$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d4b48728-4607-3d45-98bc-ac7f63433ed0.roa File: d4b48728-4607-3d45-98bc-ac7f63433ed0.roa (raw, json) Hash identifier: dkfzuJB/JHxWRGZoZL6HJjoM/FXxEEEOSsFTT4va5wQ= Subject key identifier: 98:0C:E0:F3:40:90:49:4A:5F:5C:F1:C1:43:56:34:1F:2D:60:21:0E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CE362028A08CC725A99853900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d4b48728-4607-3d45-98bc-ac7f63433ed0.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 33651 IP address blocks: 45.58.232.0/21 maxlen: 21 69.91.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:02:8a:08:cc:72:5a:99:85:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=87c286bc-65be-4392-8d79-0964d008e255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:73:e8:ce:3e:e0:65:13:1d:1f:4c:b8:a4: 48:1c:2d:6b:c1:ee:66:98:c1:e6:f7:36:31:da:f9: 28:74:97:51:1b:66:d6:0a:f8:26:f4:67:c0:51:d9: 4e:96:b8:22:42:41:47:7e:88:42:da:71:bb:54:ee: e1:5a:e8:fd:ad:93:f2:30:5d:dc:21:3c:26:c8:eb: cf:ec:83:51:39:e4:fd:06:96:3c:41:a6:f2:1a:7c: cf:b5:20:68:00:e0:03:e6:e0:df:f2:26:af:72:10: 59:e6:bf:e2:cb:a2:0e:a3:85:3a:e9:2f:ae:06:4f: c2:be:2a:8a:1a:c1:f9:85:c5:9c:95:19:20:e3:70: 4d:8c:99:9f:74:83:c4:14:bc:4f:82:c0:f9:2b:c7: 68:61:63:79:f9:a2:09:e9:a4:b3:b5:7a:c2:ff:0f: e2:c2:3a:67:18:93:ff:4a:30:95:69:61:37:03:df: c5:40:7b:01:4a:fc:89:69:47:3f:56:b8:76:cd:40: 90:79:5a:b3:fd:39:f2:0a:e9:2c:00:bb:ba:b5:4a: 50:70:22:c7:17:9a:1c:07:01:9a:6a:5f:92:a1:ed: 4c:fb:2b:00:bf:45:b6:7f:23:c3:be:f4:fe:f0:07: 62:74:da:47:8f:98:47:09:39:79:be:17:08:5f:d4: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:E0:F3:40:90:49:4A:5F:5C:F1:C1:43:56:34:1F:2D:60:21:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d4b48728-4607-3d45-98bc-ac7f63433ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.232.0/21 69.91.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1e:d2:63:bb:74:ad:e4:98:86:ba:be:d6:26:d5:a9:53:2d: 64:bf:a2:51:f1:34:eb:0d:17:53:39:4c:55:af:9f:c9:d4:74: c8:60:b4:ff:93:ad:40:48:5d:2e:82:9b:30:c9:65:da:76:1a: e2:16:e4:29:a9:f6:d6:b2:67:2a:1c:3e:be:a4:2e:3f:24:eb: 4d:4e:15:85:76:44:cc:40:d9:9a:89:b1:2f:af:b0:c9:dc:d9: 7f:b1:eb:43:0b:f5:22:ad:8c:df:d8:35:a5:d8:ef:9e:8b:e8: de:b9:b3:83:31:e9:40:85:a1:00:46:4c:01:4a:65:a9:e3:7a: 72:1e:8b:96:21:55:d1:7c:b7:8b:c5:d7:d9:b0:46:93:a2:5e: fb:41:7d:6c:bc:3e:a6:be:53:b6:91:2b:4a:ac:2f:e2:b3:88: 24:2f:9a:9e:f7:eb:a9:41:5d:85:34:9a:b5:2a:03:98:ac:22: 42:7e:e3:86:9a:c4:0d:c5:65:f8:35:7f:94:7e:c2:f3:e8:af: 61:df:25:35:db:62:39:b4:e5:4a:4d:64:31:64:01:e9:46:2a: a2:6d:d8:3c:74:4b:3d:3e:54:4e:ec:f4:e5:25:f9:4b:c2:d6: 4f:f2:bb:a8:ee:30:3e:07:30:22:6f:57:fe:75:32:8e:94:ab: 33:8c:e8:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzjYgKKCMxyWpmFOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk ODdjMjg2YmMtNjViZS00MzkyLThkNzktMDk2NGQwMDhlMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEZz6M4+4GUTHR9MuKRIHC1rwe5mmMHm9zYx 2vkodJdRG2bWCvgm9GfAUdlOlrgiQkFHfohC2nG7VO7hWuj9rZPyMF3cITwmyOvP 7INROeT9BpY8QabyGnzPtSBoAOAD5uDf8iavchBZ5r/iy6IOo4U66S+uBk/CviqK GsH5hcWclRkg43BNjJmfdIPEFLxPgsD5K8doYWN5+aIJ6aSztXrC/w/iwjpnGJP/ SjCVaWE3A9/FQHsBSvyJaUc/Vrh2zUCQeVqz/TnyCuksALu6tUpQcCLHF5ocBwGa al+Soe1M+ysAv0W2fyPDvvT+8AdidNpHj5hHCTl5vhcIX9TR/QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJgM4PNAkElKX1zxwUNWNB8tYCEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDRiNDg3MjgtNDYwNy0z ZDQ1LTk4YmMtYWM3ZjYzNDMzZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTroAwQA RVuSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABEe0mO7dK3kmIa6vtYm1alTLWS/olHxNOsNF1M5TFWvn8nU dMhgtP+TrUBIXS6CmzDJZdp2GuIW5Cmp9tayZyocPr6kLj8k601OFYV2RMxA2ZqJ sS+vsMnc2X+x60ML9SKtjN/YNaXY756L6N65s4Mx6UCFoQBGTAFKZanjenIei5Yh VdF8t4vF19mwRpOiXvtBfWy8Pqa+U7aRK0qsL+KziCQvmp7366lBXYU0mrUqA5is IkJ+44aaxA3FZfg1f5R+wvPor2HfJTXbYjm05UpNZDFkAelGKqJt2Dx0Sz0+VE7s 9OUl+UvC1k/yu6juMD4HMCJvV/51Mo6UqzOM6O4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:25 2026 by rpki-client