$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa File: 4a1f018a-6442-314f-b3c0-e11651be1890.roa (raw, json) Hash identifier: WJOZADyIzRRq45FGPp/td8BVOSPiGeZLy/PitMwBDVA= Subject key identifier: D3:00:31:B3:2D:37:B8:28:89:CE:79:23:6C:F8:78:1D:21:2A:66:32 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584D95EFF656C6B50B898651B480 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 14618 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f6:56:c6:b5:0b:89:86:51:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=5c86b10b-f8fd-455f-b5d5-e48043849abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c7:66:dc:56:e9:0c:f4:51:df:6b:a6:9e:e4: 32:6f:ff:08:10:8e:96:78:c4:cf:9e:5e:2d:35:7f: a9:6d:b3:a9:b2:57:48:12:a6:0e:e5:c2:fe:72:b0: 06:45:8b:41:80:10:4f:71:96:ce:8b:8c:60:6d:48: 72:97:ae:42:39:32:4e:88:d2:98:2c:06:3c:30:c4: e1:8b:b2:d3:d1:ca:11:d3:e1:69:24:23:bd:34:26: 15:1d:ae:87:ab:ca:03:95:ff:01:5e:df:ee:70:61: 7e:f6:8c:a1:e2:1d:f9:1e:ef:d9:d1:d5:2f:e5:82: 80:44:b7:ea:ef:9d:fb:7b:c1:64:f6:71:e8:d2:d6: 15:77:2a:c5:6e:78:05:cd:a3:76:e8:56:92:71:98: 01:ef:a8:a6:f0:5f:a7:65:98:5c:41:95:c1:c0:6e: a8:01:67:9f:20:8e:30:c3:11:6d:8f:b6:fe:c8:fa: 40:a3:a4:03:a1:f6:fd:5b:03:a0:02:c8:d4:62:e7: 3a:73:81:a3:23:b7:f0:dc:ad:45:37:20:5d:0d:3e: 59:52:cc:e1:1e:6d:03:70:5f:bf:59:15:c8:f2:26: 1b:85:ad:fc:02:a5:35:b8:6e:9e:25:96:9c:2e:5b: f3:db:cb:5f:50:0b:59:78:f7:3d:cb:e6:5d:d6:db: 60:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:31:B3:2D:37:B8:28:89:CE:79:23:6C:F8:78:1D:21:2A:66:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3f:83:35:03:b1:58:5e:91:0f:d5:a1:df:ef:b9:e7:43:63: 70:ed:94:09:29:b9:78:0f:c9:fa:68:9d:89:d6:b0:55:5a:1d: 97:e5:f7:15:17:54:1c:c1:f3:75:76:7b:ff:71:36:08:4f:38: a7:d4:b0:29:f9:e2:fd:15:3d:2d:1b:9b:01:6b:ab:b0:6c:8e: 1f:36:95:98:51:5a:3b:ad:61:79:d8:7a:f0:f4:e1:2d:51:64: 91:ff:fc:03:34:c6:5f:f3:bf:cb:25:c6:29:82:21:63:57:31: 51:c2:8b:ab:41:66:f5:7a:71:08:75:29:95:96:03:f6:98:90: f8:7b:32:66:10:f6:12:fa:57:f0:c1:75:ac:f7:81:2d:1e:c2: 71:56:05:51:c0:6e:1f:26:b7:ce:82:ca:6e:65:6c:00:16:9a: e3:ea:14:a2:ad:ea:5a:c7:0c:31:6a:18:97:f9:8d:b4:a0:f3: 82:af:59:93:e2:77:8c:67:d1:b5:42:95:19:21:ff:c7:2b:77: ca:3e:34:6f:ce:b9:20:c5:13:a2:f7:a2:d3:22:65:38:85:bd: 63:bc:ad:87:22:fe:4d:bf:e8:78:85:27:dd:fb:02:ea:06:f3: 50:65:4c:52:e9:02:19:71:fa:0d:3d:ad:5e:54:97:87:63:ee: ab:7b:4e:2b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE2V7/ZWxrULiYZRtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NWM4NmIxMGItZjhmZC00NTVmLWI1ZDUtZTQ4MDQzODQ5YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcdm3FbpDPRR32umnuQyb/8IEI6WeMTPnl4t NX+pbbOpsldIEqYO5cL+crAGRYtBgBBPcZbOi4xgbUhyl65COTJOiNKYLAY8MMTh i7LT0coR0+FpJCO9NCYVHa6Hq8oDlf8BXt/ucGF+9oyh4h35Hu/Z0dUv5YKARLfq 7537e8Fk9nHo0tYVdyrFbngFzaN26FaScZgB76im8F+nZZhcQZXBwG6oAWefII4w wxFtj7b+yPpAo6QDofb9WwOgAsjUYuc6c4GjI7fw3K1FNyBdDT5ZUszhHm0DcF+/ WRXI8iYbha38AqU1uG6eJZacLlvz28tfUAtZePc9y+Zd1ttgyQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNMAMbMtN7goic55I2z4eB0hKmYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvNGExZjAxOGEtNjQ0Mi0z MTRmLWIzYzAtZTExNjUxYmUxODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIE/gzUDsVhekQ/Vod/vuedDY3Dt lAkpuXgPyfponYnWsFVaHZfl9xUXVBzB83V2e/9xNghPOKfUsCn54v0VPS0bmwFr q7Bsjh82lZhRWjutYXnYevD04S1RZJH//AM0xl/zv8slximCIWNXMVHCi6tBZvV6 cQh1KZWWA/aYkPh7MmYQ9hL6V/DBdaz3gS0ewnFWBVHAbh8mt86Cym5lbAAWmuPq FKKt6lrHDDFqGJf5jbSg84KvWZPid4xn0bVClRkh/8crd8o+NG/OuSDFE6L3otMi ZTiFvWO8rYci/k2/6HiFJ937AuoG81BlTFLpAhlx+g09rV5Ul4dj7qt7Tis= -----END CERTIFICATE-----Generated at Wed May 13 06:40:32 2026 by rpki-client