$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa File: dcedc562-55ee-3cc4-bd1d-c5234b144386.roa (raw, json) Hash identifier: UuB7DvLjICzpEAfrR1m9uaO4IrVuFGRdB/LKJpqkbDM= Subject key identifier: 42:31:D5:6C:6F:EF:03:B7:53:EC:BD:42:31:13:F7:75:59:D8:22:05 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584D0EA7B5185BACD29B7B9AFC00 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 394337 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b5:18:5b:ac:d2:9b:7b:9a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=4aafd8ae-4bb5-49ba-9067-5b1f1360f987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:6d:bb:ce:b2:b0:e1:06:aa:82:72:a4:5e: a8:ec:45:ac:f1:69:73:f4:6b:17:81:39:94:c0:d8: e2:54:ad:ad:40:0c:27:f8:ce:75:bc:89:f6:00:14: 52:03:01:76:c1:9d:e5:d7:2f:f1:75:91:da:64:cf: a2:26:49:39:d8:85:ae:b9:e9:18:9e:5d:32:d9:0c: e5:ca:6a:f2:58:57:1a:56:0c:e8:f1:33:c9:55:a1: dc:7d:32:47:42:6f:72:9e:e6:82:96:40:f6:7c:60: 4a:22:00:2d:44:1b:fe:5b:7a:44:81:11:da:6c:d1: 33:15:36:51:90:05:b4:b8:ea:77:06:3b:6e:c2:97: 85:64:87:7f:27:63:21:5f:50:50:0b:44:b1:7a:ec: 33:7c:e9:e4:2b:d6:52:f7:51:8a:7c:39:b1:fc:59: 59:3a:11:86:65:51:a6:87:6d:b1:b5:65:cb:5c:54: aa:1b:5e:22:81:96:3d:8c:83:da:80:e9:86:73:79: f1:50:23:2d:74:c9:9c:1c:ec:97:c8:a7:40:63:09: 67:86:7a:07:a0:94:44:9b:69:3c:3d:7f:df:16:27: 17:73:5e:97:fa:14:5b:14:49:a2:c2:ba:24:06:e4: e3:97:7a:bf:d2:bc:91:7c:d2:11:5f:cd:89:23:71: 5b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:31:D5:6C:6F:EF:03:B7:53:EC:BD:42:31:13:F7:75:59:D8:22:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:58:7b:3d:a0:98:a9:86:93:04:dc:90:32:48:3d:19:03:b0: e1:33:58:78:c3:f8:bc:c1:db:f9:99:6c:2b:6e:25:fa:5d:2e: 27:bb:5e:60:6f:6a:39:a6:ab:58:fa:1c:df:06:28:5c:55:a3: 26:35:91:79:5e:fe:fc:a2:29:53:a3:5f:9e:14:08:43:42:07: ec:ee:c4:65:dc:ce:56:4e:16:40:cc:ff:72:84:31:de:e7:c7: ac:e8:80:7e:2c:89:f6:1f:69:3c:a4:58:d0:9b:38:7b:43:57: b6:00:1c:8e:6f:0b:2b:5c:18:01:a2:56:83:6b:97:b7:05:bb: 13:d0:5a:5a:8a:9f:45:65:fe:01:bb:6e:12:97:2f:43:30:a8: 7f:4d:68:47:f5:cc:7c:8f:85:6e:60:1c:3d:1f:d1:72:bb:10: 2b:a2:d0:0c:06:5c:06:0b:38:83:0a:9e:e4:d0:27:9e:d9:5b: 05:5f:77:9d:97:dc:79:8e:31:2b:b2:d9:28:a6:10:82:9e:2e: f0:1f:dc:ba:11:0c:fa:f8:74:95:a7:5e:a7:68:a1:f5:8c:30: 77:53:1d:0c:c0:b5:a2:ee:6d:9d:46:b4:55:03:8e:90:75:08: 0c:54:b9:9b:93:0e:e6:ae:31:3c:d3:d0:76:be:f8:8f:8a:39: 63:f5:46:f3 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE0Op7UYW6zSm3ua/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NGFhZmQ4YWUtNGJiNS00OWJhLTkwNjctNWIxZjEzNjBmOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzRtu86ysOEGqoJypF6o7EWs8Wlz9GsXgTmU wNjiVK2tQAwn+M51vIn2ABRSAwF2wZ3l1y/xdZHaZM+iJkk52IWuuekYnl0y2Qzl ymryWFcaVgzo8TPJVaHcfTJHQm9ynuaClkD2fGBKIgAtRBv+W3pEgRHabNEzFTZR kAW0uOp3BjtuwpeFZId/J2MhX1BQC0SxeuwzfOnkK9ZS91GKfDmx/FlZOhGGZVGm h22xtWXLXFSqG14igZY9jIPagOmGc3nxUCMtdMmcHOyXyKdAYwlnhnoHoJREm2k8 PX/fFicXc16X+hRbFEmiwrokBuTjl3q/0ryRfNIRX82JI3Fb6wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFEIx1Wxv7wO3U+y9QjET93VZ2CIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvZGNlZGM1NjItNTVlZS0z Y2M0LWJkMWQtYzUyMzRiMTQ0Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJNYez2gmKmGkwTckDJIPRkDsOEz WHjD+LzB2/mZbCtuJfpdLie7XmBvajmmq1j6HN8GKFxVoyY1kXle/vyiKVOjX54U CENCB+zuxGXczlZOFkDM/3KEMd7nx6zogH4sifYfaTykWNCbOHtDV7YAHI5vCytc GAGiVoNrl7cFuxPQWlqKn0Vl/gG7bhKXL0MwqH9NaEf1zHyPhW5gHD0f0XK7ECui 0AwGXAYLOIMKnuTQJ57ZWwVfd52X3HmOMSuy2SimEIKeLvAf3LoRDPr4dJWnXqdo ofWMMHdTHQzAtaLubZ1GtFUDjpB1CAxUuZuTDuauMTzT0Ha++I+KOWP1RvM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:32 2026 by rpki-client