$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b84842e2-389f-3e6b-99ef-48d2d420b330.roa File: b84842e2-389f-3e6b-99ef-48d2d420b330.roa (raw, json) Hash identifier: O/MfKo7uMhyhFdtOr0adafSi3OiFDJFPDiQAb9cagtQ= Subject key identifier: C1:0C:AE:89:29:61:8C:F1:85:C7:7D:DD:9F:26:E9:6D:C1:9F:9F:A2 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D86192A13D7BCE4AD68CC5C00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b84842e2-389f-3e6b-99ef-48d2d420b330.roa Signing time: Thu 16 Apr 2026 08:50:36 +0000 ROA not before: Thu 16 Apr 2026 08:50:36 +0000 ROA not after: Wed 15 Jul 2026 08:50:36 +0000 asID: 5650 IP address blocks: 45.58.245.0/24 maxlen: 24 45.58.250.0/24 maxlen: 24 45.58.252.0/22 maxlen: 22 69.91.140.0/24 maxlen: 24 69.91.143.0/24 maxlen: 24 69.91.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:19:2a:13:d7:bc:e4:ad:68:cc:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 16 08:50:36 2026 GMT Not After : Jul 15 08:50:36 2026 GMT Subject: CN=8c42e7bc-60d4-458f-ba9d-73e42caab23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:96:a7:07:52:b1:c1:b4:ab:e0:ab:35:0b: e2:c3:5a:59:53:36:85:83:a8:76:d4:37:6a:e0:0c: 2a:48:74:e0:89:a6:2f:24:47:6f:97:41:09:ab:08: e0:57:cb:66:8b:2c:67:d0:3d:64:8d:45:8c:1c:84: 90:88:34:9e:ee:9d:ad:3f:4f:08:f5:3e:63:0d:34: ff:b3:3d:fc:53:41:41:8a:20:8a:65:44:81:5c:48: df:fc:86:3f:d8:25:5e:11:99:83:41:05:65:e0:d3: ae:f0:12:b0:c4:a5:8e:1c:73:c7:a5:ad:36:80:22: be:e0:74:fe:5b:77:b1:28:57:0f:25:b3:e6:da:8e: b7:74:ae:ec:66:4c:6c:d4:3a:e4:bf:41:c8:8f:7f: 21:21:0e:67:3b:10:16:a8:75:d8:7f:2b:c0:bf:ba: 63:fa:97:20:7b:5b:a9:1c:df:f2:5b:23:3d:15:29: c9:92:c9:65:53:1e:50:92:f6:6f:97:e4:a6:bb:7b: 3e:af:0c:eb:6d:e0:14:6a:e0:01:4a:9b:6e:21:38: fe:aa:32:eb:f3:1e:dd:0e:0c:94:92:e4:eb:74:e4: 95:d6:ea:7c:7f:72:8a:f2:a8:c0:56:b8:1d:74:92: 0a:ad:dd:06:46:29:92:85:26:25:d6:ad:ef:f9:9e: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0C:AE:89:29:61:8C:F1:85:C7:7D:DD:9F:26:E9:6D:C1:9F:9F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b84842e2-389f-3e6b-99ef-48d2d420b330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.245.0/24 45.58.250.0/24 45.58.252.0/22 69.91.140.0/24 69.91.143.0-69.91.144.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:90:68:39:34:ba:a2:0f:ec:b8:86:ee:ce:c3:5c:25:83:dd: e1:ef:9d:71:4d:a6:48:42:46:de:12:33:5d:d6:b4:95:4e:03: 75:12:07:f9:d3:66:f5:ed:e9:47:de:b6:04:a5:b4:90:60:8e: cf:0f:c1:00:1d:71:6f:8b:32:76:c6:2e:87:d8:60:0c:e1:72: d5:11:40:50:cd:35:58:e5:17:a6:ec:09:be:5c:81:da:8d:c6: 10:0b:6d:52:a2:8b:9b:96:17:af:87:b9:0f:a6:20:99:1a:41: 40:a3:6e:0a:86:df:33:00:a4:6d:24:28:c7:f7:66:a3:d8:41: e5:0b:e4:1f:2d:f8:29:65:2a:4d:96:c5:49:f9:00:7a:f1:64: a5:e6:f2:bd:09:bc:3c:70:77:01:41:89:4d:96:af:b7:25:d2: 07:bd:76:3b:3b:09:e9:37:96:3c:68:af:75:70:22:f5:1e:53: f6:02:da:83:c3:d7:7a:7d:3b:1e:d1:be:49:3f:31:aa:cf:d5: 36:a1:6e:0c:e4:f3:14:91:f8:55:aa:92:44:0a:a9:cf:3e:e4: 02:09:8b:03:19:7b:ee:38:e4:e7:1a:f6:e6:ed:3b:cd:14:56: c9:a9:9c:88:f3:7b:36:cf:81:fb:1f:ad:f8:af:67:59:4e:7d: c8:61:29:ba -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE2GGSoT17zkrWjMXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQxNjA4NTAzNloXDTI2MDcxNTA4NTAzNlowLzEtMCsGA1UEAxMk OGM0MmU3YmMtNjBkNC00NThmLWJhOWQtNzNlNDJjYWFiMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gWWpwdSscG0q+CrNQviw1pZUzaFg6h21Ddq 4AwqSHTgiaYvJEdvl0EJqwjgV8tmiyxn0D1kjUWMHISQiDSe7p2tP08I9T5jDTT/ sz38U0FBiiCKZUSBXEjf/IY/2CVeEZmDQQVl4NOu8BKwxKWOHHPHpa02gCK+4HT+ W3exKFcPJbPm2o63dK7sZkxs1Drkv0HIj38hIQ5nOxAWqHXYfyvAv7pj+pcge1up HN/yWyM9FSnJksllUx5QkvZvl+Smu3s+rwzrbeAUauABSptuITj+qjLr8x7dDgyU kuTrdOSV1up8f3KK8qjAVrgddJIKrd0GRimShSYl1q3v+Z7DVwIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFMEMrokpYYzxhcd93Z8m6W3Bn5+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYjg0ODQyZTItMzg5Zi0z ZTZiLTk5ZWYtNDhkMmQ0MjBiMzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALTr1AwQA LTr6AwQCLTr8AwQARVuMMAwDBABFW48DBABFW5AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcpBoOTS6og/s uIbuzsNcJYPd4e+dcU2mSEJG3hIzXda0lU4DdRIH+dNm9e3pR962BKW0kGCOzw/B AB1xb4sydsYuh9hgDOFy1RFAUM01WOUXpuwJvlyB2o3GEAttUqKLm5YXr4e5D6Yg mRpBQKNuCobfMwCkbSQox/dmo9hB5QvkHy34KWUqTZbFSfkAevFkpebyvQm8PHB3 AUGJTZavtyXSB712OzsJ6TeWPGivdXAi9R5T9gLag8PXen07HtG+ST8xqs/VNqFu DOTzFJH4VaqSRAqpzz7kAgmLAxl77jjk5xr25u07zRRWyamciPN7Ns+B+x+t+K9n WU59yGEpug== -----END CERTIFICATE-----Generated at Fri Apr 17 04:45:42 2026 by rpki-client