$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa File: cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa (raw, json) Hash identifier: I4PfEpr0yGtfh/TE6VQpWLyEBfMsPrsIOJsV4ThpKEI= Subject key identifier: 3C:54:4C:79:27:D3:66:66:B7:38:58:26:D2:32:15:6D:C8:07:4B:5A Certificate issuer: /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Certificate serial: 010D0C9F4328584EA788112D8CBA3751BDDE6AA0 Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395261 IP address blocks: 45.59.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:11:2d:8c:ba:37:51:bd:de:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e1babd14-4d35-4c24-ac0c-a5361e29da1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:96:ae:db:bc:12:6b:66:b5:10:63:9e:60: cd:42:40:3c:14:a8:ca:40:40:56:39:c1:d4:73:d8: b5:4e:52:f0:cc:84:0b:7b:f4:31:75:24:5a:a5:73: 54:63:2d:97:f2:74:08:30:db:f0:6c:5d:48:b7:db: b4:1a:88:44:99:42:92:92:93:20:ba:ce:76:92:29: c8:e2:a4:78:20:2f:3d:a2:af:d0:01:e9:88:3e:15: d9:d4:06:56:c1:47:9c:11:f0:ab:07:7c:cd:06:30: 19:f8:45:ee:51:ea:b8:cf:32:87:10:e9:14:26:5e: bb:9d:de:c0:85:78:2a:1f:27:98:28:13:08:c9:a8: c3:d5:3a:34:8e:56:db:bc:0f:e6:57:7a:da:d3:b9: 0f:d7:e3:fc:6a:a6:e4:bf:c8:9d:48:51:2d:00:cd: f6:db:9a:2f:0c:5f:ae:b4:fc:e5:49:b7:81:99:5b: 15:1b:f9:c1:a7:ca:3f:2f:aa:a9:54:f2:c3:3a:ee: 56:3a:23:92:f3:d1:f5:4a:0a:15:b5:5b:95:74:d8: ec:3e:4e:d5:70:db:2c:3f:93:4f:59:63:90:12:cf: 80:99:8b:20:e7:e0:a0:6f:38:60:e0:a1:84:78:bc: 89:b3:a1:f4:d6:5c:ae:7d:30:98:84:82:87:5f:0a: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:4C:79:27:D3:66:66:B7:38:58:26:D2:32:15:6D:C8:07:4B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl X509v3 Authority Key Identifier: keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer sbgp-ipAddrBlock: critical IPv4: 45.59.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:84:a2:38:59:6c:61:78:25:58:45:6f:96:0b:62:b9:66:f9: 66:1b:cd:c4:ae:ed:b9:9e:95:5d:17:9c:03:69:02:41:68:54: 35:46:a2:f2:02:dc:b7:77:91:05:65:d2:7f:0b:51:bb:85:51: 70:a0:96:fd:e9:1d:f6:80:71:a3:f5:76:ed:d3:05:b5:7b:1a: 4d:83:aa:48:75:fe:c2:bf:f6:6e:1e:5f:2c:7e:46:82:ef:7f: 2f:37:53:30:18:17:98:d5:31:9b:f7:51:60:37:48:8b:b1:51: 01:a2:67:eb:3f:a2:4a:7d:76:45:61:9a:f9:21:1d:e0:ee:7d: f0:f6:3a:b0:f3:f2:d6:3c:7d:f9:8b:ea:78:3e:bf:2d:b7:90: 77:26:62:46:a3:99:db:60:7d:f1:85:b4:5d:f5:65:70:07:f6: 35:5c:ba:4d:4d:12:5b:3d:22:da:87:09:42:0a:93:d5:55:dd: 87:4c:8f:04:50:aa:f0:3c:20:c6:3d:89:78:c8:bd:30:42:ca: 3f:e6:52:98:ba:68:a8:dd:8e:b0:a4:2c:84:d4:e9:5b:f0:74: 73:14:bb:db:b9:e8:c4:f0:b1:18:31:52:86:aa:2c:33:22:9a: a7:df:2b:9e:a5:74:ed:81:14:62:e4:64:14:56:0b:7d:64:1a: c1:29:aa:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niBEtjLo3Ub3eaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYzMmU1ZmQtMzc0ZS00MzBmLTlhZjMtMzA4YzFlYzZj NzJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTFiYWJkMTQtNGQzNS00YzI0LWFjMGMtYTUzNjFlMjlkYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduWrtu8EmtmtRBjnmDNQkA8FKjKQEBWOcHU c9i1TlLwzIQLe/QxdSRapXNUYy2X8nQIMNvwbF1It9u0GohEmUKSkpMgus52kinI 4qR4IC89oq/QAemIPhXZ1AZWwUecEfCrB3zNBjAZ+EXuUeq4zzKHEOkUJl67nd7A hXgqHyeYKBMIyajD1To0jlbbvA/mV3ra07kP1+P8aqbkv8idSFEtAM3225ovDF+u tPzlSbeBmVsVG/nBp8o/L6qpVPLDOu5WOiOS89H1SgoVtVuVdNjsPk7VcNssP5NP WWOQEs+AmYsg5+Cgbzhg4KGEeLyJs6H01lyufTCYhIKHXwpk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxUTHkn02ZmtzhYJtIyFW3IB0taMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NjMy ZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhjMWVjNmM3MmQvY2M3MmZjMjMtZWFiNS0z NWMzLTg3Y2EtYTkzZDhlM2U4MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDYzMmU1ZmQtMzc0ZS00MzBmLTlh ZjMtMzA4YzFlYzZjNzJkLzQ2MzJlNWZkLTM3NGUtNDMwZi05YWYzLTMwOGMxZWM2 YzcyZC5jcmwwHwYDVR0jBBgwFoAUjNzpjNBqpO6W666ZAcVHnYuuD+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NjMyZTVmZC0zNzRlLTQzMGYtOWFmMy0zMDhj MWVjNmM3MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISEojhZbGF4JVhFb5YLYrlm+WYbzcSu7bmelV0XnANpAkFoVDVGovIC 3Ld3kQVl0n8LUbuFUXCglv3pHfaAcaP1du3TBbV7Gk2Dqkh1/sK/9m4eXyx+RoLv fy83UzAYF5jVMZv3UWA3SIuxUQGiZ+s/okp9dkVhmvkhHeDuffD2OrDz8tY8ffmL 6ng+vy23kHcmYkajmdtgffGFtF31ZXAH9jVcuk1NEls9ItqHCUIKk9VV3YdMjwRQ qvA8IMY9iXjIvTBCyj/mUpi6aKjdjrCkLITU6VvwdHMUu9u56MTwsRgxUoaqLDMi mqffK56ldO2BFGLkZBRWC31kGsEpqno= -----END CERTIFICATE-----Generated at Wed Jul 29 10:56:54 2026 by rpki-client