$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa File: 4a1f018a-6442-314f-b3c0-e11651be1890.roa (raw, json) Hash identifier: lYD1Nulb4XWOrFChkHPEz419TfWWT/K+XCkjo1rIxEg= Subject key identifier: 99:94:85:4D:70:00:53:B9:8F:8A:D9:81:BC:47:CB:07:18:EE:6B:99 Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a Certificate serial: 010D0C9F4328584CB551D8FB9AF848F50CDB5180 Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 14618 IP address blocks: 45.45.196.0/22 maxlen: 24 208.74.168.0/21 maxlen: 24 2607:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d8:fb:9a:f8:48:f5:0c:db:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=8c4a3297-4796-4de5-812d-b59920ad7233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:02:ae:ea:9e:df:a7:a3:64:b7:47:21:6d: ee:03:82:d8:20:80:d2:69:58:f3:0d:3f:28:79:74: 50:c9:ee:be:c9:41:a6:d1:cf:63:06:40:fd:c1:23: be:60:01:57:4c:7d:83:4b:2b:31:ae:b2:ff:ff:09: a2:37:30:47:29:52:eb:7f:eb:a6:c2:d8:c4:a2:84: 0c:19:fb:d5:93:02:59:c8:17:d2:63:02:27:a3:9d: 32:45:94:40:ba:fd:4e:51:34:f1:cf:97:4b:ed:94: c7:79:23:31:14:42:97:22:55:bc:30:79:e7:e5:bc: b6:bd:c5:2c:e5:18:e3:0c:15:eb:07:01:87:5a:44: ec:03:60:1d:74:87:dd:8f:e3:ad:13:8a:28:f4:37: c5:18:17:5c:7a:3d:45:d2:bc:b5:67:93:6f:c8:16: cc:72:4c:93:96:8c:b4:39:d7:01:8a:5f:11:37:71: a9:9b:d8:f1:fc:7d:e9:1b:30:7f:96:ae:85:bd:11: 7e:9b:9e:f0:23:e3:50:7b:07:e9:31:ef:de:35:0f: 5f:36:75:4b:93:cb:44:86:de:fe:ac:23:66:c1:a2: 8b:29:4e:14:ca:06:37:fb:18:40:8a:98:da:44:21: be:f6:a7:89:b2:a8:a2:d1:7a:04:3a:d8:9c:2f:e5: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:85:4D:70:00:53:B9:8F:8A:D9:81:BC:47:CB:07:18:EE:6B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl X509v3 Authority Key Identifier: keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer sbgp-ipAddrBlock: critical IPv4: 45.45.196.0/22 208.74.168.0/21 IPv6: 2607:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cc:86:4f:1c:d5:8b:94:86:07:cc:66:14:f4:86:ee:ae:a3: ca:a1:20:ce:aa:1c:06:79:85:18:11:79:60:77:32:10:90:ec: f6:76:b3:81:64:51:0a:a1:2f:f1:ed:65:c1:e1:33:4e:b0:6d: 7c:47:2e:e5:19:8c:ac:27:b0:a6:cb:63:4e:4e:8e:f5:61:7c: 7b:4d:f6:90:b2:52:09:0f:a1:30:35:6f:e2:14:11:cb:27:e6: 71:fd:1e:10:67:6e:e2:43:dc:da:ed:c0:d6:5a:5e:f6:f8:5e: 12:d0:d9:4f:87:77:5e:b3:f3:d3:50:aa:3e:b6:40:cc:2b:ba: 9a:ef:c0:e6:b3:4d:99:5d:dd:25:31:33:4a:ac:8d:35:0d:05: e7:69:22:a9:65:ab:08:4f:a7:e4:e3:39:0a:83:78:37:cc:9e: 99:82:b5:d2:02:0e:b5:c9:80:1b:c0:54:52:65:35:54:83:e9: 7e:aa:8a:57:4b:f1:db:07:c2:5d:17:c9:ed:94:d1:ff:56:d0: be:dc:d0:dc:b4:52:a1:7e:7a:af:51:37:d3:bc:13:c5:f8:7e: a0:8a:06:a2:f2:08:40:df:0c:23:87:26:0c:f4:c0:f1:55:af: 6d:af:75:e0:1d:df:ba:0c:12:aa:cc:d7:b9:08:fe:cd:54:10: 49:a2:e9:64 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEy1Udj7mvhI9QzbUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj NTBhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk OGM0YTMyOTctNDc5Ni00ZGU1LTgxMmQtYjU5OTIwYWQ3MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij4Cruqe36ejZLdHIW3uA4LYIIDSaVjzDT8o eXRQye6+yUGm0c9jBkD9wSO+YAFXTH2DSysxrrL//wmiNzBHKVLrf+umwtjEooQM GfvVkwJZyBfSYwIno50yRZRAuv1OUTTxz5dL7ZTHeSMxFEKXIlW8MHnn5by2vcUs 5RjjDBXrBwGHWkTsA2AddIfdj+OtE4oo9DfFGBdcej1F0ry1Z5NvyBbMckyTloy0 OdcBil8RN3Gpm9jx/H3pGzB/lq6FvRF+m57wI+NQewfpMe/eNQ9fNnVLk8tEht7+ rCNmwaKLKU4UygY3+xhAipjaRCG+9qeJsqii0XoEOticL+V/zQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFJmUhU1wAFO5j4rZgbxHywcY7muZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5 ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvNGExZjAxOGEtNjQ0Mi0z MTRmLWIzYzAtZTExNjUxYmUxODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD 0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAbMhk8c1YuUhgfMZhT0hu6uo8qh IM6qHAZ5hRgReWB3MhCQ7PZ2s4FkUQqhL/HtZcHhM06wbXxHLuUZjKwnsKbLY05O jvVhfHtN9pCyUgkPoTA1b+IUEcsn5nH9HhBnbuJD3NrtwNZaXvb4XhLQ2U+Hd16z 89NQqj62QMwruprvwOazTZld3SUxM0qsjTUNBedpIqllqwhPp+TjOQqDeDfMnpmC tdICDrXJgBvAVFJlNVSD6X6qildL8dsHwl0Xye2U0f9W0L7c0Ny0UqF+eq9RN9O8 E8X4fqCKBqLyCEDfDCOHJgz0wPFVr22vdeAd37oMEqrM17kI/s1UEEmi6WQ= -----END CERTIFICATE-----Generated at Thu Feb 26 23:48:47 2026 by rpki-client