$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa File: d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa (raw, json) Hash identifier: S2jRnedynrIrEf0mt0wgB/ikIzty8vbOz5HWJGzTBJM= Subject key identifier: 1B:D3:EA:FB:4B:8D:FC:C8:57:72:EC:E2:8B:21:C5:06:2D:85:50:7D Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584D71A50D438B5FA16E95D13C40 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 30823 IP address blocks: 45.59.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:0d:43:8b:5f:a1:6e:95:d1:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=1605bea3-8a8b-4444-9a2c-3214e61b2095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:74:3d:53:16:97:18:f6:45:15:4c:9b:70: 1a:a1:9a:e1:c8:d6:2e:68:92:f2:96:29:64:01:c6: 14:cd:d1:b2:44:d4:31:67:82:69:8d:35:8d:01:2f: 89:69:68:ee:2f:19:bf:b8:52:42:b7:7f:52:5b:ef: f7:d6:b6:14:96:bd:3a:2c:7c:f4:dd:b4:bd:c8:53: d9:81:9f:bc:1a:28:de:4f:17:3b:75:2c:d9:28:2f: 51:e3:b6:4a:7f:6e:54:58:61:5c:57:05:48:5c:97: 17:72:29:0f:c2:80:97:77:a9:90:2c:e6:13:15:46: 9b:57:d1:89:2a:7d:1b:eb:46:f9:4a:7f:16:bc:44: a2:0f:ce:24:75:5f:05:a7:41:f3:9e:4f:d9:d6:a1: 9d:96:6d:43:40:7d:bc:21:43:77:c8:b9:8c:f1:43: 55:d1:7a:77:dd:bb:76:ef:f6:48:8f:4d:41:1a:80: c5:7e:5a:99:dd:e5:99:3b:fd:dd:69:63:c1:7e:d8: f6:8c:46:bb:cd:53:1e:ab:f6:cc:e6:d0:8e:04:6f: c7:03:b4:c3:f7:b4:4f:35:b1:11:93:ef:b3:9e:64: 1c:60:6d:cc:41:a9:87:12:7d:9f:da:d8:b5:2e:73: 9b:a0:5f:61:2a:47:55:d3:96:6c:e2:0b:eb:28:e6: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D3:EA:FB:4B:8D:FC:C8:57:72:EC:E2:8B:21:C5:06:2D:85:50:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/d087aab0-7821-3eb2-bc4e-1737f60d2e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d2:e8:f8:9f:52:0c:3b:fe:7e:28:ea:d4:c0:fd:b7:93:56: c4:ba:f3:71:dc:ff:e6:68:f7:72:0e:01:ea:48:52:fe:bc:44: 37:72:5c:20:a2:52:f4:33:b2:99:9a:4e:10:29:e3:5f:11:c0: 36:4e:8a:62:86:2f:c1:12:b3:f1:c3:80:05:a4:c6:5f:8c:ea: 5f:b1:7b:67:83:be:d5:51:8e:11:4f:8a:86:8f:d8:04:28:5c: fb:99:cb:c6:ae:4f:1c:a3:04:f7:7e:51:0c:fb:c5:c8:80:67: 48:c1:56:67:8d:f2:e3:54:9e:d2:46:c8:3a:94:2f:2f:11:f9: c1:04:3e:23:b1:c4:58:21:ca:35:15:d1:97:19:8e:f3:3b:74: 72:5e:e5:7d:a8:15:19:50:dd:49:2a:76:38:85:5d:d3:e8:04: 29:79:66:a1:c6:e3:37:78:57:91:36:77:82:76:d4:60:91:4b: 99:98:e6:69:24:48:17:53:96:d0:44:c8:d1:7b:f5:3c:30:3f: 81:81:01:a2:18:55:1f:53:ef:b8:da:a7:4c:6f:1a:f5:d4:40: 32:46:61:10:0f:5c:b2:51:12:28:9c:50:98:18:4e:4e:d0:d9: 6a:17:d8:91:ce:07:12:83:3e:bb:3d:a0:f0:34:97:14:68:ae: 59:e9:b8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ1Di1+hbpXRPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MTYwNWJlYTMtOGE4Yi00NDQ0LTlhMmMtMzIxNGU2MWIyMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFJ0PVMWlxj2RRVMm3AaoZrhyNYuaJLylilk AcYUzdGyRNQxZ4JpjTWNAS+JaWjuLxm/uFJCt39SW+/31rYUlr06LHz03bS9yFPZ gZ+8GijeTxc7dSzZKC9R47ZKf25UWGFcVwVIXJcXcikPwoCXd6mQLOYTFUabV9GJ Kn0b60b5Sn8WvESiD84kdV8Fp0Hznk/Z1qGdlm1DQH28IUN3yLmM8UNV0Xp33bt2 7/ZIj01BGoDFflqZ3eWZO/3daWPBftj2jEa7zVMeq/bM5tCOBG/HA7TD97RPNbER k++znmQcYG3MQamHEn2f2ti1LnOboF9hKkdV05Zs4gvrKOYphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvT6vtLjfzIV3Ls4oshxQYthVB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZDA4N2FhYjAtNzgyMS0z ZWIyLWJjNGUtMTczN2Y2MGQyZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTS6PifUgw7/n4o6tTA/beTVsS683Hc/+Zo93IOAepIUv68RDdyXCCi UvQzspmaThAp418RwDZOimKGL8ESs/HDgAWkxl+M6l+xe2eDvtVRjhFPioaP2AQo XPuZy8auTxyjBPd+UQz7xciAZ0jBVmeN8uNUntJGyDqULy8R+cEEPiOxxFghyjUV 0ZcZjvM7dHJe5X2oFRlQ3UkqdjiFXdPoBCl5ZqHG4zd4V5E2d4J21GCRS5mY5mkk SBdTltBEyNF79TwwP4GBAaIYVR9T77jap0xvGvXUQDJGYRAPXLJREiicUJgYTk7Q 2WoX2JHOBxKDPrs9oPA0lxRorlnpuAs= -----END CERTIFICATE-----Generated at Fri Apr 17 20:47:27 2026 by rpki-client