$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3c076987-f545-37e3-9336-ca8bd79b8b7f.roa File: 3c076987-f545-37e3-9336-ca8bd79b8b7f.roa (raw, json) Hash identifier: aTTGlEeNBJbtM5okaPtu8OxPJF8gj+L24MoDTyb/OUo= Subject key identifier: C5:3A:2C:EA:6A:A4:74:7A:3E:57:83:D1:3E:33:3D:CA:6E:1B:82:5A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D7A05502A4E5C9E780A530900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3c076987-f545-37e3-9336-ca8bd79b8b7f.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 20115 IP address blocks: 45.58.216.0/22 maxlen: 22 45.58.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:50:2a:4e:5c:9e:78:0a:53:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=4e568631-93e1-4409-81bc-e1c0195a6ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:33:a5:9a:af:57:4d:36:10:f0:c1:01:6f: 85:6d:0d:52:ed:c1:da:20:82:29:f9:31:bc:52:a2: 79:e5:a8:56:c3:1c:d1:66:d1:f8:a8:5e:1f:1e:db: 6a:22:ca:dc:05:22:fc:be:74:d6:9d:6b:d7:a2:45: 42:67:be:8d:2c:ac:e3:a7:db:5f:b5:b1:e4:48:12: e1:7a:b5:b1:50:d6:ee:de:ff:c9:9c:3d:c4:50:f9: 2c:62:ba:fd:aa:60:34:aa:38:e5:83:d8:69:5d:6b: fc:98:5d:7d:2d:6a:82:bb:6f:0d:b6:32:1d:50:27: 19:9e:e3:66:fb:d8:66:86:30:ce:78:55:ba:66:40: ce:b1:21:76:d2:83:51:7b:f4:38:60:94:da:b7:bd: 6a:98:60:f8:75:7f:c4:15:c8:c1:17:dc:c3:51:d0: 0d:4c:1a:5d:43:4b:19:78:27:cf:22:e2:6a:2e:ca: a6:6d:a9:f5:85:1e:f0:1b:d3:60:d4:7d:d5:cb:cd: d5:02:c3:f5:f3:c6:43:a6:cb:93:1d:75:46:f7:bd: 74:17:d1:7c:0d:a1:bf:5c:55:77:ea:43:8e:27:9b: 95:d6:9a:a9:83:36:2a:59:35:c3:01:2f:2b:50:7b: 6b:cd:1f:ab:4e:00:b5:4d:60:2b:4e:90:d8:62:06: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3A:2C:EA:6A:A4:74:7A:3E:57:83:D1:3E:33:3D:CA:6E:1B:82:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3c076987-f545-37e3-9336-ca8bd79b8b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8f:4e:b4:83:f2:e5:fb:34:96:25:7f:99:a9:f8:2d:5c:52: 10:60:82:b9:e2:14:12:31:a2:4e:66:a3:d5:05:2c:e6:c6:ef: 28:15:87:05:99:7a:7f:16:cc:38:7e:24:2b:4d:f3:43:e3:f3: 29:15:9f:88:be:45:02:d9:52:4a:43:e9:94:50:55:77:41:a8: 2c:af:cb:de:07:c9:12:78:06:02:89:87:4e:9f:12:04:af:95: 0f:f3:09:89:c3:0a:1c:96:26:17:14:ca:68:98:99:b1:71:b5: bd:18:89:6a:a5:5d:5a:b0:84:c6:71:1e:d8:41:85:b7:47:51: ed:bb:e7:2c:35:c7:b7:d3:97:4c:a8:11:49:57:d2:3c:aa:fd: 6a:64:49:0a:b2:54:3f:f6:8c:3a:2c:ae:51:38:6a:e8:72:11: 2d:2c:1b:1d:d1:88:4c:23:ac:07:f7:7d:c2:0b:a7:b0:78:06: e8:c5:61:0f:59:c5:56:7d:73:fc:66:48:0f:a8:e2:48:2f:c7: e3:ad:25:66:33:8b:64:93:1b:d9:6b:c5:bb:b4:b6:7e:fe:29: 05:52:94:4f:f5:db:f8:a6:14:32:0d:f1:20:84:8c:07:4a:76: e3:ee:2d:2f:25:e0:d7:a0:1a:a7:30:a7:7e:bf:5f:9b:1f:9b: ad:0a:8e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVAqTlyeeApTCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NGU1Njg2MzEtOTNlMS00NDA5LTgxYmMtZTFjMDE5NWE2ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4gzpZqvV002EPDBAW+FbQ1S7cHaIIIp+TG8 UqJ55ahWwxzRZtH4qF4fHttqIsrcBSL8vnTWnWvXokVCZ76NLKzjp9tftbHkSBLh erWxUNbu3v/JnD3EUPksYrr9qmA0qjjlg9hpXWv8mF19LWqCu28NtjIdUCcZnuNm +9hmhjDOeFW6ZkDOsSF20oNRe/Q4YJTat71qmGD4dX/EFcjBF9zDUdANTBpdQ0sZ eCfPIuJqLsqmban1hR7wG9Ng1H3Vy83VAsP188ZDpsuTHXVG9710F9F8DaG/XFV3 6kOOJ5uV1pqpgzYqWTXDAS8rUHtrzR+rTgC1TWArTpDYYgYGdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU6LOpqpHR6PleD0T4zPcpuG4JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvM2MwNzY5ODctZjU0NS0z N2UzLTkzMzYtY2E4YmQ3OWI4YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWPTrSD8uX7NJYlf5mp+C1cUhBggrniFBIxok5mo9UFLObG7ygVhwWZ en8WzDh+JCtN80Pj8ykVn4i+RQLZUkpD6ZRQVXdBqCyvy94HyRJ4BgKJh06fEgSv lQ/zCYnDChyWJhcUymiYmbFxtb0YiWqlXVqwhMZxHthBhbdHUe275yw1x7fTl0yo EUlX0jyq/WpkSQqyVD/2jDosrlE4auhyES0sGx3RiEwjrAf3fcILp7B4BujFYQ9Z xVZ9c/xmSA+o4kgvx+OtJWYzi2STG9lrxbu0tn7+KQVSlE/12/imFDIN8SCEjAdK duPuLS8l4NegGqcwp36/X5sfm60Kjv0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:15 2026 by rpki-client