$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa File: 37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json) Hash identifier: IvccbyUp9eD1LV7CeKJbjCdhzg/aaiEB+kjEEiOIlqg= Subject key identifier: 93:5F:0A:F4:78:51:6A:26:B6:85:FB:6E:73:14:07:EA:4A:81:9E:D5 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584D95EFF649309A394AD5E62D40 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f6:49:30:9a:39:4a:d5:e6:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=bada5a02-95b4-4d1b-a688-56c028a2fbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:d4:08:92:33:88:73:5c:4d:8d:ec:cd:79: 64:3f:d0:81:42:46:a9:db:d6:4a:0b:57:f9:5a:55: d6:0a:6b:1c:56:2b:87:3c:a8:d6:96:14:95:e4:fc: ef:5c:bd:8f:fc:0f:c7:08:9b:d2:3b:4b:96:df:a9: 59:81:98:d4:4d:26:a4:20:dd:e3:af:12:27:d9:1c: d3:9c:fd:dc:2b:bc:d9:4b:c6:78:e7:0c:80:49:59: a2:54:42:9c:73:1a:94:e4:1b:f3:d0:34:11:37:e3: 43:ba:e9:ec:ec:41:32:e2:79:54:f9:05:4a:49:5d: 70:76:18:66:1f:f6:58:69:fb:65:16:99:0d:d2:e4: 95:4f:27:97:1c:42:13:89:7b:1b:5c:96:b0:1e:e4: 1f:a2:68:6e:5a:4e:18:56:9e:42:fa:e4:37:ef:28: 5f:b7:ed:f3:14:65:59:d6:72:4c:03:cd:be:41:1f: ae:35:5e:3a:28:df:31:ca:27:3a:a8:20:f2:30:78: a5:d7:6b:1d:82:f2:7e:0f:43:3c:bf:c2:ba:38:15: 10:55:99:eb:6b:24:a9:55:07:b1:d0:95:a7:01:e8: d7:c7:8e:f2:19:1b:d9:a0:16:18:05:bb:d7:1d:9d: fa:2d:1f:1a:0b:96:2c:b9:12:09:23:e4:7d:af:de: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5F:0A:F4:78:51:6A:26:B6:85:FB:6E:73:14:07:EA:4A:81:9E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3b:d1:62:60:31:10:3e:a8:fe:26:4c:54:a8:d3:88:10:97: 0c:18:03:da:9b:b4:fa:b1:f7:34:9d:8e:73:c3:62:27:9e:0b: fd:8a:81:66:de:41:fe:65:e1:0c:c2:21:c8:19:cf:3d:67:94: 5f:3d:0a:5d:e5:a0:41:65:33:f1:78:5c:fd:80:3e:29:d2:6f: 03:10:0e:41:40:82:3f:8f:31:a1:02:93:e6:c0:a4:dc:3c:64: 41:f9:db:3d:95:b7:c7:5b:3a:4a:87:40:62:07:f6:fb:b6:1c: 35:52:73:5a:4b:7c:4e:46:87:e3:c8:ca:ae:3f:3b:e6:90:9c: d2:7b:c0:46:1b:16:a5:c3:9d:9d:fa:23:d2:af:01:39:49:00: 2e:84:5d:2e:3e:bf:d4:fc:a5:da:38:09:1f:17:4a:20:05:07: c6:de:0c:a3:e7:fa:27:bb:b9:97:fe:17:01:dd:3d:44:d9:09: 2a:ea:a5:14:82:c1:a9:51:2c:72:4e:87:eb:8a:53:97:38:d7: d9:02:ff:13:ca:9c:c6:b5:fe:e9:79:96:06:1f:93:57:85:35: 73:81:3b:84:c9:e9:d3:9b:a2:29:b9:f1:88:a7:90:b0:bb:2c: fd:0b:4c:21:60:52:3f:4e:0a:7f:db:35:61:27:a6:77:48:df: 8f:10:3b:bd -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE2V7/ZJMJo5StXmLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YmFkYTVhMDItOTViNC00ZDFiLWE2ODgtNTZjMDI4YTJmYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaTUCJIziHNcTY3szXlkP9CBQkap29ZKC1f5 WlXWCmscViuHPKjWlhSV5PzvXL2P/A/HCJvSO0uW36lZgZjUTSakIN3jrxIn2RzT nP3cK7zZS8Z45wyASVmiVEKccxqU5Bvz0DQRN+NDuuns7EEy4nlU+QVKSV1wdhhm H/ZYaftlFpkN0uSVTyeXHEITiXsbXJawHuQfomhuWk4YVp5C+uQ37yhft+3zFGVZ 1nJMA82+QR+uNV46KN8xyic6qCDyMHil12sdgvJ+D0M8v8K6OBUQVZnraySpVQex 0JWnAejXx47yGRvZoBYYBbvXHZ36LR8aC5YsuRIJI+R9r969AwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFJNfCvR4UWomtoX7bnMUB+pKgZ7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMzdmOTdmOTctNzkzOC0z M2EyLTk0ZTktNTg0ZDQwOWQ3ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEg70WJgMRA+qP4mTFSo04gQlwwY A9qbtPqx9zSdjnPDYieeC/2KgWbeQf5l4QzCIcgZzz1nlF89Cl3loEFlM/F4XP2A PinSbwMQDkFAgj+PMaECk+bApNw8ZEH52z2Vt8dbOkqHQGIH9vu2HDVSc1pLfE5G h+PIyq4/O+aQnNJ7wEYbFqXDnZ36I9KvATlJAC6EXS4+v9T8pdo4CR8XSiAFB8be DKPn+ie7uZf+FwHdPUTZCSrqpRSCwalRLHJOh+uKU5c419kC/xPKnMa1/ul5lgYf k1eFNXOBO4TJ6dOboim58YinkLC7LP0LTCFgUj9OCn/bNWEnpndI348QO70= -----END CERTIFICATE-----Generated at Wed May 13 11:11:52 2026 by rpki-client