$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/2dafc46e-05da-32d9-a4ce-7f933266f843.roa File: 2dafc46e-05da-32d9-a4ce-7f933266f843.roa (raw, json) Hash identifier: WyJOgFcnWENVTW/ZppS9LiEsfw2DxxMNDbHTfrrtA+Y= Subject key identifier: 51:0B:3C:AD:DE:1D:1F:30:0B:B8:C9:72:30:8A:03:FD:3B:45:35:DB Certificate issuer: /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06 Certificate serial: 010D0C9F4328584F45429A009FF64819A0439F6D Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/2dafc46e-05da-32d9-a4ce-7f933266f843.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 976 IP address blocks: 45.59.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:9a:00:9f:f6:48:19:a0:43:9f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=40d2b174-2137-406a-93c3-51c98d1ccd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:2f:f9:98:4c:3f:f5:ad:b1:30:0b:af:27: ea:cc:45:ae:c1:84:c2:7c:2a:93:1b:ea:76:35:2b: ec:a5:2d:89:cc:22:0e:df:80:52:43:6f:c7:b6:d1: e8:39:99:d0:de:26:2b:a3:79:e8:40:e3:10:24:9b: fb:16:47:c4:fb:0a:61:a7:f1:d5:8c:bd:bd:1d:c9: ce:47:01:be:98:41:b9:2e:88:7e:66:e3:88:dd:29: 73:d3:50:9f:db:98:98:fd:b6:e9:02:06:97:50:99: 49:92:02:d3:2f:f3:e6:de:84:85:87:10:9d:ab:2a: 1d:f6:89:8e:89:0f:5d:8d:bc:31:8a:26:e8:cc:b4: 3a:82:ab:e4:48:e4:d9:7a:ff:29:b5:98:06:5c:2f: 4b:21:13:c9:89:92:bd:95:c9:17:32:18:60:4b:0f: 55:6e:4e:b9:b5:76:cd:eb:77:8a:cd:f8:de:82:78: 6f:98:c6:41:fb:7b:a3:ec:35:91:b9:ce:10:ea:3a: c9:af:62:75:70:12:b1:c4:a1:1e:b1:72:24:d2:7f: e8:2f:ba:c3:4a:6f:37:23:b1:3e:29:9a:a9:c3:cf: 7a:d9:69:08:77:da:cf:95:68:d8:27:ec:e9:cf:49: b6:b4:68:42:01:f6:90:7c:53:0f:00:c3:2d:16:af: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:3C:AD:DE:1D:1F:30:0B:B8:C9:72:30:8A:03:FD:3B:45:35:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/2dafc46e-05da-32d9-a4ce-7f933266f843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl X509v3 Authority Key Identifier: keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer sbgp-ipAddrBlock: critical IPv4: 45.59.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:34:ee:18:fa:f4:73:b0:38:83:5d:69:cc:0f:83:e4:59:93: 6e:86:09:4f:b2:36:14:17:26:04:2f:c4:27:ba:55:5a:dc:85: 3e:8a:8d:54:55:18:1f:b5:cf:89:00:7a:26:2b:05:ca:96:2e: a7:f3:0a:90:91:7e:09:50:24:e6:ca:19:c1:e4:ff:71:66:d1: 03:9f:6c:eb:63:9c:64:c8:21:70:fb:06:3b:15:5a:c6:ed:1d: 71:a1:a4:b4:a5:13:3b:b1:42:b2:61:c5:8a:fb:3c:d7:5f:c4: 2f:3e:9e:45:9e:2b:3a:71:09:0e:63:3c:7a:5a:01:90:b5:17: cf:cc:9b:e5:dd:4c:28:44:6a:96:20:66:f6:7a:27:62:99:4a: 55:3a:b7:c4:70:a8:1d:d2:ad:91:54:02:26:5e:3f:1e:f1:f3: e4:4c:5c:8b:4a:88:38:ce:6e:12:f9:c4:3a:72:97:d3:8e:0d: a8:0c:4f:ec:be:b7:ce:cd:87:8f:44:46:00:ba:7c:01:12:80: af:a7:12:b5:bf:6c:b8:85:fd:4f:ed:9d:bf:e0:13:48:63:61: f8:d0:3d:41:47:32:21:cb:d9:e4:ef:79:9c:88:02:c0:ae:4f: 06:c9:68:58:36:03:38:d6:49:83:8f:9a:bd:5e:48:3f:bf:9a: 0a:04:6d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpoAn/ZIGaBDn20wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkzOWVlN2UtODFiMi00NmNmLTlhNDMtMzY0N2ZmMTMy YTA2MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NDBkMmIxNzQtMjEzNy00MDZhLTkzYzMtNTFjOThkMWNjZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1wv+ZhMP/WtsTALryfqzEWuwYTCfCqTG+p2 NSvspS2JzCIO34BSQ2/HttHoOZnQ3iYro3noQOMQJJv7FkfE+wphp/HVjL29HcnO RwG+mEG5Loh+ZuOI3Slz01Cf25iY/bbpAgaXUJlJkgLTL/Pm3oSFhxCdqyod9omO iQ9djbwxiibozLQ6gqvkSOTZev8ptZgGXC9LIRPJiZK9lckXMhhgSw9Vbk65tXbN 63eKzfjegnhvmMZB+3uj7DWRuc4Q6jrJr2J1cBKxxKEesXIk0n/oL7rDSm83I7E+ KZqpw8962WkId9rPlWjYJ+zpz0m2tGhCAfaQfFMPAMMtFq9spQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFELPK3eHR8wC7jJcjCKA/07RTXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5 ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3ZmYxMzJhMDYvMmRhZmM0NmUtMDVkYS0z MmQ5LWE0Y2UtN2Y5MzMyNjZmODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTkzOWVlN2UtODFiMi00NmNmLTlh NDMtMzY0N2ZmMTMyYTA2L2E5MzllZTdlLTgxYjItNDZjZi05YTQzLTM2NDdmZjEz MmEwNi5jcmwwHwYDVR0jBBgwFoAUQmeYS3HKGRxt4aBeVAy4qvqLKGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3 ZmYxMzJhMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB007hj69HOwOINdacwPg+RZk26GCU+yNhQXJgQvxCe6VVrchT6KjVRV GB+1z4kAeiYrBcqWLqfzCpCRfglQJObKGcHk/3Fm0QOfbOtjnGTIIXD7BjsVWsbt HXGhpLSlEzuxQrJhxYr7PNdfxC8+nkWeKzpxCQ5jPHpaAZC1F8/Mm+XdTChEapYg ZvZ6J2KZSlU6t8RwqB3SrZFUAiZePx7x8+RMXItKiDjObhL5xDpyl9OODagMT+y+ t87Nh49ERgC6fAESgK+nErW/bLiF/U/tnb/gE0hjYfjQPUFHMiHL2eTveZyIAsCu TwbJaFg2AzjWSYOPmr1eSD+/mgoEbYA= -----END CERTIFICATE-----Generated at Tue Oct 6 13:55:44 2026 by rpki-client