$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa File: ddff14cf-541a-3e8a-a9fe-11e036c29959.roa (raw, json) Hash identifier: WL6nkEORvp7j71O312thLaYVRoIYVm+XZy0izZziuWY= Subject key identifier: 29:62:57:EB:7C:E4:3A:18:A9:86:67:44:56:ED:55:3D:E2:F9:61:A0 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584EA79C03D3CF83512FEBFA3140 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400304 IP address blocks: 45.59.116.0/24 maxlen: 24 66.23.193.0/24 maxlen: 24 104.36.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:03:d3:cf:83:51:2f:eb:fa:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6629cc89-2b1f-477d-b4ad-ba4f0ef7bf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8f:de:47:ad:0c:06:52:40:0d:28:d3:49:bd: a1:2d:af:32:e4:ee:e5:bd:ca:45:a8:86:6b:f6:62: 60:c6:03:e2:8c:5d:91:a5:d2:48:ac:55:51:7e:9d: 09:d0:6c:df:d0:cd:6a:dd:76:0d:9d:2b:53:66:f5: 09:45:ee:fd:b8:a6:d4:ac:05:86:05:3d:c3:a8:bb: 37:90:b9:7a:ad:73:3a:7b:fa:d5:41:8c:65:ce:1a: 4f:a3:85:b5:3d:bf:c6:57:2d:40:b0:f8:ed:d2:e7: 77:bd:e4:1a:31:eb:b3:6d:f1:a3:44:78:54:13:35: 5a:f4:2c:95:9e:93:0c:c6:ef:c3:34:31:e1:c7:3f: 61:35:31:e0:d2:a7:17:f9:21:d2:0e:69:b2:dc:28: a6:a7:9b:24:cc:14:a9:8d:33:61:1b:b6:ae:fb:99: f4:5a:e3:66:11:ab:b2:40:71:07:75:27:23:89:68: bc:1e:bc:9e:e7:db:3d:69:1f:69:9a:6e:38:aa:61: 81:92:51:a9:6d:de:a4:3a:eb:61:ee:92:bf:d0:03: 5b:b8:e0:cc:83:e9:d1:fe:db:65:91:fb:c1:be:f9: a0:98:55:cc:50:b4:aa:1c:96:45:a9:f7:44:6a:42: 82:ac:c5:c2:43:f1:5a:9d:6b:50:b6:34:87:be:dc: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:62:57:EB:7C:E4:3A:18:A9:86:67:44:56:ED:55:3D:E2:F9:61:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.116.0/24 66.23.193.0/24 104.36.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:19:ba:ab:99:96:df:2f:c7:12:55:2f:81:de:4a:56:49:d5: c2:04:72:a0:c7:bf:7b:b4:73:1c:4f:3f:fc:d5:37:2b:bd:ff: 26:f0:4f:37:12:72:4e:dc:c4:d5:26:7f:61:49:f7:a1:a2:2a: e8:38:78:d7:7f:c6:eb:ab:1e:73:61:79:39:0c:2a:78:87:3c: c0:3f:00:3f:d1:be:38:49:f3:f5:2f:84:f6:5c:06:25:66:66: 7f:d4:b5:79:a0:e6:41:2d:0b:fa:36:1b:1c:38:1e:9e:93:15: 3d:3f:69:30:29:e6:3c:90:38:c5:6c:ac:46:23:4c:5d:a9:bb: 77:bd:9b:4f:3c:0d:88:3a:c7:25:23:12:77:79:db:45:bf:50: ba:49:2f:2d:39:01:04:9e:43:68:43:35:9f:86:4d:eb:06:0e: 11:7b:2b:8c:51:a5:9f:f5:2a:39:e9:c9:b2:17:6b:61:19:12: 32:94:28:96:bb:91:bd:0b:32:f2:5c:fc:cc:22:7d:3a:0d:48: e6:8d:20:a7:5b:55:46:09:ff:eb:7c:cf:65:93:11:8c:32:e1: 55:76:c1:42:f9:29:09:32:ec:54:0c:c0:f4:a8:86:70:12:73: 24:94:f1:89:5e:e8:57:c2:9f:ed:22:24:02:87:46:11:37:6a: 61:89:05:be -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6nnAPTz4NRL+v6MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjYyOWNjODktMmIxZi00NzdkLWI0YWQtYmE0ZjBlZjdiZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI/eR60MBlJADSjTSb2hLa8y5O7lvcpFqIZr 9mJgxgPijF2RpdJIrFVRfp0J0Gzf0M1q3XYNnStTZvUJRe79uKbUrAWGBT3DqLs3 kLl6rXM6e/rVQYxlzhpPo4W1Pb/GVy1AsPjt0ud3veQaMeuzbfGjRHhUEzVa9CyV npMMxu/DNDHhxz9hNTHg0qcX+SHSDmmy3Cimp5skzBSpjTNhG7au+5n0WuNmEauy QHEHdScjiWi8Hrye59s9aR9pmm44qmGBklGpbd6kOuth7pK/0ANbuODMg+nR/ttl kfvBvvmgmFXMULSqHJZFqfdEakKCrMXCQ/FanWtQtjSHvtyoNwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCliV+t85DoYqYZnRFbtVT3i+WGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRmZjE0Y2YtNTQxYS0z ZThhLWE5ZmUtMTFlMDM2YzI5OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALTt0AwQA QhfBAwQCaCRUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFoZuquZlt8vxxJVL4HeSlZJ1cIEcqDHv3u0cxxP P/zVNyu9/ybwTzcSck7cxNUmf2FJ96GiKug4eNd/xuurHnNheTkMKniHPMA/AD/R vjhJ8/UvhPZcBiVmZn/UtXmg5kEtC/o2Gxw4Hp6TFT0/aTAp5jyQOMVsrEYjTF2p u3e9m088DYg6xyUjEnd520W/ULpJLy05AQSeQ2hDNZ+GTesGDhF7K4xRpZ/1Kjnp ybIXa2EZEjKUKJa7kb0LMvJc/MwifToNSOaNIKdbVUYJ/+t8z2WTEYwy4VV2wUL5 KQky7FQMwPSohnAScySU8Yle6FfCn+0iJAKHRhE3amGJBb4= -----END CERTIFICATE-----Generated at Thu Sep 10 06:52:06 2026 by rpki-client