:32:e8:7e:d5:20:dc:05:f0:20: f9:f3:c9:61:e5:83:7c:9c:28:9c:21:e4:22:7d:35:ac:53:00: df:32:9c:29:12:cf:91:ab:73:e5:b9:bd:4b:07:e7:36:6b:99: 31:9a:9f:a5:65:d2:81:6c:cd:5b:7d:61:cb:11:37:d8:d2:04: dc:f9:70:73:d1:f1:82:c8:72:01:62:5a:f5:8b:04:45:cf:06: 42:20:6b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+SFssFtpSzK+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk Yjg0ODY4YzAtMGVlMS00ODhhLThmMmEtY2M1YWJlYTVhYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo87ZjNYUAov3HqsnURXH45OJGnuptkwrG3n rTK09YKqOEdBBw/Kfa2/D2Jb+n2BrVsVFKuNXKTIOC2GSpvBo8HfOMLBHoRwPsCx sSu1PW0HY7iPvpc+VB7+Pc+fpGXibsplotWFL5UGpdaRB19zJQA48GFN0r5+rkqU GsBvgKklKZulrJcu6FbIoU4J21AWywoNqllCsKdn6li7dvEfGNwesXEwoEMTa1hD x59wLaVnO6U/bC8X9aLhP2akEhThZLSbLBBqjCuK8M4hEqDmSKdjD188oM3M2Kf4 GYObXXVAMOqfpeLKE+FLwvommDWzKeO9UZkTLKlbcG/0u5BiowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwnwrnBqQs0vDcBGh4VhR6MEjKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvOTAwM2I4MWQtZDZkYy0z YTMzLWE2YTItOTlhZGUzYTEzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9ErFG3sCrwnqkapOb09Vxlu6LtGaspvkS4qeFexauPl/+YD/sMJaSQ lFJ3I4PbxUm5s5ahPzRAsn3LvmvPTMRRUJ9UQus9hNP/IiQYjkouVxnfj7hvImHt lxpVXZoZYD0MhfU5Pwkiplr2WQX2CMXTvvcR3LY6GprTlV9v5VAaYfAx6RVr4sIQ x1zSazB6rvUmC1QsavQ+HX0/bI4IomhdoV0YJcGIJVnNhjLoftUg3AXwIPnzyWHl g3ycKJwh5CJ9NaxTAN8ynCkSz5Grc+W5vUsH5zZrmTGan6Vl0oFszVt9YcsRN9jS BNz5cHPR8YLIcgFiWvWLBEXPBkIga+s= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:30 2026 by rpki-client