$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa File: b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa (raw, json) Hash identifier: Vs2Xw2CNuK6KcMlW+ftLpxE+migiW2G4G5RjIi5oKyI= Subject key identifier: D6:FD:C5:06:85:06:11:74:49:60:0F:7E:9A:4A:54:C4:01:85:84:6F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F4F081A3BD86F1C3F40F095A0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 45.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:1a:3b:d8:6f:1c:3f:40:f0:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=a5db99f6-35f0-45d2-9146-ca9ad788b50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:34:be:8a:85:f3:2e:67:2f:44:d5:01:9f: 3f:36:13:ee:b6:ed:ac:75:ff:92:5a:5f:e0:f7:81: 35:e8:3c:52:1d:3a:04:09:61:e9:62:a8:1f:fa:ee: 00:73:90:e3:bc:10:e9:ad:ac:e5:58:da:56:36:0d: 0a:6e:22:64:f7:38:2d:d3:7d:e8:2c:9b:c5:a0:75: 04:15:f1:06:cc:d6:e1:45:3f:88:06:85:8e:cf:31: 33:c7:e0:b1:87:e5:bd:1f:6d:aa:97:b9:3b:d5:f4: d7:e1:dc:e5:75:0d:40:e8:78:65:aa:e2:f1:30:db: 3e:8f:eb:fc:15:00:a8:9d:25:bf:84:64:e4:4a:1a: da:dc:fc:28:fe:c0:42:1c:ec:53:28:49:06:74:b4: 8a:73:a1:32:e6:11:29:0c:e3:e1:64:dc:cf:97:34: e6:bc:6c:d6:f7:e9:bd:86:0f:c1:18:25:79:fb:5f: 8f:60:b1:2e:11:0d:e5:32:8d:09:52:c5:76:4d:af: b7:97:5f:c0:96:d6:35:9d:ec:6d:62:83:bb:60:46: 6b:67:b6:49:ab:19:57:d5:f5:f2:b4:1d:94:2e:03: fe:5f:4d:d9:c4:ed:44:e9:e4:5c:bb:45:b7:34:16: 9f:cb:c8:69:0e:a3:41:e1:52:a7:0f:f7:6b:40:6a: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:C5:06:85:06:11:74:49:60:0F:7E:9A:4A:54:C4:01:85:84:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ea:74:9d:30:e7:01:bc:98:9f:d9:41:c0:eb:e5:01:ad:23: 88:c3:ad:65:5a:b4:fe:e0:a3:af:fc:b0:40:4e:c4:c9:49:1d: 3b:9a:82:7f:53:e3:c9:d0:c8:df:47:ea:9b:41:1e:9a:d5:77: 79:c3:82:8e:b2:ff:a2:87:d6:7f:d7:89:01:1a:35:ba:e2:87: 2c:59:5f:c9:14:77:f7:49:8c:3a:2b:41:96:2f:9d:cf:13:ee: 43:8b:8b:4e:9e:6e:b1:ab:9d:1b:8b:ba:00:63:9b:a1:2a:19: 33:20:2c:16:37:03:a1:dd:80:3e:df:21:66:33:a4:a5:96:cf: 33:89:8a:5b:12:cf:b5:5c:95:12:77:31:05:f0:8b:14:54:4c: b0:74:c5:99:b7:1b:c5:f5:33:5d:ba:05:35:a0:c6:fe:7a:64: 9c:b5:79:7b:26:65:f2:cf:6b:1c:67:b4:42:52:65:da:d7:77: dd:32:ba:fe:eb:af:3b:b7:2a:a0:76:94:f9:e7:88:12:c3:a2: 28:54:18:3e:a1:80:2e:b3:6c:e5:21:be:32:76:62:f7:58:fb: dd:60:f8:a5:12:65:f8:99:93:0a:91:d0:aa:2f:45:38:63:68: 03:f9:b3:0a:43:8c:7b:d7:36:ad:1f:40:5d:d7:6c:10:3d:2e: 62:1e:62:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBo72G8cP0DwlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YTVkYjk5ZjYtMzVmMC00NWQyLTkxNDYtY2E5YWQ3ODhiNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIM0voqF8y5nL0TVAZ8/NhPutu2sdf+SWl/g 94E16DxSHToECWHpYqgf+u4Ac5DjvBDprazlWNpWNg0KbiJk9zgt033oLJvFoHUE FfEGzNbhRT+IBoWOzzEzx+Cxh+W9H22ql7k71fTX4dzldQ1A6HhlquLxMNs+j+v8 FQConSW/hGTkShra3Pwo/sBCHOxTKEkGdLSKc6Ey5hEpDOPhZNzPlzTmvGzW9+m9 hg/BGCV5+1+PYLEuEQ3lMo0JUsV2Ta+3l1/AltY1nextYoO7YEZrZ7ZJqxlX1fXy tB2ULgP+X03ZxO1E6eRcu0W3NBafy8hpDqNB4VKnD/drQGo43QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb9xQaFBhF0SWAPfppKVMQBhYRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjkxMjBkNjItNTViMC0z MDU3LWJmZTQtMzNjNWNiNzJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzqdJ0w5wG8mJ/ZQcDr5QGtI4jDrWVatP7go6/8sEBOxMlJHTuagn9T 48nQyN9H6ptBHprVd3nDgo6y/6KH1n/XiQEaNbrihyxZX8kUd/dJjDorQZYvnc8T 7kOLi06ebrGrnRuLugBjm6EqGTMgLBY3A6HdgD7fIWYzpKWWzzOJilsSz7VclRJ3 MQXwixRUTLB0xZm3G8X1M126BTWgxv56ZJy1eXsmZfLPaxxntEJSZdrXd90yuv7r rzu3KqB2lPnniBLDoihUGD6hgC6zbOUhvjJ2YvdY+91g+KUSZfiZkwqR0KovRThj aAP5swpDjHvXNq0fQF3XbBA9LmIeYuQ= -----END CERTIFICATE-----Generated at Thu Oct 22 10:34:04 2026 by rpki-client