$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa File: 0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json) Hash identifier: +fcWVZ3VxqzdAg2Od5OwIyZL2OE6s1B6C1FqHSr0xv0= Subject key identifier: BA:52:0F:F1:4D:DC:72:2A:79:E7:2F:97:7E:4D:33:38:CF:0E:A9:50 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584D95EFF0E35EEA29F3167FA500 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8987 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f0:e3:5e:ea:29:f3:16:7f:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=451216b4-9e42-4cdb-827d-82e9bd96313c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:d3:f9:b4:aa:81:15:57:b5:04:ce:43:54: 11:2c:72:06:50:ce:ea:78:ee:a4:9a:94:e9:90:22: ad:50:0c:58:d8:0e:75:f5:f0:54:bd:1a:c7:37:bb: a9:06:0a:c3:2c:cf:d5:0c:2d:28:f2:8e:1f:17:0a: 56:93:86:54:2a:c4:d7:73:33:25:9a:88:da:91:83: 27:c6:b7:16:ca:c2:9b:db:95:ff:74:4c:00:ba:5a: ff:de:0c:db:57:5d:72:f7:b5:c9:08:21:2e:0f:d6: 91:87:ff:d6:bd:d2:d8:60:8c:9c:35:d2:42:9e:33: 9f:ba:12:19:14:a3:87:01:3a:e5:ff:56:73:13:1b: b5:72:3d:73:30:f8:fe:21:9b:e8:47:34:87:ce:13: 40:cc:23:c6:37:7b:68:3a:38:b6:36:90:b7:b8:43: 19:8b:08:95:6b:f4:86:e1:81:13:32:ab:0f:93:9d: c9:a2:bb:2e:c9:b1:e5:57:53:36:c8:be:ca:49:9a: 73:cb:42:31:4a:ad:f5:66:db:f0:6a:db:d7:31:2e: 1a:d6:a8:52:54:c1:95:96:df:65:aa:19:12:5c:8d: 0f:66:61:0f:31:e8:20:7d:b3:59:7d:f8:d3:dc:65: c4:97:e7:bd:f8:50:e6:bc:a6:24:ae:f3:06:b1:02: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:0F:F1:4D:DC:72:2A:79:E7:2F:97:7E:4D:33:38:CF:0E:A9:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:99:5f:8e:a1:04:36:49:ac:d4:3b:62:59:3b:a3:a5:ff:9a: 32:5e:20:e5:2c:45:96:ae:de:9e:2c:0c:04:1e:30:52:f2:e6: 1e:f6:90:37:9d:23:3d:a6:1a:43:4f:a9:60:8e:42:47:d9:aa: 50:78:3a:b6:8c:a1:19:a3:df:15:ad:f1:7f:aa:18:e3:ea:8f: fa:96:1b:53:82:f8:39:1e:26:82:c7:85:b5:80:87:1e:b9:ec: 7d:29:07:34:30:7d:41:65:de:15:1b:3a:c4:f6:0b:36:82:44: a5:ce:21:26:ed:1c:6c:f2:f7:00:91:ba:65:4d:76:0f:d0:3e: f3:eb:f5:ca:a8:c6:6a:5e:c5:4c:e0:24:0e:27:e3:80:2e:96: 22:3e:45:4d:b1:35:02:b6:0b:62:28:f1:46:3e:66:b2:a1:9a: 8d:de:e0:01:4c:56:b0:1b:4f:f9:20:ab:ae:3a:02:d7:75:10: a4:f6:71:49:ff:90:9c:73:54:9f:08:a6:95:5e:09:5e:f2:5f: 70:37:ed:6b:35:dc:f3:3c:38:7f:8c:66:01:79:ba:8b:2b:fa: 8d:17:22:72:b1:d7:d3:bf:c1:15:72:94:a8:53:d0:25:11:18: 5e:00:98:45:6f:bf:c7:8a:31:2c:4f:71:2c:4d:0b:86:5e:91: 8a:b1:d2:8a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE2V7/DjXuop8xZ/pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NDUxMjE2YjQtOWU0Mi00Y2RiLTgyN2QtODJlOWJkOTYzMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnszT+bSqgRVXtQTOQ1QRLHIGUM7qeO6kmpTp kCKtUAxY2A519fBUvRrHN7upBgrDLM/VDC0o8o4fFwpWk4ZUKsTXczMlmojakYMn xrcWysKb25X/dEwAulr/3gzbV11y97XJCCEuD9aRh//WvdLYYIycNdJCnjOfuhIZ FKOHATrl/1ZzExu1cj1zMPj+IZvoRzSHzhNAzCPGN3toOji2NpC3uEMZiwiVa/SG 4YETMqsPk53JorsuybHlV1M2yL7KSZpzy0IxSq31ZtvwatvXMS4a1qhSVMGVlt9l qhkSXI0PZmEPMeggfbNZffjT3GXEl+e9+FDmvKYkrvMGsQLBZwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFLpSD/FN3HIqeecvl35NMzjPDqlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH2ZX46hBDZJrNQ7Ylk7o6X/mjJe IOUsRZau3p4sDAQeMFLy5h72kDedIz2mGkNPqWCOQkfZqlB4OraMoRmj3xWt8X+q GOPqj/qWG1OC+DkeJoLHhbWAhx657H0pBzQwfUFl3hUbOsT2CzaCRKXOISbtHGzy 9wCRumVNdg/QPvPr9cqoxmpexUzgJA4n44AuliI+RU2xNQK2C2Io8UY+ZrKhmo3e 4AFMVrAbT/kgq646Atd1EKT2cUn/kJxzVJ8IppVeCV7yX3A37Ws13PM8OH+MZgF5 uosr+o0XInKx19O/wRVylKhT0CURGF4AmEVvv8eKMSxPcSxNC4ZekYqx0oo= -----END CERTIFICATE-----Generated at Wed May 13 04:29:03 2026 by rpki-client