$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa File: 0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa (raw, json) Hash identifier: mRvIwcPZdcxEcSLfOnH8563XBvjLbDVtEGXXJPlIDvg= Subject key identifier: 84:21:E5:38:8F:56:73:FC:99:73:47:6F:AA:1B:A7:E0:DC:3D:DF:A6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CA491B69E0AF844AD798D9A10 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 7015 IP address blocks: 45.58.244.0/24 maxlen: 24 69.91.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:b6:9e:0a:f8:44:ad:79:8d:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=49dcb8d8-9a5a-4d54-a0a9-666d61311676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:21:23:92:57:09:5b:41:11:52:05:b9:89: 4b:57:3c:cb:a8:b2:75:42:7f:2d:2d:06:2f:3e:54: 8a:b7:c5:8f:10:69:d0:8b:7a:a5:98:7d:b7:2f:69: ae:9e:89:b7:ed:6d:78:ec:7b:97:c7:d7:da:34:d7: f2:cd:27:49:d6:cb:b9:7d:e0:51:db:25:79:80:cb: cf:e1:63:90:1b:cc:17:6e:6f:31:9e:c3:f2:66:54: d6:10:7e:f6:3b:db:fc:bd:40:ff:df:59:cc:9a:c1: 21:ef:c4:b8:9c:d9:b8:e6:31:14:bc:5d:b4:01:35: 3a:4d:fb:ff:6c:30:d3:89:3d:30:ac:a1:3c:bd:7f: b2:be:e4:2d:fb:a1:62:48:dd:74:68:48:fc:60:d8: cf:01:7f:36:58:24:d9:54:6a:8f:99:ac:07:c5:44: 1d:14:1a:b9:b1:5c:60:b1:ef:4a:28:b7:74:ee:a6: e0:39:46:af:84:a8:56:68:62:14:9d:10:f8:e4:02: 99:f5:3d:38:ce:ac:0c:72:c7:df:e6:45:75:c2:81: 28:71:a4:33:db:a7:be:a0:e4:f8:4f:36:f3:91:64: 78:ed:db:f7:1b:62:d5:2d:ac:38:a8:19:57:c4:6e: 8c:de:37:ca:7e:36:62:08:d0:a3:13:b6:9f:ea:d7: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:21:E5:38:8F:56:73:FC:99:73:47:6F:AA:1B:A7:E0:DC:3D:DF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.244.0/24 69.91.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:be:d5:69:39:45:72:7a:ed:40:f1:d4:0f:82:ca:2f:57:2d: b6:23:aa:04:f7:d3:06:2a:57:b6:90:56:84:36:ad:18:66:6a: 79:2b:56:b2:59:b5:2e:12:7e:2a:06:35:7e:28:53:1c:43:68: b5:d4:c5:86:0b:c6:12:98:60:20:e3:e9:3e:75:88:8b:eb:b9: 84:9b:83:b6:17:64:1a:3e:be:b2:a8:01:4e:f1:19:01:8b:89: 9e:d4:95:f7:28:5b:ce:ae:e1:30:70:e0:a8:fc:79:ee:bd:7c: cc:11:86:2f:92:77:97:4a:87:df:f2:b9:3c:bf:cf:df:e8:e3: f1:a3:c8:ec:03:52:07:01:d3:10:67:31:92:e5:26:c1:43:02: 72:ef:45:37:d2:e2:a7:0c:e0:13:20:cb:3b:fb:bf:b9:72:12: 46:ea:d0:f3:89:84:29:b6:ad:17:aa:ef:0f:c0:d1:1b:47:20: 64:97:b7:39:05:61:ad:c8:7d:6e:45:b7:18:5a:81:21:1c:48: e0:14:9c:3a:ae:ef:c8:9e:fb:d2:de:72:33:c6:35:e0:1f:73: 05:95:e1:1d:00:bd:75:ca:65:eb:ba:7f:b7:46:9b:8f:3a:25: 9c:42:ed:99:1d:6b:e3:7e:5e:c5:5d:58:d1:49:d8:a4:0f:59: a5:50:0e:4a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEykkbaeCvhErXmNmhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk NDlkY2I4ZDgtOWE1YS00ZDU0LWEwYTktNjY2ZDYxMzExNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJUhI5JXCVtBEVIFuYlLVzzLqLJ1Qn8tLQYv PlSKt8WPEGnQi3qlmH23L2munom37W147HuXx9faNNfyzSdJ1su5feBR2yV5gMvP 4WOQG8wXbm8xnsPyZlTWEH72O9v8vUD/31nMmsEh78S4nNm45jEUvF20ATU6Tfv/ bDDTiT0wrKE8vX+yvuQt+6FiSN10aEj8YNjPAX82WCTZVGqPmawHxUQdFBq5sVxg se9KKLd07qbgOUavhKhWaGIUnRD45AKZ9T04zqwMcsff5kV1woEocaQz26e+oOT4 TzbzkWR47dv3G2LVLaw4qBlXxG6M3jfKfjZiCNCjE7af6te5XwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIQh5TiPVnP8mXNHb6obp+DcPd+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGYxMWYwM2QtMGJiNi0z ODY3LThhMDYtOTgyZDQ4ZThiOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALTr0AwQA RVuOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFu+1Wk5RXJ67UDx1A+Cyi9XLbYjqgT30wYqV7aQVoQ2rRhm ankrVrJZtS4SfioGNX4oUxxDaLXUxYYLxhKYYCDj6T51iIvruYSbg7YXZBo+vrKo AU7xGQGLiZ7UlfcoW86u4TBw4Kj8ee69fMwRhi+Sd5dKh9/yuTy/z9/o4/GjyOwD UgcB0xBnMZLlJsFDAnLvRTfS4qcM4BMgyzv7v7lyEkbq0POJhCm2rReq7w/A0RtH IGSXtzkFYa3IfW5FtxhagSEcSOAUnDqu78ie+9LecjPGNeAfcwWV4R0AvXXKZeu6 f7dGm486JZxC7Zkda+N+XsVdWNFJ2KQPWaVQDko= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:11 2026 by rpki-client