$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7932c17-ef2e-3e80-9015-8b01e8f5b75d.roa File: f7932c17-ef2e-3e80-9015-8b01e8f5b75d.roa (raw, json) Hash identifier: dfBbz/pTCCQTbdwIsonqUTizfQTLQ6a14POamp2zKdw= Subject key identifier: 31:95:AE:BE:8F:8B:11:C4:58:2C:F3:61:B5:F7:95:57:AD:E4:89:6F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F3A17C5DFCD072EA43007BDC0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7932c17-ef2e-3e80-9015-8b01e8f5b75d.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 11404 IP address blocks: 45.58.251.0/24 maxlen: 24 69.91.162.0/24 maxlen: 24 69.91.163.0/24 maxlen: 24 69.91.164.0/24 maxlen: 24 69.91.167.0/24 maxlen: 24 69.91.174.0/24 maxlen: 24 69.91.175.0/24 maxlen: 24 69.91.186.0/24 maxlen: 24 149.143.144.0/22 maxlen: 22 149.143.152.0/22 maxlen: 22 149.143.164.0/22 maxlen: 22 149.143.172.0/22 maxlen: 22 149.143.180.0/22 maxlen: 22 149.143.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c5:df:cd:07:2e:a4:30:07:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=9118396b-4fd9-4dfb-99f8-b6762d55cdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:18:b8:b1:7a:cc:ad:b6:e7:7c:0e:62:99: b0:5d:95:82:0d:67:9b:d7:bc:5d:30:3f:22:14:9b: 06:98:f1:64:73:cf:74:37:7b:bb:f4:9a:da:5d:34: 7e:6d:cc:19:f7:48:55:93:aa:98:42:c0:65:48:82: 41:4b:4c:c6:ae:45:67:ab:f1:c8:97:0c:58:a9:6a: 99:f5:27:be:e7:35:12:7b:02:51:6c:02:ac:33:89: 76:80:dd:7c:23:95:5e:fb:e4:85:dc:15:dd:33:7d: 91:dc:95:f9:05:68:69:37:39:e8:46:b1:11:3f:e7: 22:26:09:49:2d:32:9e:7a:b8:24:59:44:95:c8:07: 7c:63:d5:2f:a4:93:65:ab:d8:58:d9:ff:e7:b1:79: 9a:a5:3d:0d:40:2f:72:ee:11:9f:83:fc:ff:cc:44: 61:76:fa:56:60:d8:4e:d0:16:b7:c9:1a:a0:4a:a6: 14:8c:bc:3a:44:70:1e:9d:54:f9:70:9a:18:17:81: 3c:3d:cf:be:56:2f:96:77:c9:f1:ce:c2:1f:d2:04: 86:b1:6b:5b:8b:3e:a2:f9:98:02:bd:7b:ef:1e:c5: 66:52:bc:03:f7:9b:5c:7b:89:e0:f0:04:ab:f6:25: 38:3b:e1:4c:39:77:6b:9d:52:88:6e:5c:3f:ea:29: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:AE:BE:8F:8B:11:C4:58:2C:F3:61:B5:F7:95:57:AD:E4:89:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7932c17-ef2e-3e80-9015-8b01e8f5b75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 45.58.251.0/24 69.91.162.0-69.91.164.255 69.91.167.0/24 69.91.174.0/23 69.91.186.0/24 149.143.144.0/22 149.143.152.0/22 149.143.164.0/22 149.143.172.0/22 149.143.180.0/22 149.143.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7c:99:f7:b9:0b:c6:c2:61:d9:70:2a:f6:2a:54:7e:e6:ac: e0:95:55:73:6e:f8:c8:28:9e:42:5a:82:65:74:b6:cc:13:0d: 4b:46:1d:95:6e:0d:45:67:f6:5b:44:f8:39:e9:7c:c3:ea:31: e3:9d:3f:dd:e0:88:0c:c7:1d:fa:6b:1a:9f:95:6f:ba:36:c7: 1e:58:7b:e5:dd:94:67:f8:17:52:9b:e6:bc:5b:98:85:de:01: 6b:f0:3b:73:4e:e8:e5:75:62:aa:73:f7:9d:45:13:f2:b2:e3: a1:93:c5:7a:65:9c:f0:18:af:a1:5a:55:31:6e:f1:ae:9a:2d: 19:40:61:aa:9d:e2:1c:78:55:c0:d0:ff:39:f8:61:d2:7b:95: 06:bc:d7:e8:9c:92:37:8a:a4:5b:8b:e2:ff:96:37:16:b7:eb: 5a:d5:0b:86:67:a1:23:1e:36:a9:5f:9e:17:fe:6f:3c:ce:ac: f5:89:7d:e8:e5:7d:c8:d7:b6:ed:44:38:2a:8c:85:fe:a9:11: aa:f3:cd:f0:09:f4:dc:9f:a0:1f:8e:e6:e1:6a:4e:66:37:00: 0b:82:26:76:f0:3f:84:38:bc:61:c1:5f:75:2d:ef:95:91:68: a9:24:b2:47:ec:00:1b:00:3c:8d:88:bd:6b:46:23:f4:0b:33: 66:07:f9:c5 -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgIUAQ0Mn0MoWE86F8XfzQcupDAHvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OTExODM5NmItNGZkOS00ZGZiLTk5ZjgtYjY3NjJkNTVjZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3YYuLF6zK2253wOYpmwXZWCDWeb17xdMD8i FJsGmPFkc890N3u79JraXTR+bcwZ90hVk6qYQsBlSIJBS0zGrkVnq/HIlwxYqWqZ 9Se+5zUSewJRbAKsM4l2gN18I5Ve++SF3BXdM32R3JX5BWhpNznoRrERP+ciJglJ LTKeergkWUSVyAd8Y9UvpJNlq9hY2f/nsXmapT0NQC9y7hGfg/z/zERhdvpWYNhO 0Ba3yRqgSqYUjLw6RHAenVT5cJoYF4E8Pc++Vi+Wd8nxzsIf0gSGsWtbiz6i+ZgC vXvvHsVmUrwD95tce4ng8ASr9iU4O+FMOXdrnVKIblw/6ikeowIDAQABo4IDmTCC A5UwHQYDVR0OBBYEFDGVrr6PixHEWCzzYbX3lVet5IlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjc5MzJjMTctZWYyZS0z ZTgwLTkwMTUtOGIwMWU4ZjViNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALTr7MAwD BAFFW6IDBABFW6QDBABFW6cDBAFFW64DBABFW7oDBAKVj5ADBAKVj5gDBAKVj6QD BAKVj6wDBAKVj7QDBAKVj7wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC3yZ97kLxsJh2XAq9ipUfuas4JVV c274yCieQlqCZXS2zBMNS0YdlW4NRWf2W0T4Oel8w+ox450/3eCIDMcd+msan5Vv ujbHHlh75d2UZ/gXUpvmvFuYhd4Ba/A7c07o5XViqnP3nUUT8rLjoZPFemWc8Biv oVpVMW7xrpotGUBhqp3iHHhVwND/Ofhh0nuVBrzX6JySN4qkW4vi/5Y3FrfrWtUL hmehIx42qV+eF/5vPM6s9Yl96OV9yNe27UQ4KoyF/qkRqvPN8An03J+gH47m4WpO ZjcAC4ImdvA/hDi8YcFfdS3vlZFoqSSyR+wAGwA8jYi9a0Yj9AszZgf5xQ== -----END CERTIFICATE-----Generated at Sun Sep 20 19:40:56 2026 by rpki-client