$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa File: 21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa (raw, json) Hash identifier: 6KB8HJN0Zwt7f3hoKze0gK7VQx5AF57o6zB05yNWwNQ= Subject key identifier: B2:74:D1:43:8F:98:BC:3D:FB:0A:A2:B4:95:15:C0:E1:0E:28:BB:AD Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584F49755B4C2A2D688B3A4C5300 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54702 IP address blocks: 45.45.197.0/24 maxlen: 24 45.45.198.0/24 maxlen: 24 45.45.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:5b:4c:2a:2d:68:8b:3a:4c:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8246350-9638-4560-9f98-4e8d61befc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4a:56:fe:33:06:2c:43:11:77:8e:89:df:17: 74:d8:b6:2d:61:67:be:d5:d5:76:f8:83:00:e8:36: 71:3e:9a:58:91:84:05:14:db:20:d4:e9:d2:e6:d9: f1:a1:3e:39:8c:03:27:57:02:90:b8:01:cd:9f:05: dd:46:de:e9:cc:a0:c1:35:3f:20:34:fc:8a:3d:f2: b5:11:37:c0:ff:bb:0f:5f:d1:ab:b5:a6:6d:ab:42: 5a:09:e9:70:7d:c5:5f:cf:45:17:fa:30:36:cd:56: 21:e1:4f:8b:b4:a3:f1:87:3f:b8:5a:a0:04:0a:b1: be:05:6f:c5:46:a5:95:18:82:8f:d9:91:c7:45:40: 22:bb:ea:65:6a:5a:70:99:2c:72:55:f3:e2:0f:66: 87:c2:1c:c2:94:eb:ce:ea:e8:af:3d:34:7b:8b:61: 35:df:6f:c8:fa:69:63:1d:56:3d:42:a4:83:6a:1c: 14:fd:6d:0c:3b:f1:69:94:cc:1c:d9:ff:22:95:3c: 2d:7c:0d:c6:e9:e2:76:3c:08:c0:16:e8:fc:52:63: dc:4c:98:c9:e3:fd:2b:4f:f3:28:eb:df:cc:c8:5f: 4d:44:8a:36:d4:6d:e0:86:8e:af:86:12:38:71:0f: c5:b4:c3:44:08:13:a4:af:4e:33:fd:24:8a:60:c5: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:D1:43:8F:98:BC:3D:FB:0A:A2:B4:95:15:C0:E1:0E:28:BB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/21898d06-ea0d-34a9-b415-0bdef4dd9dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.197.0-45.45.199.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:69:95:6b:e6:41:4f:b4:e9:18:0a:f5:be:a7:a5:41:6f:29: 6b:bb:19:df:1e:5d:cb:22:af:8d:6c:f0:7d:c9:f8:83:f5:15: ec:8d:bd:0f:b3:7a:a5:99:13:6c:2d:de:36:a2:c5:9c:07:a1: 77:34:b1:47:d0:49:23:6f:24:09:bb:ea:f0:6e:54:1b:3a:fd: 2e:45:7e:f9:16:e3:de:15:bf:ba:6e:66:d8:c5:66:33:cd:1e: 25:3d:be:2f:f6:02:7c:a8:47:f4:29:0c:64:40:f0:35:a1:d9: 28:43:5c:63:52:45:c7:d3:89:a9:84:d2:67:7b:ad:c7:30:79: d5:71:1a:dc:4b:1a:69:29:71:a5:57:f5:8c:f9:8e:80:ca:26: ad:c9:23:fa:31:f0:5d:2f:7b:76:fd:5d:b3:a9:f4:bf:65:c9: 78:ea:30:2f:95:09:56:a3:80:3e:22:e8:9b:0a:07:f2:b8:51: 7b:4b:63:a5:33:49:bd:ab:cb:ad:13:70:89:4d:9f:03:c6:a0: 30:90:ed:50:40:70:d1:bd:2f:ac:40:0c:a9:55:a2:dc:ea:db: 3a:8c:52:3b:f0:4e:b8:cc:1a:93:d0:bf:e4:b5:3e:c1:5b:50: 55:aa:d5:b9:61:9a:69:4c:e4:3b:de:3c:7e:d8:1f:01:1f:25: 24:f9:2b:9e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdVtMKi1oizpMUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjgyNDYzNTAtOTYzOC00NTYwLTlmOTgtNGU4ZDYxYmVmYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEpW/jMGLEMRd46J3xd02LYtYWe+1dV2+IMA 6DZxPppYkYQFFNsg1OnS5tnxoT45jAMnVwKQuAHNnwXdRt7pzKDBNT8gNPyKPfK1 ETfA/7sPX9GrtaZtq0JaCelwfcVfz0UX+jA2zVYh4U+LtKPxhz+4WqAECrG+BW/F RqWVGIKP2ZHHRUAiu+plalpwmSxyVfPiD2aHwhzClOvO6uivPTR7i2E132/I+mlj HVY9QqSDahwU/W0MO/FplMwc2f8ilTwtfA3G6eJ2PAjAFuj8UmPcTJjJ4/0rT/Mo 69/MyF9NRIo21G3gho6vhhI4cQ/FtMNECBOkr04z/SSKYMWyPwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLJ00UOPmLw9+wqitJUVwOEOKLutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMjE4OThkMDYtZWEwZC0z NGE5LWI0MTUtMGJkZWY0ZGQ5ZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtLcUD BAMtLcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABGmVa+ZBT7TpGAr1vqelQW8pa7sZ3x5dyyKvjWzwfcn4 g/UV7I29D7N6pZkTbC3eNqLFnAehdzSxR9BJI28kCbvq8G5UGzr9LkV++Rbj3hW/ um5m2MVmM80eJT2+L/YCfKhH9CkMZEDwNaHZKENcY1JFx9OJqYTSZ3utxzB51XEa 3EsaaSlxpVf1jPmOgMomrckj+jHwXS97dv1ds6n0v2XJeOowL5UJVqOAPiLomwoH 8rhRe0tjpTNJvavLrRNwiU2fA8agMJDtUEBw0b0vrEAMqVWi3OrbOoxSO/BOuMwa k9C/5LU+wVtQVarVuWGaaUzkO948ftgfAR8lJPkrng== -----END CERTIFICATE-----Generated at Fri Sep 25 18:44:10 2026 by rpki-client