$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa File: 0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json) Hash identifier: QaJKFZakWzwvBxzb5rD3oGI0PrGyTDUU77CmCsmIaFE= Subject key identifier: F6:53:C8:9C:67:CA:7A:65:4D:B1:D0:4E:A9:B8:30:AA:48:FA:E5:F0 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584F18979484FBDC46D94F94CD60 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8987 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:94:84:fb:dc:46:d9:4f:94:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=381dd544-ceb3-4e9a-9a11-181d4980da77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:5d:9a:d2:1c:b0:7e:43:9c:c2:cd:f9:04: 2e:54:2e:db:ae:a3:d2:51:ff:1f:2a:ab:da:e8:c9: c8:bb:d9:f3:e8:c3:bb:4d:29:2e:b7:db:70:50:8d: 16:55:98:16:e5:83:49:8f:29:be:f0:84:8f:d4:fb: 6c:c8:8e:de:60:b6:9e:a3:71:ae:99:8a:4c:9d:6a: 49:22:8e:8e:28:62:81:43:e9:3e:77:ee:a0:9c:f3: f6:d8:09:64:e5:38:3a:87:12:6e:33:ab:4a:f7:ec: 68:d0:0b:a0:00:45:2b:31:d9:a0:8f:48:41:1d:c2: 7d:9a:00:71:1a:dc:b6:f3:8d:09:a7:f5:e4:43:bf: e4:82:ec:94:f0:7b:f6:61:35:3a:b4:f8:e4:9a:f2: 5e:8b:2c:b3:4b:0b:62:cd:d0:e0:73:d4:77:c4:6a: eb:5d:74:43:d1:3e:2b:17:a2:98:c6:5c:a4:79:e4: a0:9d:9b:5d:88:9f:3d:f2:ff:25:7d:65:db:39:75: cd:96:ce:2b:d0:38:e8:21:91:bb:03:97:d7:5d:46: 03:95:17:e4:eb:94:58:d3:60:1f:2e:5a:5c:8f:31: 80:7d:83:f7:fe:74:18:7e:e1:21:02:29:f5:82:f7: 7a:61:fd:52:de:0e:a9:24:3e:c8:12:af:71:fd:ef: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:53:C8:9C:67:CA:7A:65:4D:B1:D0:4E:A9:B8:30:AA:48:FA:E5:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:40:8e:89:00:7f:ee:2a:eb:55:66:ec:6b:9b:7e:f8:df:e2: 8f:32:be:04:0e:7e:1b:93:79:3f:24:55:21:3a:83:33:f6:9c: c7:51:cb:06:55:a1:85:c3:b8:d9:03:19:b4:e6:31:4c:de:11: 3c:86:73:14:84:cf:0c:22:8a:3a:78:3d:56:8b:88:f0:b3:fb: f7:3a:5b:dc:78:74:16:55:c6:74:39:3a:cc:46:0c:ee:81:f7: b4:3e:f6:31:24:6c:71:1f:bb:9b:c1:0b:02:82:d3:84:74:2a: 38:48:e3:4c:b5:78:d0:06:b8:4f:14:6c:f3:3f:37:b7:7f:41: b3:ce:41:ae:25:13:0a:9b:87:70:3a:ee:d2:22:14:39:bf:21: 75:1a:f2:22:91:86:67:9c:7c:54:a8:1e:b4:2e:1b:00:97:f6: ac:34:2d:6d:75:d3:ce:0e:83:9d:f6:33:74:41:7f:cd:cf:81: 57:7b:0c:09:7e:89:5b:cf:0b:28:88:7f:c5:26:b5:7f:11:0d: 2e:6f:e0:41:aa:58:73:8f:13:cf:5d:7f:d3:58:91:73:dc:6c: 18:7b:ea:dd:70:c9:fe:5c:ba:c0:71:28:e8:ed:df:23:f7:e0: da:05:d2:19:ef:1d:a8:99:c7:55:7b:2b:dd:ad:e1:36:b0:31: 77:e5:2b:a0 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE8Yl5SE+9xG2U+UzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MzgxZGQ1NDQtY2ViMy00ZTlhLTlhMTEtMTgxZDQ5ODBkYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIhdmtIcsH5DnMLN+QQuVC7brqPSUf8fKqva 6MnIu9nz6MO7TSkut9twUI0WVZgW5YNJjym+8ISP1PtsyI7eYLaeo3GumYpMnWpJ Io6OKGKBQ+k+d+6gnPP22Alk5Tg6hxJuM6tK9+xo0AugAEUrMdmgj0hBHcJ9mgBx Gty2840Jp/XkQ7/kguyU8Hv2YTU6tPjkmvJeiyyzSwtizdDgc9R3xGrrXXRD0T4r F6KYxlykeeSgnZtdiJ898v8lfWXbOXXNls4r0DjoIZG7A5fXXUYDlRfk65RY02Af LlpcjzGAfYP3/nQYfuEhAin1gvd6Yf1S3g6pJD7IEq9x/e+tcwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPZTyJxnynplTbHQTqm4MKpI+uXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHFAjokAf+4q61Vm7Gubfvjf4o8y vgQOfhuTeT8kVSE6gzP2nMdRywZVoYXDuNkDGbTmMUzeETyGcxSEzwwiijp4PVaL iPCz+/c6W9x4dBZVxnQ5OsxGDO6B97Q+9jEkbHEfu5vBCwKC04R0KjhI40y1eNAG uE8UbPM/N7d/QbPOQa4lEwqbh3A67tIiFDm/IXUa8iKRhmecfFSoHrQuGwCX9qw0 LW11084Og532M3RBf83PgVd7DAl+iVvPCyiIf8UmtX8RDS5v4EGqWHOPE89df9NY kXPcbBh76t1wyf5cusBxKOjt3yP34NoF0hnvHaiZx1V7K92t4TawMXflK6A= -----END CERTIFICATE-----Generated at Thu Sep 24 17:53:38 2026 by rpki-client