$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa File: 1faf7ad3-e3f9-3487-b235-101953ee16ec.roa (raw, json) Hash identifier: YXPadoEYIs0DZxRgfHDndtovDVp9ctJ9XonBvPC7CCg= Subject key identifier: D1:09:6C:DD:4D:82:F6:BD:5F:27:A5:8E:1D:28:5C:2D:94:CA:1B:5B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B110C0A8B07540A8BE8F94500 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 6079 IP address blocks: 45.58.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0a:8b:07:54:0a:8b:e8:f9:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=4d071f03-fcb5-462c-ba65-f2a22ca22ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:88:50:82:78:a2:b8:14:15:47:4c:04:b6: 84:2f:fc:52:21:cb:19:ed:d1:25:64:6e:fa:7b:a5: 61:a9:86:1c:95:d4:6f:10:ce:16:3c:a0:2f:84:57: d4:36:8f:1e:dd:5c:83:dc:29:da:a7:dd:87:aa:86: f3:3c:d7:d3:d9:12:69:0f:b8:20:4e:c8:52:09:91: 01:91:7a:a4:d3:3a:56:af:32:8a:ac:d3:b1:bb:f0: 7f:20:6e:1b:25:47:1e:63:e1:b2:46:e7:58:fd:75: 11:d4:9a:68:6f:05:ee:f8:89:96:21:6d:81:2a:68: b6:5c:96:1b:0e:b0:36:b4:6b:6a:41:07:46:60:b2: ec:e0:2c:34:d0:4c:67:6c:3f:ca:8a:9a:21:e5:19: a9:00:2c:6c:b3:92:3d:2b:2f:11:7c:f7:26:28:60: 52:42:21:1b:e6:8f:35:51:27:94:5a:03:e1:35:47: bc:43:ea:4a:5b:d8:44:24:63:3e:4b:50:88:92:c9: ec:42:59:9e:3f:52:91:2a:bc:56:f3:05:a2:fc:79: 27:40:e2:34:a2:c5:6a:c8:48:e4:6a:ce:ae:af:4f: 3f:76:ae:cc:55:5d:2d:ec:64:9c:38:91:65:47:52: 46:1a:76:ec:06:3e:33:de:29:e2:19:18:a1:9a:28: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:6C:DD:4D:82:F6:BD:5F:27:A5:8E:1D:28:5C:2D:94:CA:1B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9c:06:1a:7b:e3:dc:80:ba:00:b1:79:f0:99:24:80:0d:32: fb:bf:15:9a:ce:34:31:e3:c7:ea:55:73:6a:2f:4a:b2:1f:94: 91:77:c0:39:5e:2d:2b:23:1a:24:12:73:00:f7:5e:73:4d:6f: 1b:18:5b:65:5c:7e:2b:da:fa:cc:5a:a5:90:0c:a8:a8:0c:5a: 69:4e:78:87:16:c4:ed:85:ad:52:36:f6:c6:e3:11:ac:11:80: 49:97:45:2d:ba:ff:3f:9a:be:44:59:22:d3:44:b5:dd:9a:85: 35:27:13:ef:26:aa:b4:0c:42:02:1d:1d:5a:df:3a:e2:f7:8f: 6f:cd:79:ae:ce:a6:7f:5a:fe:43:1d:76:d8:a1:f7:34:92:3f: 4a:90:e7:e8:aa:a6:ad:70:3b:6a:6a:27:a4:86:4b:7e:63:c6: 1d:f8:7b:29:eb:15:31:d0:8d:79:41:7b:0b:42:7c:5a:c2:42: 60:db:4a:2c:3d:24:5b:33:37:c4:81:e4:fe:d8:f6:67:f9:01: 81:ea:4f:a1:3d:99:41:c9:27:84:1e:ec:f5:5c:51:be:d0:f3: c0:4e:10:24:a8:b0:1f:22:78:6f:08:2e:77:5e:dd:da:0b:80: 24:a9:06:9a:dc:9a:63:1f:43:93:d6:07:06:6c:d5:e4:65:4a: 76:3e:2a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAqLB1QKi+j5RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGQwNzFmMDMtZmNiNS00NjJjLWJhNjUtZjJhMjJjYTIyYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+2IUIJ4orgUFUdMBLaEL/xSIcsZ7dElZG76 e6VhqYYcldRvEM4WPKAvhFfUNo8e3VyD3Cnap92HqobzPNfT2RJpD7ggTshSCZEB kXqk0zpWrzKKrNOxu/B/IG4bJUceY+GyRudY/XUR1JpobwXu+ImWIW2BKmi2XJYb DrA2tGtqQQdGYLLs4Cw00ExnbD/Kipoh5RmpACxss5I9Ky8RfPcmKGBSQiEb5o81 USeUWgPhNUe8Q+pKW9hEJGM+S1CIksnsQlmeP1KRKrxW8wWi/HknQOI0osVqyEjk as6ur08/dq7MVV0t7GScOJFlR1JGGnbsBj4z3iniGRihmiitcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEJbN1Ngva9Xyeljh0oXC2UyhtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWZhZjdhZDMtZTNmOS0z NDg3LWIyMzUtMTAxOTUzZWUxNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELTrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2cBhp749yAugCxefCZJIANMvu/FZrONDHjx+pVc2ovSrIflJF3wDle LSsjGiQScwD3XnNNbxsYW2Vcfiva+sxapZAMqKgMWmlOeIcWxO2FrVI29sbjEawR gEmXRS26/z+avkRZItNEtd2ahTUnE+8mqrQMQgIdHVrfOuL3j2/Nea7Opn9a/kMd dtih9zSSP0qQ5+iqpq1wO2pqJ6SGS35jxh34eynrFTHQjXlBewtCfFrCQmDbSiw9 JFszN8SB5P7Y9mf5AYHqT6E9mUHJJ4Qe7PVcUb7Q88BOECSosB8ieG8ILnde3doL gCSpBprcmmMfQ5PWBwZs1eRlSnY+Kj4= -----END CERTIFICATE-----Generated at Sat Oct 11 18:40:43 2025 by rpki-client