$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa File: 4a1f018a-6442-314f-b3c0-e11651be1890.roa (raw, json) Hash identifier: lJBo+BgYishknTjJbGLhZGQ9KFYA1GsHj41y49MnaH8= Subject key identifier: 07:11:7F:A9:FD:B8:76:CE:22:C9:64:EF:FD:BF:56:D3:36:F5:CC:A4 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584E7634CF80027CD5C911BE6300 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:cf:80:02:7c:d5:c9:11:be:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=066f8d26-a8ea-4686-af93-349e421f348d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:a3:5c:33:1b:65:8b:36:ef:b4:34:03:6e: 16:a2:ca:47:48:75:80:32:ec:33:33:07:9e:20:62: 5a:63:71:3c:9f:d2:ba:29:ef:5b:40:5c:7f:34:84: 00:b3:b0:ab:56:82:48:4b:77:d4:73:2e:83:35:6c: f0:3d:32:06:fe:30:26:d6:28:a6:a4:92:f7:34:53: 24:58:13:90:be:1e:bc:b1:76:4f:8f:6f:a6:ba:6f: f7:72:23:4a:ea:85:6c:b4:1b:5c:d5:0c:9b:dd:c7: aa:2b:77:08:54:0a:9d:81:fe:b9:24:62:e3:ba:ef: 1a:32:51:e4:22:49:71:c4:c1:c5:cc:7f:15:97:99: 86:b2:eb:65:aa:12:89:f6:f4:06:b4:ff:fc:ca:5a: 1d:9c:66:7a:76:bf:19:ed:a8:1a:ef:e1:ce:cb:93: 57:12:9a:33:74:51:07:3a:dd:7e:07:3a:9c:50:ce: aa:82:a5:9b:6b:f8:d9:16:97:d8:ac:c9:ad:f7:08: a5:23:04:11:cb:5e:8b:c7:da:9d:57:b0:92:01:b3: fa:ea:cd:f5:34:49:98:a8:d2:ea:71:36:45:dd:9c: b0:8d:96:d9:09:1b:fa:7a:57:80:8b:86:25:ec:86: b6:8d:c1:e9:51:2b:e6:a2:a7:63:62:a6:df:75:c7: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:11:7F:A9:FD:B8:76:CE:22:C9:64:EF:FD:BF:56:D3:36:F5:CC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7b:a0:45:3a:1a:de:c7:e6:fc:23:04:bc:52:95:3d:d9:3a: 29:e5:bc:fd:ff:6d:53:e3:83:13:75:d7:23:85:c2:9a:42:bc: ef:ab:50:9c:6f:e1:66:5a:37:c0:f3:67:21:9f:da:d2:7b:9f: 75:9d:12:a6:b0:06:80:7f:ea:17:dd:c4:0a:a6:59:e9:9e:df: 43:95:3c:04:cd:bf:28:ad:90:9e:6a:ca:b0:5f:f9:c0:6f:9d: 60:e9:10:d9:45:39:fb:d2:0a:84:31:b0:25:62:5b:5e:49:76: 08:20:43:13:13:33:60:9a:9c:a0:22:90:99:08:8c:f3:99:02: 09:0d:ad:9c:bf:1b:2f:2d:3f:83:1b:42:05:76:74:3e:38:bc: 76:db:1a:c0:65:8f:54:64:a6:6b:d6:02:ac:f6:8c:b6:7a:ce: 8c:2d:64:83:65:72:cd:4c:bb:34:25:7a:c7:2a:84:ca:63:c0: 99:c5:7f:b7:c3:89:1a:3a:c9:86:8d:a3:97:63:e2:18:ef:aa: b7:bf:bd:a4:eb:b7:41:04:09:3a:9a:34:32:90:fd:a9:89:a9: 65:3f:ba:87:f8:ad:17:49:5f:bf:4c:79:36:5e:b6:49:b9:4b: 23:f1:d2:e5:b7:16:24:fd:24:65:9e:b5:60:92:c9:5c:2f:92: e9:71:1a:56 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE52NM+AAnzVyRG+YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MDY2ZjhkMjYtYThlYS00Njg2LWFmOTMtMzQ5ZTQyMWYzNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMqjXDMbZYs277Q0A24WospHSHWAMuwzMwee IGJaY3E8n9K6Ke9bQFx/NIQAs7CrVoJIS3fUcy6DNWzwPTIG/jAm1iimpJL3NFMk WBOQvh68sXZPj2+mum/3ciNK6oVstBtc1Qyb3ceqK3cIVAqdgf65JGLjuu8aMlHk IklxxMHFzH8Vl5mGsutlqhKJ9vQGtP/8ylodnGZ6dr8Z7aga7+HOy5NXEpozdFEH Ot1+BzqcUM6qgqWba/jZFpfYrMmt9wilIwQRy16Lx9qdV7CSAbP66s31NEmYqNLq cTZF3ZywjZbZCRv6eleAi4Yl7Ia2jcHpUSvmoqdjYqbfdcd92wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFAcRf6n9uHbOIslk7/2/VtM29cykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvNGExZjAxOGEtNjQ0Mi0z MTRmLWIzYzAtZTExNjUxYmUxODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJV7oEU6Gt7H5vwjBLxSlT3ZOinl vP3/bVPjgxN11yOFwppCvO+rUJxv4WZaN8DzZyGf2tJ7n3WdEqawBoB/6hfdxAqm Weme30OVPATNvyitkJ5qyrBf+cBvnWDpENlFOfvSCoQxsCViW15JdgggQxMTM2Ca nKAikJkIjPOZAgkNrZy/Gy8tP4MbQgV2dD44vHbbGsBlj1RkpmvWAqz2jLZ6zowt ZINlcs1MuzQlescqhMpjwJnFf7fDiRo6yYaNo5dj4hjvqre/vaTrt0EECTqaNDKQ /amJqWU/uof4rRdJX79MeTZetkm5SyPx0uW3FiT9JGWetWCSyVwvkulxGlY= -----END CERTIFICATE-----Generated at Tue Jul 14 08:57:59 2026 by rpki-client