$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/28382ed1-a6b1-3a3e-b096-9dcdbb6a5c2c.roa File: 28382ed1-a6b1-3a3e-b096-9dcdbb6a5c2c.roa (raw, json) Hash identifier: Yrxni6twFaOT5naE64oYzRPiA1TbLyKOy5C8D/PMQ4Y= Subject key identifier: A1:65:FE:32:86:AA:B4:75:B5:10:F4:30:E3:C2:F1:6C:F0:76:16:5D Certificate issuer: /CN=2071aafd-02be-44ff-9910-34e0c991304e Certificate serial: 010D0C9F4328584CCD0C8027D1FB93470A1C2D20 Authority key identifier: 58:8F:CE:7D:EA:86:6C:D3:5F:BF:1C:BD:88:59:97:C3:2D:58:E8:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/28382ed1-a6b1-3a3e-b096-9dcdbb6a5c2c.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 54728 IP address blocks: 45.59.136.0/24 maxlen: 24 2606:3ec0::/32 maxlen: 32 2606:4a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:80:27:d1:fb:93:47:0a:1c:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2071aafd-02be-44ff-9910-34e0c991304e Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=2c2d3707-d270-4226-af98-96be2d3c7da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:29:94:70:90:18:42:eb:d2:9d:cd:74:32: 58:c1:7e:75:ec:be:ca:01:4c:dc:54:6c:30:4c:72: c0:77:3e:ec:0b:0a:a0:9f:1f:2a:db:67:ee:83:e1: a7:e1:44:3c:42:c1:21:0e:0d:50:c7:b2:fb:c9:db: df:28:3a:98:91:06:23:2f:8b:a5:df:da:ea:a1:73: 7e:43:1a:70:76:c8:7c:08:0e:c9:8d:14:62:89:f1: 14:63:07:31:3e:2e:70:1f:03:d7:17:48:b2:66:a2: 7d:80:29:d8:f4:80:44:cb:da:4c:31:59:8b:15:7c: c9:2f:16:e7:41:07:68:63:7f:81:81:32:f0:e3:30: e8:d1:0f:c7:81:78:2f:ab:c2:11:3f:db:a1:74:bd: 02:0a:2b:f8:d6:08:a0:62:f5:aa:87:c5:b0:ab:20: 96:01:34:b7:b8:74:44:07:3c:c8:fb:3e:bd:81:67: 68:a7:8d:54:d5:60:33:86:11:99:71:11:51:f1:0f: b7:2b:69:e6:11:f3:7b:7e:56:45:de:e7:52:9e:7f: 44:80:85:65:8d:0e:d8:e5:54:4f:56:de:7c:6d:ab: 07:04:0d:2a:8f:b2:20:bf:08:88:6e:98:aa:ba:74: 16:19:46:62:45:46:62:94:5d:ce:ab:7a:5f:53:76: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:FE:32:86:AA:B4:75:B5:10:F4:30:E3:C2:F1:6C:F0:76:16:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/28382ed1-a6b1-3a3e-b096-9dcdbb6a5c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.crl X509v3 Authority Key Identifier: keyid:58:8F:CE:7D:EA:86:6C:D3:5F:BF:1C:BD:88:59:97:C3:2D:58:E8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e.cer sbgp-ipAddrBlock: critical IPv4: 45.59.136.0/24 IPv6: 2606:3ec0::/32 2606:4a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a3:47:cf:47:8e:ac:92:8d:50:87:08:09:50:d0:15:7a:6d: 65:09:c7:9f:6d:f5:59:37:1d:27:d9:ad:66:b9:cc:e8:62:db: 