$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa File: 37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json) Hash identifier: fDd4YC1CZoe1b97SCwvhkSRDIfPAYPntHiHQdNyfY4A= Subject key identifier: 4D:BD:9E:D4:8C:39:D2:11:24:CE:3A:89:47:47:F8:A1:61:2C:48:F5 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584E7634CF7276677F9995FF4A80 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:cf:72:76:67:7f:99:95:ff:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=b836f9a2-976e-4a8b-bd52-82a188580f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:69:11:02:57:0b:34:c0:26:d7:aa:08:a8: c3:a0:a5:1c:2e:b1:b1:9a:d0:a1:22:97:4e:ee:c4: a9:aa:4d:1e:b7:34:6d:66:fb:9c:c4:3a:52:02:90: d7:43:0d:cf:88:9d:46:ec:d4:cc:eb:cb:77:c2:bc: c6:45:22:ba:5c:9d:b2:08:0f:0d:fc:bb:8a:25:1d: d4:47:32:77:42:14:72:c9:74:d0:64:77:78:2a:ba: 40:c2:1a:49:11:7b:14:d0:41:e5:2c:36:12:c8:bf: d3:6e:84:28:cf:4d:c2:d4:52:53:b3:1f:fc:6c:64: 03:7f:ca:0a:57:33:0d:10:a8:63:b5:cd:48:9c:37: 96:72:ab:b6:41:07:e4:87:8a:fd:ab:a4:93:3d:01: 64:41:2a:28:9e:6d:12:4c:06:91:c7:3f:33:da:d3: b5:6c:c6:8c:d7:bd:e9:2e:b9:c1:ce:a7:57:04:2d: 6e:29:20:8f:f7:d1:0a:7c:47:a5:45:0e:1e:70:62: 1c:38:28:86:28:d1:09:7a:fb:31:e2:37:5b:01:4e: d5:5b:0e:51:d5:11:55:4a:63:0e:7c:29:5b:c8:d1: 11:10:b6:1c:90:4d:d3:e2:ed:c4:cb:82:55:92:94: a7:d7:67:ff:9b:0e:ad:2c:d7:b9:3e:ca:e8:ab:f9: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BD:9E:D4:8C:39:D2:11:24:CE:3A:89:47:47:F8:A1:61:2C:48:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:eb:f9:aa:a3:83:10:26:f9:89:fe:3f:40:15:56:a0:2d:d9: 13:35:36:ca:c1:6c:3c:3f:ea:62:a1:ac:84:01:97:02:7e:fa: 9d:6a:e4:f7:25:d9:d4:13:d1:1a:78:31:a1:a1:d2:f0:43:2b: 30:b5:d5:7b:de:ab:ea:52:81:e6:66:22:cb:c1:09:39:a7:04: 04:69:3b:1d:f1:54:15:16:67:47:9e:15:03:ff:36:73:f8:c9: c2:13:8d:3f:09:d8:7d:c0:23:1a:d5:d0:c5:9b:ed:f1:94:7c: d6:c4:7b:31:d4:7d:8e:e5:36:02:94:ee:58:f9:54:e4:d3:a1: 78:3b:96:ef:4d:ea:c2:03:8a:e4:9a:2e:a1:d6:d6:22:de:aa: 9d:41:19:a7:4f:f3:a3:03:24:57:34:9c:9e:73:a0:41:5d:26: ba:16:3c:3c:a9:1d:99:09:be:99:4b:ea:3a:2c:8b:31:ac:13: 7d:dc:f3:62:ea:f0:4c:19:a3:2c:6f:64:88:5f:64:ce:3d:47: 36:67:7b:e0:ad:4f:00:0f:38:ab:b7:8a:b0:37:0f:ff:df:b1: 9b:f2:ca:3d:cf:8f:24:51:44:01:ed:64:48:33:cf:94:89:d1: f2:2d:c9:c6:33:83:0a:08:40:27:19:86:3e:a7:12:3f:7a:52: ed:d8:b9:dd -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE52NM9ydmd/mZX/SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YjgzNmY5YTItOTc2ZS00YThiLWJkNTItODJhMTg4NTgwZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurBpEQJXCzTAJteqCKjDoKUcLrGxmtChIpdO 7sSpqk0etzRtZvucxDpSApDXQw3PiJ1G7NTM68t3wrzGRSK6XJ2yCA8N/LuKJR3U RzJ3QhRyyXTQZHd4KrpAwhpJEXsU0EHlLDYSyL/TboQoz03C1FJTsx/8bGQDf8oK VzMNEKhjtc1InDeWcqu2QQfkh4r9q6STPQFkQSoonm0STAaRxz8z2tO1bMaM173p LrnBzqdXBC1uKSCP99EKfEelRQ4ecGIcOCiGKNEJevsx4jdbAU7VWw5R1RFVSmMO fClbyNERELYckE3T4u3Ey4JVkpSn12f/mw6tLNe5Psroq/kgMwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFE29ntSMOdIRJM46iUdH+KFhLEj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMzdmOTdmOTctNzkzOC0z M2EyLTk0ZTktNTg0ZDQwOWQ3ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDr+aqjgxAm+Yn+P0AVVqAt2RM1 NsrBbDw/6mKhrIQBlwJ++p1q5Pcl2dQT0Rp4MaGh0vBDKzC11Xveq+pSgeZmIsvB CTmnBARpOx3xVBUWZ0eeFQP/NnP4ycITjT8J2H3AIxrV0MWb7fGUfNbEezHUfY7l NgKU7lj5VOTToXg7lu9N6sIDiuSaLqHW1iLeqp1BGadP86MDJFc0nJ5zoEFdJroW PDypHZkJvplL6josizGsE33c82Lq8EwZoyxvZIhfZM49RzZne+CtTwAPOKu3irA3 D//fsZvyyj3PjyRRRAHtZEgzz5SJ0fItycYzgwoIQCcZhj6nEj96Uu3Yud0= -----END CERTIFICATE-----Generated at Tue Jul 14 08:59:15 2026 by rpki-client