$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78e45031-f34c-3abf-b588-f12af8ea15d0.roa File: 78e45031-f34c-3abf-b588-f12af8ea15d0.roa (raw, json) Hash identifier: IgzIj+eOgpim+8vNfBqFkBJwSctNTltqfzR5+tDpLYM= Subject key identifier: 63:DE:2A:8F:63:35:53:BF:13:3A:FE:CC:B4:3E:48:13:65:F3:56:1A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EED51FB9B08E091822D2B1F00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78e45031-f34c-3abf-b588-f12af8ea15d0.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 46450 IP address blocks: 64.52.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fb:9b:08:e0:91:82:2d:2b:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=08d5596a-fc65-44ec-9fc9-1841f7883cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:f9:3e:f0:5c:ae:37:1b:49:db:4f:d4:aa: 88:cf:7e:6a:84:fe:e3:ee:0b:45:97:e7:05:05:44: 34:b5:c9:1f:44:be:c3:f5:5b:53:91:bd:35:46:78: 42:1d:c1:72:54:9d:08:39:90:ec:34:de:f0:89:87: c2:e5:52:05:9d:fb:72:00:9e:bc:70:a6:d4:46:fd: a9:13:ba:60:d1:1a:14:70:f9:6e:c4:2c:df:c2:29: 83:b5:c0:e8:bf:9b:4b:b7:ee:fa:28:32:db:f3:41: 57:fd:a2:1f:4b:8f:5f:3c:b6:45:49:7d:fd:d9:4e: d1:d2:22:39:b3:9c:8a:3c:53:41:d6:fc:2d:76:01: 15:67:81:99:5c:ab:ae:eb:a2:b1:14:c1:02:34:3d: 98:64:29:0e:65:25:49:0c:59:4c:11:2a:34:91:74: fc:d0:0d:7d:5d:55:11:a6:25:15:09:d6:5d:39:c2: ac:b9:0d:22:04:0c:c9:83:54:6b:b1:03:1b:92:b9: 48:5d:84:1e:7d:2f:e6:f9:a9:b9:1f:c3:ca:63:88: 5a:e5:52:a6:a6:df:72:b5:8a:dd:c5:a6:a7:c1:a4: c5:ef:b0:71:38:13:f3:4e:aa:dc:3b:ba:78:b5:36: 92:4d:9f:2c:aa:b0:6c:a1:b5:b3:8d:b7:8c:0f:cc: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:2A:8F:63:35:53:BF:13:3A:FE:CC:B4:3E:48:13:65:F3:56:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/78e45031-f34c-3abf-b588-f12af8ea15d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 64.52.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ef:49:9a:41:da:8d:7b:cf:b6:e4:a4:51:75:3c:7d:e2:78: 58:8e:fb:a3:d7:81:61:7f:32:bf:df:ee:24:56:30:22:87:ba: bf:c7:22:b2:7c:63:23:1e:00:c3:5a:5b:ca:d1:51:7b:36:fe: 17:05:ae:fe:7b:74:98:51:b4:30:26:34:88:eb:c5:4f:90:ed: 71:e2:03:4e:0a:cd:77:c6:1f:4c:8b:92:65:ed:bd:d3:87:f0: ce:f6:3b:a3:25:ec:8e:9f:5d:94:4d:d6:0b:82:a9:43:74:6b: aa:70:ff:4f:c6:9b:04:83:04:e7:56:c6:24:1b:b7:82:9b:e8: aa:78:a9:4b:06:3c:23:6d:ad:ec:74:86:16:62:65:10:70:97: 21:47:d9:52:77:71:25:e4:28:3d:c7:cc:ba:5e:de:8d:99:f4: 99:78:eb:a5:53:7d:0e:36:05:59:cf:8f:64:6c:e8:a7:72:08: 7a:ab:b6:82:41:a7:98:50:8b:98:92:83:76:62:35:ff:9a:00: e0:dc:de:aa:08:4e:2b:6a:9d:27:30:43:25:fb:59:31:94:f9: e5:e4:c8:df:16:90:41:4e:62:37:c4:07:fd:8b:98:33:f7:a8: 62:71:bc:eb:20:fe:22:44:e9:e7:ae:2f:57:90:07:87:fe:f9: dc:e3:3f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfubCOCRgi0rHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MDhkNTU5NmEtZmM2NS00NGVjLTlmYzktMTg0MWY3ODgzY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmb5PvBcrjcbSdtP1KqIz35qhP7j7gtFl+cF BUQ0tckfRL7D9VtTkb01RnhCHcFyVJ0IOZDsNN7wiYfC5VIFnftyAJ68cKbURv2p E7pg0RoUcPluxCzfwimDtcDov5tLt+76KDLb80FX/aIfS49fPLZFSX392U7R0iI5 s5yKPFNB1vwtdgEVZ4GZXKuu66KxFMECND2YZCkOZSVJDFlMESo0kXT80A19XVUR piUVCdZdOcKsuQ0iBAzJg1RrsQMbkrlIXYQefS/m+am5H8PKY4ha5VKmpt9ytYrd xaanwaTF77BxOBPzTqrcO7p4tTaSTZ8sqrBsobWzjbeMD8zAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPeKo9jNVO/Ezr+zLQ+SBNl81YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzhlNDUwMzEtZjM0Yy0z YWJmLWI1ODgtZjEyYWY4ZWExNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrvSZpB2o17z7bkpFF1PH3ieFiO+6PXgWF/Mr/f7iRWMCKHur/HIrJ8 YyMeAMNaW8rRUXs2/hcFrv57dJhRtDAmNIjrxU+Q7XHiA04KzXfGH0yLkmXtvdOH 8M72O6Ml7I6fXZRN1guCqUN0a6pw/0/GmwSDBOdWxiQbt4Kb6Kp4qUsGPCNtrex0 hhZiZRBwlyFH2VJ3cSXkKD3HzLpe3o2Z9Jl466VTfQ42BVnPj2Rs6KdyCHqrtoJB p5hQi5iSg3ZiNf+aAODc3qoITitqnScwQyX7WTGU+eXkyN8WkEFOYjfEB/2LmDP3 qGJxvOsg/iJE6eeuL1eQB4f++dzjP5I= -----END CERTIFICATE-----Generated at Tue Sep 1 04:47:30 2026 by rpki-client