$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa File: 37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json) Hash identifier: 636T3yxh2/gb5ZBDjJzQUmGYRQ6zOYiE3rjcV4lEQOg= Subject key identifier: 56:19:2F:0C:A6:15:A1:45:84:B5:2B:5F:F6:6C:D6:27:E1:97:4C:0B Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584CB551D8EC656B3958B5660180 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 16509 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d8:ec:65:6b:39:58:b5:66:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=259a6e4b-a6d7-4228-abad-ef13e4e79618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:e7:1c:2b:21:bf:e9:f2:54:ea:46:f5:b0: e7:e0:32:10:6f:1a:8e:2b:e3:cc:2c:5b:75:f1:bf: c5:f9:61:39:73:3c:7c:00:e5:e0:5a:ea:40:10:fb: 94:53:de:81:0d:ef:42:6a:0b:42:78:71:ab:d2:76: c1:8a:1b:99:c9:0e:31:ea:5e:fd:ed:3e:23:6e:ee: da:8f:58:c1:89:fc:44:d7:1d:5b:57:a4:50:28:89: 9a:c4:72:d4:ce:5d:56:81:e1:2d:6b:dc:9e:e1:d7: af:b5:90:53:7d:3c:73:57:80:58:50:5f:0a:92:b8: 3e:9e:96:cb:df:3f:19:bb:58:06:30:74:b1:52:ec: 50:62:35:e2:b3:5e:5d:b4:7d:ac:8d:07:df:f0:67: 22:7e:37:48:1a:51:41:d2:7b:9a:b1:68:e8:c3:f5: 96:96:7d:c1:4a:31:c0:ef:48:b0:7c:53:0b:64:6a: 5a:d2:64:1c:86:e4:cc:20:38:06:40:48:bf:93:dd: a8:24:4d:82:0c:e5:07:a2:b1:86:65:50:78:15:9c: ea:e5:9a:9f:9d:e1:c4:ff:21:74:df:1f:2b:a1:a2: c8:0d:db:40:7d:3a:fc:f6:9f:12:e8:50:50:b3:1d: f7:c7:1d:f7:d3:05:15:17:61:fc:00:0b:eb:95:0e: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:19:2F:0C:A6:15:A1:45:84:B5:2B:5F:F6:6C:D6:27:E1:97:4C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:76:bb:cf:b9:49:42:aa:d5:81:a0:33:b5:f3:2e:a6:20:a4: 54:f3:f9:63:b3:8b:c8:c9:e2:17:0b:7b:9d:5c:2f:19:f8:38: a9:48:cc:c8:72:1a:bb:17:e3:c7:bf:8e:17:87:8b:7e:37:ea: 15:c5:0e:e9:5a:47:00:75:31:b0:0a:a1:37:88:7a:0b:c9:d0: d7:07:66:fc:5a:78:76:b5:a3:3d:69:e6:d0:38:82:f3:cf:31: 1f:d6:44:af:84:4f:48:33:62:13:27:de:fa:c8:3c:36:9f:20: c6:d5:70:0d:5b:99:d1:d4:24:1d:38:17:cf:0f:68:b5:07:e8: 7c:41:c4:8c:8a:6c:89:ec:2b:51:93:4e:c3:1f:e2:ce:d9:09: ad:d4:7b:fa:c5:a0:1b:c7:3b:a1:7b:9c:16:d8:ba:a4:ba:28: 12:94:42:ce:61:db:5b:4f:c3:66:b1:71:71:12:c0:d6:b7:7a: ab:24:60:ec:49:44:4d:1d:a1:1d:93:a9:5c:12:66:0a:5e:f2: 9c:fb:b6:ee:97:94:5f:ad:80:b0:19:fd:da:63:a9:35:69:01: a3:67:00:1e:4b:67:67:b3:92:a8:f7:09:cc:af:f0:e6:cb:fb: f6:19:4c:a8:2d:bf:39:1b:8d:f4:4a:2e:0e:88:50:53:79:3e: 92:bf:5c:9d -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEy1UdjsZWs5WLVmAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MjU5YTZlNGItYTZkNy00MjI4LWFiYWQtZWYxM2U0ZTc5NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYHnHCshv+nyVOpG9bDn4DIQbxqOK+PMLFt1 8b/F+WE5czx8AOXgWupAEPuUU96BDe9CagtCeHGr0nbBihuZyQ4x6l797T4jbu7a j1jBifxE1x1bV6RQKImaxHLUzl1WgeEta9ye4devtZBTfTxzV4BYUF8Kkrg+npbL 3z8Zu1gGMHSxUuxQYjXis15dtH2sjQff8GcifjdIGlFB0nuasWjow/WWln3BSjHA 70iwfFMLZGpa0mQchuTMIDgGQEi/k92oJE2CDOUHorGGZVB4FZzq5ZqfneHE/yF0 3x8roaLIDdtAfTr89p8S6FBQsx33xx330wUVF2H8AAvrlQ7SsQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFYZLwymFaFFhLUrX/Zs1ifhl0wLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMzdmOTdmOTctNzkzOC0z M2EyLTk0ZTktNTg0ZDQwOWQ3ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIh2u8+5SUKq1YGgM7XzLqYgpFTz +WOzi8jJ4hcLe51cLxn4OKlIzMhyGrsX48e/jheHi3436hXFDulaRwB1MbAKoTeI egvJ0NcHZvxaeHa1oz1p5tA4gvPPMR/WRK+ET0gzYhMn3vrIPDafIMbVcA1bmdHU JB04F88PaLUH6HxBxIyKbInsK1GTTsMf4s7ZCa3Ue/rFoBvHO6F7nBbYuqS6KBKU Qs5h21tPw2axcXESwNa3eqskYOxJRE0doR2TqVwSZgpe8pz7tu6XlF+tgLAZ/dpj qTVpAaNnAB5LZ2ezkqj3Ccyv8ObL+/YZTKgtvzkbjfRKLg6IUFN5PpK/XJ0= -----END CERTIFICATE-----Generated at Thu Feb 26 23:50:26 2026 by rpki-client