$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3c076987-f545-37e3-9336-ca8bd79b8b7f.roa File: 3c076987-f545-37e3-9336-ca8bd79b8b7f.roa (raw, json) Hash identifier: PPiSb6PTDLfwBlfzc5qWEzS6kQv8HYabBVj4qKeGLy8= Subject key identifier: 8E:9C:3C:A4:1F:E6:D8:32:86:2D:63:2A:66:B2:1D:94:EA:7F:00:B0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584C99673D9B4E7EB512C75CD400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3c076987-f545-37e3-9336-ca8bd79b8b7f.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 20115 IP address blocks: 45.58.216.0/22 maxlen: 22 45.58.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:3d:9b:4e:7e:b5:12:c7:5c:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=616e7825-a19e-4475-854f-cd9b293fcf13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:07:71:f8:7a:ad:da:a4:68:78:f0:96:3f:c1: 29:c2:5e:e2:e3:1c:a1:53:ea:4a:21:ad:3a:63:43: f1:1f:94:15:e5:73:9a:9a:bf:8f:5f:26:5f:a9:1b: 2f:97:7a:3f:35:c2:2e:c4:16:fe:df:60:8b:ef:28: dc:d7:0d:fb:cf:c7:fd:93:b0:40:ad:a9:be:b7:e0: a5:ae:d7:3d:b6:df:b6:d2:87:bc:da:4b:d1:d4:d1: 3a:2d:9a:17:e4:4e:1e:84:36:b3:24:c2:ec:23:07: 75:77:bd:c0:1e:dc:26:cf:fc:32:69:80:34:6f:c5: 41:ad:a2:e1:96:4e:d9:75:ff:ef:eb:47:40:0d:17: 87:ca:57:c0:6a:e3:6d:72:18:0a:82:92:dc:32:73: 2c:fb:91:a2:b4:50:66:39:5e:4d:53:63:8f:33:ad: fe:88:69:c2:f4:4e:ec:f2:9b:d6:56:fc:5f:ed:b9: a5:37:ef:c5:51:8d:a1:4c:aa:09:41:fb:f7:0a:53: a7:2d:a4:4a:8c:ae:c5:3e:3c:1c:a3:aa:22:44:b0: 89:78:af:d8:4f:ec:f3:c8:1d:21:6d:d5:b1:5b:03: e4:17:2e:28:34:cc:3e:3d:32:bd:3b:70:b3:41:7b: f9:db:14:4d:8b:35:d5:01:ce:a6:ac:52:58:6c:9e: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:3C:A4:1F:E6:D8:32:86:2D:63:2A:66:B2:1D:94:EA:7F:00:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3c076987-f545-37e3-9336-ca8bd79b8b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:61:6e:6c:6d:74:69:4b:79:14:88:f7:81:43:d5:ec:9c:ca: b2:0b:61:74:4e:26:8b:a6:03:a9:2b:fb:96:9c:8b:1f:14:6f: 1d:20:9a:cc:5b:aa:61:a5:17:ad:e4:98:55:69:46:24:c3:d6: 59:f1:c5:cd:bc:6e:45:32:69:b2:67:98:95:db:9b:a0:02:ab: 20:97:ee:6f:1f:80:9d:56:58:e1:f9:99:21:86:c2:fd:30:82: 8f:01:a9:ec:e8:9d:af:9f:a2:e3:2c:5f:c9:42:d3:8c:ae:55: 57:8a:31:cf:ba:08:96:27:09:82:e2:bf:3e:06:f2:ea:15:4f: 60:69:28:49:c1:ad:af:2d:99:cf:51:2e:9c:e4:91:a3:65:dd: f4:cc:48:0d:d8:5b:be:e9:5d:bd:45:5b:89:7a:f9:fa:dd:25: cb:53:65:b3:39:51:06:04:f3:18:95:2b:ce:15:75:61:22:88: 0d:27:b0:62:3d:1b:e8:32:94:11:25:68:e7:8b:38:b5:82:ae: 12:9e:16:94:f1:b6:72:fd:5f:f3:e6:20:d3:da:36:3c:e0:48: 80:e0:06:a4:66:34:09:2f:3b:5f:3b:12:8b:0a:95:62:9f:60: bd:44:a9:38:96:a7:a3:e8:a3:d7:d4:87:ce:1d:8f:37:b9:a8: 80:d7:73:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZz2bTn61Esdc1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk NjE2ZTc4MjUtYTE5ZS00NDc1LTg1NGYtY2Q5YjI5M2ZjZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gdx+Hqt2qRoePCWP8Epwl7i4xyhU+pKIa06 Y0PxH5QV5XOamr+PXyZfqRsvl3o/NcIuxBb+32CL7yjc1w37z8f9k7BAram+t+Cl rtc9tt+20oe82kvR1NE6LZoX5E4ehDazJMLsIwd1d73AHtwmz/wyaYA0b8VBraLh lk7Zdf/v60dADReHylfAauNtchgKgpLcMnMs+5GitFBmOV5NU2OPM63+iGnC9E7s 8pvWVvxf7bmlN+/FUY2hTKoJQfv3ClOnLaRKjK7FPjwco6oiRLCJeK/YT+zzyB0h bdWxWwPkFy4oNMw+PTK9O3CzQXv52xRNizXVAc6mrFJYbJ5sEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6cPKQf5tgyhi1jKmayHZTqfwCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvM2MwNzY5ODctZjU0NS0z N2UzLTkzMzYtY2E4YmQ3OWI4YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1hbmxtdGlLeRSI94FD1eycyrILYXROJoumA6kr+5acix8Ubx0gmsxb qmGlF63kmFVpRiTD1lnxxc28bkUyabJnmJXbm6ACqyCX7m8fgJ1WWOH5mSGGwv0w go8Bqezona+fouMsX8lC04yuVVeKMc+6CJYnCYLivz4G8uoVT2BpKEnBra8tmc9R LpzkkaNl3fTMSA3YW77pXb1FW4l6+frdJctTZbM5UQYE8xiVK84VdWEiiA0nsGI9 G+gylBElaOeLOLWCrhKeFpTxtnL9X/PmINPaNjzgSIDgBqRmNAkvO187EosKlWKf YL1EqTiWp6Poo9fUh84djze5qIDXczg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:02 2026 by rpki-client