05:be:03:67:cb:55:95:bd:db:f9:2c:7f:c8:2a:2a:f0:6e:0f: d3:23:aa:7b:61:ac:b2:0a:fb:c1:38:88:1e:a6:c1:18:be:5a: 71:73:ce:78:e9:fd:bd:6a:18:21:11:a8:9e:15:cb:fc:84:7d: d7:86:21:d7:50:03:d2:32:3a:b9:a6:14:dd:c8:fb:dd:3e:9f: b6:49:27:72:56:e5:d6:3b:18:f0:f6:55:3f:1b:5b:82:17:c4: 2d:8f:f9:a1:06:f7:09:5c:f4:09:39:cb:b1:7f:70:56:bb:75: 78:b5:d6:dd:44:f2:b5:5c:90:84:de:a4:31:73:ed:30:d6:ef: 61:bb:4d:c6:51:c5:db:38:9a:18:f7:e0:c3:1f:76:4a:9f:94: 22:3d:93:c9:16:03:9a:15:2d:8a:39:8a:f9:cf:04:9a:12:f8: a2:2f:72:21:8e:5c:68:d9:49:42:81:b8:90:ac:0e:50:a6:76: b4:7a:3f:9f:c1:14:5f:d3:df:8e:93:cd:16:ea:91:ea:21:1e: 67:27:13:11:13:af:ca:b8:87:42:b5:14:00:d7:60:7d:31:f5: a2:24:7c:dc -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEzNDIAn0fuTRwocLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3MWFhZmQtMDJiZS00NGZmLTk5MTAtMzRlMGM5OTEz MDRlMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk MmMyZDM3MDctZDI3MC00MjI2LWFmOTgtOTZiZTJkM2M3ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv58plHCQGELr0p3NdDJYwX517L7KAUzcVGww THLAdz7sCwqgnx8q22fug+Gn4UQ8QsEhDg1Qx7L7ydvfKDqYkQYjL4ul39rqoXN+ Qxpwdsh8CA7JjRRiifEUYwcxPi5wHwPXF0iyZqJ9gCnY9IBEy9pMMVmLFXzJLxbn QQdoY3+BgTLw4zDo0Q/HgXgvq8IRP9uhdL0CCiv41gigYvWqh8WwqyCWATS3uHRE BzzI+z69gWdop41U1WAzhhGZcRFR8Q+3K2nmEfN7flZF3udSnn9EgIVljQ7Y5VRP Vt58basHBA0qj7IgvwiIbpiqunQWGUZiRUZilF3Oq3pfU3brjQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFKFl/jKGqrR1tRD0MOPC8WzwdhZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMDcx YWFmZC0wMmJlLTQ0ZmYtOTkxMC0zNGUwYzk5MTMwNGUvMjgzODJlZDEtYTZiMS0z YTNlLWIwOTYtOWRjZGJiNmE1YzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjA3MWFhZmQtMDJiZS00NGZmLTk5 MTAtMzRlMGM5OTEzMDRlLzIwNzFhYWZkLTAyYmUtNDRmZi05OTEwLTM0ZTBjOTkx MzA0ZS5jcmwwHwYDVR0jBBgwFoAUWI/OfeqGbNNfvxy9iFmXwy1Y6C0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMDcxYWFmZC0wMmJlLTQ0ZmYtOTkxMC0zNGUw Yzk5MTMwNGUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQALTuIMBQE AgACMA4DBQAmBj7AAwUAJgZKQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIo0fPR46sko1QhwgJUNAVem1l CcefbfVZNx0n2a1muczoYtsFvgNny1WVvdv5LH/IKirwbg/TI6p7YayyCvvBOIge psEYvlpxc8546f29ahghEaieFcv8hH3XhiHXUAPSMjq5phTdyPvdPp+2SSdyVuXW Oxjw9lU/G1uCF8Qtj/mhBvcJXPQJOcuxf3BWu3V4tdbdRPK1XJCE3qQxc+0w1u9h u03GUcXbOJoY9+DDH3ZKn5QiPZPJFgOaFS2KOYr5zwSaEviiL3Ihjlxo2UlCgbiQ rA5Qpna0ej+fwRRf09+Ok80W6pHqIR5nJxMRE6/KuIdCtRQA12B9MfWiJHzc -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:48 2026 by rpki-client