$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa File: b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa (raw, json) Hash identifier: CRdad3b8R/FGB0aqrT3b0Ur8VwPyYPOQCqGq6pOj1S8= Subject key identifier: D6:FE:E8:8C:17:A3:44:43:5C:4F:2A:DF:24:4B:13:31:28:B7:01:D5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EAD1C56A7E30C97FF3779A400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 6079 IP address blocks: 45.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:56:a7:e3:0c:97:ff:37:79:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=146415d4-afd4-4e73-a202-007fe392ce7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:eb:07:4b:3e:f9:16:e5:cb:2d:ad:80:28: 15:96:22:31:9f:25:20:98:97:0c:03:14:e4:af:87: ae:5e:50:1f:ac:5a:66:16:f3:3c:35:44:42:c9:2a: 52:87:12:89:84:8e:41:35:4d:b1:77:ab:88:77:7f: e4:02:28:fc:da:22:d5:19:c0:1f:8e:2d:a8:a6:05: 82:13:ea:1f:3b:84:ad:57:e6:d0:50:8e:c2:67:d3: c4:e3:40:eb:ac:64:2d:85:7d:03:b1:5b:1f:54:db: 8f:b1:a9:8f:67:69:3e:ca:01:d4:a6:54:42:5c:cd: 96:6b:89:16:3f:ac:e3:7f:3e:1d:aa:75:e2:9e:ca: 8a:c5:cd:3f:2c:83:ee:ed:08:1e:b1:5c:ef:dc:0d: 1e:b7:20:ac:50:31:51:06:d4:37:04:b8:e8:52:2b: 5a:7f:77:98:b1:d3:89:ac:97:fb:c6:62:1c:5c:ed: be:f6:c8:88:ac:20:6b:9a:4a:fe:ed:20:f1:f7:7d: 0f:a1:c9:af:dd:6f:57:6f:c8:af:a6:46:f9:e3:4d: 44:a8:b8:b0:24:bb:af:f8:37:27:6a:d1:26:37:9f: 43:d3:9f:bf:66:c4:33:63:a3:07:f3:0a:25:d0:a2: df:ff:8d:53:6a:a6:3e:f8:f4:75:44:22:e0:3d:be: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:E8:8C:17:A3:44:43:5C:4F:2A:DF:24:4B:13:31:28:B7:01:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:44:d6:38:9e:bd:2a:a0:a8:4f:51:91:99:ec:c3:b8:6f:7e: 52:dc:62:c2:47:08:8c:8c:b8:1b:b6:74:9d:8e:43:6e:ef:1c: e7:db:bf:2f:4b:97:ec:8a:a1:74:dc:4b:0c:74:a8:18:fb:a3: ec:6f:c5:d4:42:df:f8:eb:1e:7b:e2:0a:1a:4d:ee:4d:5b:10: 7a:ee:b2:39:0c:e2:1a:6d:4b:ac:4c:f6:2b:00:85:31:e5:ba: 28:c6:4c:88:7b:e6:19:8d:83:de:12:08:a7:39:a7:a1:3c:a4: b0:e2:e4:86:b2:d9:3c:5a:02:40:1a:60:c6:c5:4c:80:b8:f4: e3:8b:17:d1:5a:ab:58:4e:29:f8:37:86:cc:b9:d1:3d:59:8b: 06:97:d0:a5:09:7c:43:97:bf:02:fb:7e:c6:b1:9c:e1:78:39: ae:03:9e:02:f4:4d:d2:e4:de:a4:d1:07:b6:5f:fe:89:bb:6c: 4e:0c:c8:41:58:aa:35:94:e7:71:7e:9e:4b:d1:51:8d:7b:8b: d4:ba:22:57:19:92:2b:b0:10:e0:2c:32:bc:aa:9c:00:43:42: d7:fa:d4:bc:75:3a:6c:54:50:29:b6:b5:e6:5f:cb:bc:39:85: 38:cb:e5:99:c0:9c:87:b9:5c:42:fd:bf:73:8d:2b:81:ea:a7: 7b:13:37:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFan4wyX/zd5pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MTQ2NDE1ZDQtYWZkNC00ZTczLWEyMDItMDA3ZmUzOTJjZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bDrB0s++Rblyy2tgCgVliIxnyUgmJcMAxTk r4euXlAfrFpmFvM8NURCySpShxKJhI5BNU2xd6uId3/kAij82iLVGcAfji2opgWC E+ofO4StV+bQUI7CZ9PE40DrrGQthX0DsVsfVNuPsamPZ2k+ygHUplRCXM2Wa4kW P6zjfz4dqnXinsqKxc0/LIPu7QgesVzv3A0etyCsUDFRBtQ3BLjoUitaf3eYsdOJ rJf7xmIcXO2+9siIrCBrmkr+7SDx930Pocmv3W9Xb8ivpkb5401EqLiwJLuv+Dcn atEmN59D05+/ZsQzY6MH8wol0KLf/41TaqY++PR1RCLgPb5mpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb+6IwXo0RDXE8q3yRLEzEotwHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjkxMjBkNjItNTViMC0z MDU3LWJmZTQtMzNjNWNiNzJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNE1jievSqgqE9RkZnsw7hvflLcYsJHCIyMuBu2dJ2OQ27vHOfbvy9L l+yKoXTcSwx0qBj7o+xvxdRC3/jrHnviChpN7k1bEHrusjkM4hptS6xM9isAhTHl uijGTIh75hmNg94SCKc5p6E8pLDi5Iay2TxaAkAaYMbFTIC49OOLF9Faq1hOKfg3 hsy50T1ZiwaX0KUJfEOXvwL7fsaxnOF4Oa4DngL0TdLk3qTRB7Zf/om7bE4MyEFY qjWU53F+nkvRUY17i9S6IlcZkiuwEOAsMryqnABDQtf61Lx1OmxUUCm2teZfy7w5 hTjL5ZnAnIe5XEL9v3ONK4Hqp3sTNzE= -----END CERTIFICATE-----Generated at Tue Sep 1 04:08:01 2026 by rpki-client