$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa File: 1faf7ad3-e3f9-3487-b235-101953ee16ec.roa (raw, json) Hash identifier: OXhzCnLpM8KLT1cCyZy1qYnSTulyr4yhVFovxP3GtIA= Subject key identifier: 27:4A:7A:FF:79:7C:C7:AF:AB:2C:33:24:5A:E2:18:FE:E0:AE:A5:DE Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F348274AA0BA8FD77508A9980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 6079 IP address blocks: 45.58.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:74:aa:0b:a8:fd:77:50:8a:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=5e890072-26f7-44d9-b724-c51d885168bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:e4:62:b7:a5:7b:0b:2f:ea:4a:b5:24:12: a8:b6:cb:d3:9a:a7:96:3a:b8:ce:a7:82:94:19:2e: fb:4f:49:10:f6:98:5e:df:cf:cd:da:b8:f7:8b:8c: 50:c0:fa:a9:8e:89:44:51:44:4c:4a:16:55:fd:f4: b3:85:ac:c7:3f:17:e2:c1:31:97:c0:ba:0e:c7:82: 57:5d:7c:13:92:a3:42:c9:a1:a5:45:33:50:5f:88: d7:7c:52:73:c4:df:45:29:4e:a2:fe:71:57:bf:16: d7:ee:2e:2f:ac:c5:c2:4e:3a:ac:ac:95:44:eb:05: 97:e4:d6:99:dc:51:27:26:4f:84:e4:dc:3f:71:1e: 84:2b:be:9d:fc:1d:a1:3b:59:d2:96:f2:5f:a4:9f: 7c:70:ab:db:15:71:f2:15:6c:8c:c3:33:f7:07:05: 58:0f:8c:5f:36:db:09:c1:94:a4:7c:b2:d1:2b:2d: 72:7e:86:7d:cf:2a:ca:aa:aa:5f:a1:7a:06:e1:c0: 80:11:e5:c8:23:31:bd:fa:ac:79:73:00:d2:b6:d9: 89:7d:bc:81:ee:4c:9c:79:d1:0f:6a:c6:5b:8d:ad: 2b:dd:27:05:76:22:0f:e5:f2:ce:22:6e:25:ef:05: 01:76:95:0c:11:c9:d1:4e:61:30:13:4c:99:9f:95: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:7A:FF:79:7C:C7:AF:AB:2C:33:24:5A:E2:18:FE:E0:AE:A5:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6a:75:6f:2f:66:1e:8c:7b:6e:dc:57:81:a7:51:64:ec:e6: 36:45:27:63:a8:2f:b8:56:65:e4:04:1a:04:0f:5d:20:9a:dc: c6:48:a0:62:1e:17:a8:0e:46:11:d8:73:7c:31:0f:33:d0:10: 5d:24:3b:44:df:a0:8a:ff:9a:f8:3d:d8:1d:51:9a:d4:78:18: 93:c1:e9:72:f1:c7:76:8e:cf:50:aa:b3:b0:40:8a:b9:f7:e8: 1a:45:76:eb:19:04:db:1b:d6:c8:98:8f:de:3b:c8:c4:26:99: c8:94:4a:a2:e5:30:9b:eb:16:47:66:8c:1a:15:dd:6a:64:e6: 90:e2:30:b3:58:f0:f7:c8:f9:61:90:dd:2b:89:99:a2:71:2a: e5:cf:6d:b2:a0:74:3f:51:43:6a:a4:35:04:1a:81:c0:a7:8d: c0:ac:8b:3d:76:3b:0e:35:d7:6b:88:d0:2b:90:87:ac:80:02: 30:0e:32:21:7b:cd:14:55:b7:19:92:81:1c:6c:99:69:a1:40: 4d:e4:ff:29:e7:c7:d5:0f:f7:26:5c:03:ed:61:7d:0b:fc:36: 2d:be:df:c7:f3:67:6e:3f:80:5a:de:6e:6f:b6:73:f2:ea:a6: 25:94:50:15:97:5c:e1:68:e6:bd:77:a6:03:25:1f:42:91:39: de:2e:79:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnSqC6j9d1CKmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NWU4OTAwNzItMjZmNy00NGQ5LWI3MjQtYzUxZDg4NTE2OGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtLkYrelewsv6kq1JBKotsvTmqeWOrjOp4KU GS77T0kQ9phe38/N2rj3i4xQwPqpjolEUURMShZV/fSzhazHPxfiwTGXwLoOx4JX XXwTkqNCyaGlRTNQX4jXfFJzxN9FKU6i/nFXvxbX7i4vrMXCTjqsrJVE6wWX5NaZ 3FEnJk+E5Nw/cR6EK76d/B2hO1nSlvJfpJ98cKvbFXHyFWyMwzP3BwVYD4xfNtsJ wZSkfLLRKy1yfoZ9zyrKqqpfoXoG4cCAEeXIIzG9+qx5cwDSttmJfbyB7kycedEP asZbja0r3ScFdiIP5fLOIm4l7wUBdpUMEcnRTmEwE0yZn5VzfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdKev95fMevqywzJFriGP7grqXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWZhZjdhZDMtZTNmOS0z NDg3LWIyMzUtMTAxOTUzZWUxNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELTrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9qdW8vZh6Me27cV4GnUWTs5jZFJ2OoL7hWZeQEGgQPXSCa3MZIoGIe F6gORhHYc3wxDzPQEF0kO0TfoIr/mvg92B1RmtR4GJPB6XLxx3aOz1Cqs7BAirn3 6BpFdusZBNsb1siYj947yMQmmciUSqLlMJvrFkdmjBoV3Wpk5pDiMLNY8PfI+WGQ 3SuJmaJxKuXPbbKgdD9RQ2qkNQQagcCnjcCsiz12Ow4112uI0CuQh6yAAjAOMiF7 zRRVtxmSgRxsmWmhQE3k/ynnx9UP9yZcA+1hfQv8Ni2+38fzZ24/gFrebm+2c/Lq piWUUBWXXOFo5r13pgMlH0KROd4ueRA= -----END CERTIFICATE-----Generated at Sun Sep 20 18:40:51 2026 by rpki-client