$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6ff78f22-7449-3fed-a668-8866996200b5.roa File: 6ff78f22-7449-3fed-a668-8866996200b5.roa (raw, json) Hash identifier: 2ix8CQj/Pu3UDrRJAGht+ZzAifWbEB5NoFk0Egva7Pw= Subject key identifier: 24:59:77:AC:10:FF:DE:F5:7F:92:F8:EF:58:5D:CB:08:22:D3:36:14 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D07ACFA81DAE971F30D7D1F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6ff78f22-7449-3fed-a668-8866996200b5.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 11404 IP address blocks: 45.58.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fa:81:da:e9:71:f3:0d:7d:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=3512e8e3-b0e5-45d7-9ffc-4dd3b2a4b8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:06:0d:c1:e8:0b:43:b9:76:06:6c:d0:e3: 3a:bf:af:e1:6b:cb:f9:57:dc:1d:a5:32:27:2c:6d: 2c:96:40:e1:30:b5:9e:81:18:d2:86:33:67:98:10: 50:cc:53:ad:b0:2c:6e:a7:0f:10:a6:27:7d:68:97: e6:2b:0a:1f:6a:4f:68:e3:ac:d8:9d:6d:05:1f:9e: 1d:e3:0a:47:cf:7e:ab:da:e1:c3:77:11:1e:f2:ce: 4d:c8:2a:c9:42:35:02:0b:0b:fc:5b:55:c8:2b:ee: 31:9f:b9:fe:4f:16:35:a2:16:b6:bf:37:a5:25:d0: f0:56:cf:2e:cf:57:71:87:50:8d:ee:9c:6c:6c:03: b9:14:2a:68:5e:e1:68:7d:a7:4e:c4:57:2b:d4:dc: 09:50:23:e7:f9:16:e9:0f:7a:ea:21:ef:12:3b:db: c1:db:07:17:cf:cd:93:fa:d8:bc:03:f5:40:cb:70: 73:88:ea:ce:6e:20:0e:12:81:22:4a:bd:29:4f:b0: 2e:ce:dc:15:a7:16:96:cd:6a:e4:95:14:1a:04:d5: 02:78:3f:79:8f:a6:eb:dc:f9:1d:d1:b0:6f:97:40: 2e:55:57:4b:2e:24:ba:dd:0e:53:36:1c:da:f9:82: 3e:16:d2:0f:b3:63:69:5a:7e:3a:e5:23:73:c5:62: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:59:77:AC:10:FF:DE:F5:7F:92:F8:EF:58:5D:CB:08:22:D3:36:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6ff78f22-7449-3fed-a668-8866996200b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:46:e3:16:90:40:a6:22:00:73:37:a9:4b:f5:68:f3:59:65: 01:57:ab:13:69:a8:f1:6c:62:46:e1:6f:07:e7:e8:f5:47:c7: e5:e1:fa:82:ec:31:39:a8:2b:c0:99:e0:be:4e:af:0e:68:68: e5:5e:9c:fc:5b:11:88:b3:9f:d5:07:14:7e:9d:74:53:c3:e3: 81:07:d4:b3:2a:eb:84:2a:97:1d:cf:fa:d9:47:1a:2a:c8:a6: 06:bd:61:d4:d6:ae:25:63:1e:4f:3c:64:ea:97:7a:42:8a:29: 36:92:82:20:80:18:9a:79:68:28:60:50:d1:a0:90:10:02:39: 2c:a6:45:c8:f6:77:b9:41:a2:d6:ef:e6:78:49:61:36:25:fd: 7d:f0:fd:72:a2:6c:33:89:8d:19:6c:a7:33:aa:83:c5:9e:61: 7d:77:0a:d0:88:31:df:60:e0:0e:66:28:99:52:29:21:3e:32: 58:7e:a9:0f:2a:d6:2a:b2:c0:2c:21:d1:e3:a2:6c:d5:34:09: 98:1d:a5:0f:47:76:a6:69:5a:a9:6f:5b:5a:71:04:5a:ab:60: 98:f0:c9:13:f1:89:f2:b0:85:de:06:27:2b:9f:ca:f6:fb:d8: 65:79:a8:8b:79:65:c0:a0:35:94:68:20:4e:66:df:c6:da:f4: a1:05:b1:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPqB2ulx8w19H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MzUxMmU4ZTMtYjBlNS00NWQ3LTlmZmMtNGRkM2IyYTRiOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie8GDcHoC0O5dgZs0OM6v6/ha8v5V9wdpTIn LG0slkDhMLWegRjShjNnmBBQzFOtsCxupw8Qpid9aJfmKwofak9o46zYnW0FH54d 4wpHz36r2uHDdxEe8s5NyCrJQjUCCwv8W1XIK+4xn7n+TxY1oha2vzelJdDwVs8u z1dxh1CN7pxsbAO5FCpoXuFofadOxFcr1NwJUCPn+RbpD3rqIe8SO9vB2wcXz82T +ti8A/VAy3BziOrObiAOEoEiSr0pT7AuztwVpxaWzWrklRQaBNUCeD95j6br3Pkd 0bBvl0AuVVdLLiS63Q5TNhza+YI+FtIPs2NpWn465SNzxWKpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRZd6wQ/971f5L471hdywgi0zYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmZmNzhmMjItNzQ0OS0z ZmVkLWE2NjgtODg2Njk5NjIwMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLTrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFG4xaQQKYiAHM3qUv1aPNZZQFXqxNpqPFsYkbhbwfn6PVHx+Xh+oLs MTmoK8CZ4L5Orw5oaOVenPxbEYizn9UHFH6ddFPD44EH1LMq64Qqlx3P+tlHGirI pga9YdTWriVjHk88ZOqXekKKKTaSgiCAGJp5aChgUNGgkBACOSymRcj2d7lBotbv 5nhJYTYl/X3w/XKibDOJjRlspzOqg8WeYX13CtCIMd9g4A5mKJlSKSE+Mlh+qQ8q 1iqywCwh0eOibNU0CZgdpQ9HdqZpWqlvW1pxBFqrYJjwyRPxifKwhd4GJyufyvb7 2GV5qIt5ZcCgNZRoIE5m38ba9KEFsSY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:48 2026 by rpki-client