$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa File: 0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa (raw, json) Hash identifier: a1JEjwJuhgNbn/e0XhK7Re3eHVmBLWo34HSqv8iKVJw= Subject key identifier: 1E:96:41:68:54:68:02:A8:69:FE:E9:D2:8A:9D:8D:8E:DA:F4:67:E2 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F07D77E3BA7DD9510D22EB800 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 7015 IP address blocks: 45.58.244.0/24 maxlen: 24 69.91.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7e:3b:a7:dd:95:10:d2:2e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=92ca7fce-d70b-4d77-8a56-15af60ba5264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:ba:1b:73:65:f9:aa:22:84:be:7f:24:b7: b2:5c:db:83:0a:26:54:a7:dd:d0:47:a6:3a:89:aa: c3:32:6c:93:dc:d6:4b:cf:c6:a4:ab:fa:ee:1d:aa: 1e:49:8c:dd:5d:33:e9:e6:6f:69:16:37:47:87:e6: 56:e3:25:df:b4:5a:1a:b5:d5:5a:59:c8:43:a9:10: 54:73:1d:15:fe:1c:b3:5f:69:5c:11:b4:74:8d:7e: d1:b4:27:ae:39:11:94:03:c6:a0:a6:80:d1:5f:5f: 46:7b:cb:a1:f3:33:18:51:36:4b:10:e7:d8:0e:f2: 55:b6:a7:aa:38:d6:54:4b:c7:b9:ed:ad:9d:95:3f: 42:76:4e:1d:04:5d:d2:0f:0a:ae:af:e8:49:c5:3b: af:ec:a7:d4:63:7a:7a:df:43:fd:fb:27:51:c1:a0: 58:27:29:6b:ba:fc:4a:50:5b:a7:d5:0f:7c:a5:5b: ed:e7:3d:0e:4e:2c:38:b1:be:0e:e6:bc:b0:70:9f: 81:ab:1a:21:64:a5:ec:6a:59:84:2d:ed:cb:b9:71: 91:07:f6:25:e6:b5:be:c3:6f:d9:f2:99:61:e6:35: 68:69:7c:ca:1f:0c:a5:41:a9:18:93:83:5c:7f:97: 2f:15:a2:4c:14:24:09:67:3d:06:ec:ff:54:e7:6d: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:96:41:68:54:68:02:A8:69:FE:E9:D2:8A:9D:8D:8E:DA:F4:67:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0f11f03d-0bb6-3867-8a06-982d48e8b8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.244.0/24 69.91.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3b:84:0d:e5:0c:46:eb:2b:c8:aa:63:a2:43:e9:32:09:0e: 77:e0:9e:9a:0f:8c:d5:f1:4f:66:86:2f:10:ea:f3:0d:2a:3b: a9:b2:ee:f4:7c:61:dc:34:78:8d:00:af:04:bd:9e:51:c1:96: 52:90:5a:f7:a5:80:71:10:6e:dd:96:3b:fc:02:05:3a:44:d0: ed:83:8d:bb:23:b8:46:8b:b9:10:07:cc:f0:df:3a:8e:24:6b: 58:15:21:18:7b:37:51:c7:1d:9c:97:c9:6a:d8:7e:50:d7:b6: 66:89:e3:2d:f5:5b:c7:05:b5:f0:b9:07:8c:f7:3b:e1:f7:89: 94:0a:48:20:66:05:eb:fa:5b:08:f3:96:f7:84:69:e9:68:64: be:a6:31:bc:89:bc:c3:72:46:86:13:7e:59:82:c1:27:48:07: eb:51:fd:6c:53:12:c4:1c:60:68:55:66:87:c0:08:db:62:b1: b7:61:7b:01:c9:3c:cd:a3:c9:cf:d1:0f:e9:ef:1c:7c:67:bb: a9:1d:2f:8f:b1:55:81:b3:db:cf:b2:3f:d1:d2:69:b8:64:13: 1e:cf:ec:3b:b6:cf:9d:c4:b7:97:3e:5c:2d:1a:07:e5:da:26: 88:03:17:04:67:cc:be:37:a5:24:63:1e:fe:c8:da:f0:49:01: 57:fe:ea:b0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8H1347p92VENIuuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk OTJjYTdmY2UtZDcwYi00ZDc3LThhNTYtMTVhZjYwYmE1MjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil26G3Nl+aoihL5/JLeyXNuDCiZUp93QR6Y6 iarDMmyT3NZLz8akq/ruHaoeSYzdXTPp5m9pFjdHh+ZW4yXftFoatdVaWchDqRBU cx0V/hyzX2lcEbR0jX7RtCeuORGUA8agpoDRX19Ge8uh8zMYUTZLEOfYDvJVtqeq ONZUS8e57a2dlT9Cdk4dBF3SDwqur+hJxTuv7KfUY3p630P9+ydRwaBYJylruvxK UFun1Q98pVvt5z0OTiw4sb4O5rywcJ+BqxohZKXsalmELe3LuXGRB/Yl5rW+w2/Z 8plh5jVoaXzKHwylQakYk4Ncf5cvFaJMFCQJZz0G7P9U522YowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB6WQWhUaAKoaf7p0oqdjY7a9GfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMGYxMWYwM2QtMGJiNi0z ODY3LThhMDYtOTgyZDQ4ZThiOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALTr0AwQA RVuOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEo7hA3lDEbrK8iqY6JD6TIJDnfgnpoPjNXxT2aGLxDq8w0q O6my7vR8Ydw0eI0ArwS9nlHBllKQWvelgHEQbt2WO/wCBTpE0O2DjbsjuEaLuRAH zPDfOo4ka1gVIRh7N1HHHZyXyWrYflDXtmaJ4y31W8cFtfC5B4z3O+H3iZQKSCBm Bev6WwjzlveEaeloZL6mMbyJvMNyRoYTflmCwSdIB+tR/WxTEsQcYGhVZofACNti sbdhewHJPM2jyc/RD+nvHHxnu6kdL4+xVYGz28+yP9HSabhkEx7P7Du2z53Et5c+ XC0aB+XaJogDFwRnzL43pSRjHv7I2vBJAVf+6rA= -----END CERTIFICATE-----Generated at Tue Sep 22 19:35:26 2026 by rpki-client