$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa File: b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa (raw, json) Hash identifier: ZFuwpjqv3P9TL6M46383SzDESnbEMte1wUTBCjtIA10= Subject key identifier: CF:38:53:90:79:C9:44:1C:CE:59:A4:E4:08:3B:10:90:BA:48:B6:1E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D2A74EE9D01274A509F3BCC80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 6079 IP address blocks: 45.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ee:9d:01:27:4a:50:9f:3b:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=659cdee9-b1d7-4bb1-9fc2-4bee2cd745cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4e:c5:d4:cb:4b:73:ca:18:1b:0f:74:f5:79: 8a:88:af:4c:42:2e:3b:5c:40:f7:23:39:25:ee:6f: f3:7d:77:21:3e:02:42:af:0a:e9:03:c5:0f:39:d5: 4c:42:fa:08:c6:4d:3d:5f:28:f2:fc:be:d5:17:81: 44:a2:2a:9a:05:ab:94:5f:e6:4a:6b:59:7f:9b:2a: a5:7f:76:49:62:81:95:19:a9:4a:81:4b:39:6e:b3: 41:12:2c:2b:e0:d5:c2:43:e6:55:b0:3e:37:dd:3d: 6b:6e:b2:3a:78:f5:f4:36:9b:4a:ee:87:d9:70:df: 0f:cb:fb:7a:f7:7f:b2:49:f3:53:c8:a7:ca:45:c0: 4d:9e:6f:b5:a6:43:25:28:e8:03:50:ce:a3:76:73: 5c:4d:4a:c7:d7:ef:9d:21:ea:01:b4:eb:56:2d:00: 80:ba:d2:33:ca:a3:4a:39:85:f7:bf:e1:8a:2b:be: bb:f3:8d:cf:82:4a:bd:84:22:dd:55:96:43:0a:a8: 3e:2e:35:f6:1c:ef:1c:9c:92:13:36:35:8e:b7:58: 41:83:de:c6:e8:58:33:6c:79:39:4f:f8:82:5c:da: 13:6f:73:d4:b2:21:d0:fa:d2:ee:d2:db:4e:a3:ca: 16:3f:9d:c3:bb:a4:16:cd:0b:54:ca:42:36:b2:91: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:38:53:90:79:C9:44:1C:CE:59:A4:E4:08:3B:10:90:BA:48:B6:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1a:4c:d0:3a:4c:f4:4b:13:2e:79:36:03:82:c1:50:d9:12: d5:2c:a9:19:2a:54:4f:5d:9e:ed:3d:29:4a:b5:74:cf:6c:c4: 9c:64:6a:32:3f:94:68:12:7c:88:8a:0f:d4:d6:fd:5b:ed:b5: 38:d0:01:28:19:b6:f5:fc:a2:50:54:05:64:fc:75:20:44:fa: 6a:ed:c7:bc:e7:74:4e:77:95:b5:36:68:1c:67:39:6b:c4:3a: b9:1a:cf:ed:2a:ef:58:ac:3b:c8:fb:84:c8:34:ab:70:c0:3e: c8:5e:a4:2c:50:1e:2b:cd:be:2c:5f:ec:de:f1:a1:de:75:22: fa:63:fb:c4:0d:c3:93:32:55:b3:d0:f6:91:2d:24:c6:c9:bd: bf:87:43:fc:c4:0a:e0:38:c3:d0:0d:83:a1:d5:ec:3c:8f:13: 04:b5:c9:bd:d9:22:b2:df:19:91:5d:66:0b:00:5b:bb:02:6c: 83:c6:67:e8:a8:e9:9d:48:54:ac:cc:85:91:39:f2:88:4e:89: aa:6c:a8:e7:7e:c6:00:8b:de:4c:ab:46:d9:6d:e2:c4:23:8b: bf:f7:70:7d:a0:5e:4a:ed:6a:14:9d:62:2f:da:a2:17:73:db: cd:18:09:6b:90:b7:37:aa:c5:a1:3b:78:55:a4:e6:59:21:b3: 2c:08:20:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO6dASdKUJ87zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjU5Y2RlZTktYjFkNy00YmIxLTlmYzItNGJlZTJjZDc0NWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk07F1MtLc8oYGw909XmKiK9MQi47XED3Izkl 7m/zfXchPgJCrwrpA8UPOdVMQvoIxk09Xyjy/L7VF4FEoiqaBauUX+ZKa1l/myql f3ZJYoGVGalKgUs5brNBEiwr4NXCQ+ZVsD433T1rbrI6ePX0NptK7ofZcN8Py/t6 93+ySfNTyKfKRcBNnm+1pkMlKOgDUM6jdnNcTUrH1++dIeoBtOtWLQCAutIzyqNK OYX3v+GKK767843Pgkq9hCLdVZZDCqg+LjX2HO8cnJITNjWOt1hBg97G6FgzbHk5 T/iCXNoTb3PUsiHQ+tLu0ttOo8oWP53Du6QWzQtUykI2spHa9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM84U5B5yUQczlmk5Ag7EJC6SLYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjkxMjBkNjItNTViMC0z MDU3LWJmZTQtMzNjNWNiNzJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8aTNA6TPRLEy55NgOCwVDZEtUsqRkqVE9dnu09KUq1dM9sxJxkajI/ lGgSfIiKD9TW/VvttTjQASgZtvX8olBUBWT8dSBE+mrtx7zndE53lbU2aBxnOWvE Orkaz+0q71isO8j7hMg0q3DAPshepCxQHivNvixf7N7xod51Ivpj+8QNw5MyVbPQ 9pEtJMbJvb+HQ/zECuA4w9ANg6HV7DyPEwS1yb3ZIrLfGZFdZgsAW7sCbIPGZ+io 6Z1IVKzMhZE58ohOiapsqOd+xgCL3kyrRtlt4sQji7/3cH2gXkrtahSdYi/aohdz 280YCWuQtzeqxaE7eFWk5lkhsywIIKo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:05 2026 by rpki-client