$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa File: 4a1f018a-6442-314f-b3c0-e11651be1890.roa (raw, json) Hash identifier: Y7lpcB8qE74W/hspsyAyhErjjEOB08Sz/24xyrHZRNw= Subject key identifier: DC:D5:C2:64:41:D3:F7:88:BC:FF:0A:42:D0:54:1D:E0:2F:71:FB:F5 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584F189799409E95F9468A61B900 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:99:40:9e:95:f9:46:8a:61:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=5244daba-e01e-4440-8b09-b5e82126c435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:19:1e:9f:2f:dc:7d:fd:9b:60:ee:79:61: c4:e0:56:27:78:38:20:62:ec:67:13:57:11:06:72: 2e:7b:67:f1:45:a7:da:30:ad:3e:fb:b0:59:a4:26: 26:fb:fd:93:f0:59:1f:5b:27:fd:c3:40:9b:14:8c: 65:82:b3:0b:42:7e:bd:2b:84:d9:9a:69:de:9d:76: f8:62:7a:6b:22:22:94:85:92:04:45:49:87:6b:4b: 1e:1e:b2:66:28:08:10:8c:3d:ef:9b:17:a8:77:78: 56:df:fe:b3:0a:40:d7:ae:14:d9:34:cf:3d:f1:4e: e6:2a:47:1a:4e:3a:b2:08:04:33:69:f6:57:16:63: 1c:74:5f:ac:94:30:91:aa:f9:22:78:58:9e:b6:08: 43:81:c3:67:6e:b4:55:4a:b9:c8:15:f4:4e:c7:9b: 38:2d:94:96:89:85:e8:f1:38:5c:22:71:6e:10:1e: fc:a1:5e:71:ee:db:e6:61:1d:85:9d:71:be:f7:23: 42:9e:3c:89:6c:0a:a5:4e:7d:b4:9c:c9:27:c9:d3: ed:d9:e4:be:8a:cf:70:d4:ad:e6:e5:14:92:9d:31: 91:ec:a2:a6:f8:12:6a:eb:8e:50:24:ad:c4:83:1d: a4:e7:28:b7:30:33:9f:5c:bf:30:63:cb:38:53:17: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D5:C2:64:41:D3:F7:88:BC:FF:0A:42:D0:54:1D:E0:2F:71:FB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3c:02:6f:06:42:e3:b8:81:e6:15:58:c4:29:17:f7:cc:85: 33:f7:ab:1a:9f:69:13:2f:ca:5c:7c:6b:bf:54:11:fe:86:3b: 21:70:7e:1f:8e:65:e1:c7:9b:8c:b4:a3:11:4f:8d:a4:20:b8: 39:6f:17:1e:1a:02:f0:da:20:7c:58:a2:47:c5:59:45:32:70: 2d:5d:a7:92:9e:fa:dd:76:81:1c:5d:ae:f3:06:16:16:3f:97: 11:0e:3a:56:9b:89:b0:3d:62:51:2d:d5:6e:fa:dd:48:1b:4d: 28:29:c8:c0:71:e0:22:35:ef:19:18:7a:f8:04:d8:c6:fa:75: 74:5f:2c:1c:22:d9:c4:44:27:a9:23:2f:7f:67:ff:5a:2c:3a: 4a:b5:73:79:7f:79:3a:05:59:52:18:ed:4c:9a:e7:bf:fa:cb: a6:17:d6:e6:9e:31:50:72:6b:5f:cb:01:87:e3:4a:9a:4e:5a: 86:8b:a4:09:7a:67:c1:67:01:68:7e:e7:a8:ae:96:81:67:d7: b1:9a:b9:a0:cb:a5:34:a5:36:3e:91:3f:ef:11:9f:40:15:42: d4:ab:f5:f3:d3:27:f1:64:40:24:d2:0c:0f:7f:8d:11:3b:21: 04:28:5f:d8:4f:7b:b9:54:f5:d2:13:ca:1e:3b:45:bd:27:4d: dc:5a:d3:50 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE8Yl5lAnpX5RophuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NTI0NGRhYmEtZTAxZS00NDQwLThiMDktYjVlODIxMjZjNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgsZHp8v3H39m2DueWHE4FYneDggYuxnE1cR BnIue2fxRafaMK0++7BZpCYm+/2T8FkfWyf9w0CbFIxlgrMLQn69K4TZmmnenXb4 YnprIiKUhZIERUmHa0seHrJmKAgQjD3vmxeod3hW3/6zCkDXrhTZNM898U7mKkca TjqyCAQzafZXFmMcdF+slDCRqvkieFietghDgcNnbrRVSrnIFfROx5s4LZSWiYXo 8ThcInFuEB78oV5x7tvmYR2FnXG+9yNCnjyJbAqlTn20nMknydPt2eS+is9w1K3m 5RSSnTGR7KKm+BJq645QJK3Egx2k5yi3MDOfXL8wY8s4UxeEnQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNzVwmRB0/eIvP8KQtBUHeAvcfv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvNGExZjAxOGEtNjQ0Mi0z MTRmLWIzYzAtZTExNjUxYmUxODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHk8Am8GQuO4geYVWMQpF/fMhTP3 qxqfaRMvylx8a79UEf6GOyFwfh+OZeHHm4y0oxFPjaQguDlvFx4aAvDaIHxYokfF WUUycC1dp5Ke+t12gRxdrvMGFhY/lxEOOlabibA9YlEt1W763UgbTSgpyMBx4CI1 7xkYevgE2Mb6dXRfLBwi2cREJ6kjL39n/1osOkq1c3l/eToFWVIY7Uya57/6y6YX 1uaeMVBya1/LAYfjSppOWoaLpAl6Z8FnAWh+56iuloFn17GauaDLpTSlNj6RP+8R n0AVQtSr9fPTJ/FkQCTSDA9/jRE7IQQoX9hPe7lU9dITyh47Rb0nTdxa01A= -----END CERTIFICATE-----Generated at Mon Sep 21 09:43:11 2026 by rpki-client