$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa File: b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa (raw, json) Hash identifier: bWNMBlwNPucEdsYOp9+XBQuKgtySP8zXEnea1a8pzjM= Subject key identifier: D2:84:29:60:22:C5:61:41:20:A1:5C:13:EC:91:8D:FA:80:29:52:75 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E0A6FFAFF20FA8CF776C58590 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 6079 IP address blocks: 45.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:fa:ff:20:fa:8c:f7:76:c5:85:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=03ba07e7-7fc8-4d3b-8395-b6705a7c812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:56:9b:a2:9e:92:f0:1b:49:1d:cc:71:91: 13:2d:d6:c8:7f:0a:b6:71:3e:ef:e2:33:b2:f4:f1: 3b:9a:73:f0:74:21:cf:dd:d7:73:6a:95:88:19:ab: 11:51:17:1e:82:e0:4a:22:7b:aa:3b:2b:6a:d7:6b: 58:8b:aa:86:d3:5f:43:9b:dd:0d:54:21:69:b9:98: 48:5c:fc:42:60:29:c3:33:42:13:46:9b:be:96:42: b6:b1:fd:3a:8c:3f:4b:ec:31:2e:10:6d:39:87:5a: e0:39:df:62:d9:aa:3d:a8:5a:32:52:2c:f4:14:af: 34:63:0a:fd:52:38:88:81:60:c8:0a:3d:20:e1:d4: c6:4d:70:04:8b:ee:e0:02:ef:c6:07:b8:96:36:93: c5:2a:9f:72:fc:bd:25:70:de:60:a2:19:3c:91:68: 1f:08:78:97:a8:40:17:ee:51:4b:de:09:4c:05:56: b6:89:7d:c9:04:bf:dc:69:f6:59:9e:71:fe:8a:cf: 0b:a6:31:a6:e7:cc:5d:73:18:30:eb:34:b1:2b:40: cf:d6:b4:58:a0:e2:61:fb:26:b6:24:fb:a6:09:f0: 44:e9:4d:bf:f4:84:47:9a:0a:a8:92:82:02:b7:20: ee:bd:de:c4:7c:75:83:ab:b3:c2:c0:d8:ab:ff:a6: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:84:29:60:22:C5:61:41:20:A1:5C:13:EC:91:8D:FA:80:29:52:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b9120d62-55b0-3057-bfe4-33c5cb72a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:76:64:4b:7f:8c:27:da:20:d0:ff:bd:aa:3c:17:7d:b1:c2: 17:86:d3:8f:c8:1f:bd:fd:67:c8:35:b9:d4:49:b9:e5:b0:e0: cb:00:e7:0d:e3:e8:79:43:74:09:17:b1:4f:1c:d2:bf:5f:0a: 99:ff:0a:19:1e:f5:4b:0a:b9:84:3c:3d:cb:9f:a6:64:f3:ec: 43:52:c9:4c:b4:f1:3c:c5:0b:6b:1d:09:de:eb:c7:ed:23:18: 6e:3c:0c:71:cd:4a:e5:25:6f:84:f6:b9:99:ca:f0:dd:9b:f5: 02:71:e4:a1:98:58:cd:2c:e7:76:ea:a8:0a:43:b8:46:fb:f7: d1:c8:2d:e9:74:47:e8:bb:fa:99:a8:d6:7a:df:6f:99:b4:1d: 08:5a:0b:a3:7f:b4:b1:43:f7:33:d1:57:2e:dd:a9:d2:47:b0: 2c:39:1e:ca:48:67:64:b8:88:3d:d4:d8:0e:5c:a1:5e:0b:fb: 9f:ca:61:8b:92:e9:02:bb:18:06:c3:84:13:0b:21:22:b1:5b: 2d:5e:5f:9e:e5:96:d0:5b:88:ed:23:8a:45:16:34:d7:a8:60: 55:e9:8a:72:3d:5f:c9:e3:be:35:8b:de:07:e4:64:38:cc:64: e6:01:3b:39:4b:6d:84:09:79:fa:15:d8:ff:07:8e:7d:be:f2: 16:ed:99:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/r/IPqM93bFhZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MDNiYTA3ZTctN2ZjOC00ZDNiLTgzOTUtYjY3MDVhN2M4MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHFWm6KekvAbSR3McZETLdbIfwq2cT7v4jOy 9PE7mnPwdCHP3ddzapWIGasRURceguBKInuqOytq12tYi6qG019Dm90NVCFpuZhI XPxCYCnDM0ITRpu+lkK2sf06jD9L7DEuEG05h1rgOd9i2ao9qFoyUiz0FK80Ywr9 UjiIgWDICj0g4dTGTXAEi+7gAu/GB7iWNpPFKp9y/L0lcN5gohk8kWgfCHiXqEAX 7lFL3glMBVa2iX3JBL/cafZZnnH+is8LpjGm58xdcxgw6zSxK0DP1rRYoOJh+ya2 JPumCfBE6U2/9IRHmgqokoICtyDuvd7EfHWDq7PCwNir/6aQSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKEKWAixWFBIKFcE+yRjfqAKVJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjkxMjBkNjItNTViMC0z MDU3LWJmZTQtMzNjNWNiNzJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ2ZEt/jCfaIND/vao8F32xwheG04/IH739Z8g1udRJueWw4MsA5w3j 6HlDdAkXsU8c0r9fCpn/Chke9UsKuYQ8PcufpmTz7ENSyUy08TzFC2sdCd7rx+0j GG48DHHNSuUlb4T2uZnK8N2b9QJx5KGYWM0s53bqqApDuEb799HILel0R+i7+pmo 1nrfb5m0HQhaC6N/tLFD9zPRVy7dqdJHsCw5HspIZ2S4iD3U2A5coV4L+5/KYYuS 6QK7GAbDhBMLISKxWy1eX57lltBbiO0jikUWNNeoYFXpinI9X8njvjWL3gfkZDjM ZOYBOzlLbYQJefoV2P8Hjn2+8hbtmVY= -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:24 2026 by rpki-client