$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73251d2f-3975-37be-af5f-666462fcaad2.roa File: 73251d2f-3975-37be-af5f-666462fcaad2.roa (raw, json) Hash identifier: HGRHYeERZlibWj9UxvNxiX0egWjlS8fE3htXRbLjoDI= Subject key identifier: 40:6A:E6:5B:73:54:28:DE:B0:A4:CA:D3:D1:0C:0C:AB:11:3A:4F:D6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D1F8B6023079D3D16A600F7C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73251d2f-3975-37be-af5f-666462fcaad2.roa Signing time: Tue 10 Mar 2026 15:12:27 +0000 ROA not before: Tue 10 Mar 2026 15:12:27 +0000 ROA not after: Mon 08 Jun 2026 15:12:27 +0000 asID: 64249 IP address blocks: 45.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:8b:60:23:07:9d:3d:16:a6:00:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 10 15:12:27 2026 GMT Not After : Jun 8 15:12:27 2026 GMT Subject: CN=da329883-2caa-4db6-8df3-cf9564f27290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:92:10:80:40:dc:0e:f7:27:41:ab:c1:87: 36:a4:da:ed:4b:38:5d:91:63:cf:cd:1f:28:12:59: 4a:d0:17:ba:34:2a:2d:c4:b0:4d:39:4e:ec:02:91: fe:9b:f1:81:19:ea:63:7f:0e:69:b4:1e:08:ee:31: 1c:1f:11:5f:38:76:f3:e6:f2:39:64:32:29:ce:49: c2:10:41:8c:a7:32:f5:46:e6:f3:91:d0:f2:36:57: 3c:17:c0:33:2a:da:e9:32:af:7f:c1:f2:97:2e:ca: 17:e9:79:64:fe:b8:d8:0e:e6:17:e6:1c:b9:e1:c1: b8:77:f7:90:3c:b1:23:00:a9:79:44:06:12:69:55: 6a:10:e4:c0:f7:78:cf:07:41:c1:53:fc:f1:51:a3: bf:86:a0:69:18:0e:36:bc:ce:1f:cb:4d:c0:bb:b1: 4c:4c:48:9b:69:6e:e7:65:2e:7e:36:ae:db:09:cc: 33:57:ff:35:03:43:4d:99:55:29:2e:60:90:3f:d8: 65:be:ac:29:12:f0:e0:11:43:a1:58:e8:f5:19:ba: d3:82:31:3f:28:32:02:e2:3e:26:f5:02:cb:a4:f4: 90:d4:7c:75:71:f5:66:50:ac:40:bb:5e:49:33:3a: 7a:a9:75:d8:74:47:e4:7b:eb:b7:90:93:34:a5:57: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:E6:5B:73:54:28:DE:B0:A4:CA:D3:D1:0C:0C:AB:11:3A:4F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73251d2f-3975-37be-af5f-666462fcaad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6a:e4:fd:4c:ab:c5:3d:2f:cb:9d:c9:67:9d:1c:e5:5c:29: 8d:a8:4f:32:8b:ab:74:c3:a1:cd:c8:42:50:86:4c:39:c9:bc: 64:25:c9:af:12:5c:01:07:a8:7d:f0:aa:a9:32:a0:e6:9f:bd: 7b:79:5f:53:fd:0d:94:0a:61:6a:58:6b:5e:7a:26:6c:ab:3d: 1d:a8:08:82:8b:9e:02:7e:0d:c9:c2:40:0e:06:d7:8b:82:14: 24:b0:52:a1:eb:04:f1:39:c6:21:27:71:dd:98:99:51:46:a5: 84:53:19:bc:58:c9:f7:80:d7:60:2c:41:02:78:15:32:62:92: 1e:54:f9:0a:41:d1:c1:f6:2f:d2:55:19:39:7b:3a:da:4b:dd: 50:e6:2f:44:e5:3c:bc:03:f3:7e:22:07:36:ce:41:13:9f:4f: eb:9f:8c:0a:3f:5b:4c:92:ee:19:b1:b6:39:09:9e:d3:67:1b: 1b:f4:f9:95:07:83:a7:e2:b7:cf:50:90:23:77:89:66:4a:ca: 33:5e:cf:b0:72:b5:15:f5:c0:00:82:92:33:b0:73:2e:4d:cf: bf:1f:14:ed:9c:03:d8:dd:8c:ad:d6:a1:a1:6e:ec:d7:6f:d6: 73:cf:d8:97:35:7c:f0:c7:ae:a2:a4:24:42:1a:a6:a4:09:d0: 8c:13:9c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fi2AjB509FqYA98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMxMDE1MTIyN1oXDTI2MDYwODE1MTIyN1owLzEtMCsGA1UEAxMk ZGEzMjk4ODMtMmNhYS00ZGI2LThkZjMtY2Y5NTY0ZjI3MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCCSEIBA3A73J0GrwYc2pNrtSzhdkWPPzR8o EllK0Be6NCotxLBNOU7sApH+m/GBGepjfw5ptB4I7jEcHxFfOHbz5vI5ZDIpzknC EEGMpzL1RubzkdDyNlc8F8AzKtrpMq9/wfKXLsoX6Xlk/rjYDuYX5hy54cG4d/eQ PLEjAKl5RAYSaVVqEOTA93jPB0HBU/zxUaO/hqBpGA42vM4fy03Au7FMTEibaW7n ZS5+Nq7bCcwzV/81A0NNmVUpLmCQP9hlvqwpEvDgEUOhWOj1GbrTgjE/KDIC4j4m 9QLLpPSQ1Hx1cfVmUKxAu15JMzp6qXXYdEfke+u3kJM0pVdxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBq5ltzVCjesKTK09EMDKsROk/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzMyNTFkMmYtMzk3NS0z N2JlLWFmNWYtNjY2NDYyZmNhYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRq5P1Mq8U9L8udyWedHOVcKY2oTzKLq3TDoc3IQlCGTDnJvGQlya8S XAEHqH3wqqkyoOafvXt5X1P9DZQKYWpYa156JmyrPR2oCIKLngJ+DcnCQA4G14uC FCSwUqHrBPE5xiEncd2YmVFGpYRTGbxYyfeA12AsQQJ4FTJikh5U+QpB0cH2L9JV GTl7OtpL3VDmL0TlPLwD834iBzbOQROfT+ufjAo/W0yS7hmxtjkJntNnGxv0+ZUH g6fit89QkCN3iWZKyjNez7BytRX1wACCkjOwcy5Nz78fFO2cA9jdjK3WoaFu7Ndv 1nPP2Jc1fPDHrqKkJEIapqQJ0IwTnMU= -----END CERTIFICATE-----Generated at Sat Mar 28 10:48:35 2026 by rpki-client