$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3525dbd8-e693-310b-9d20-829abadda9ab.roa File: 3525dbd8-e693-310b-9d20-829abadda9ab.roa (raw, json) Hash identifier: ZaFvVZ0PGXmDLGx/bmqmsiuKwQ+qfbWsrTVLuSlH3JQ= Subject key identifier: B0:08:BF:F1:5A:4F:E0:B7:3F:96:BE:A6:12:3A:1D:D0:3F:F2:7E:55 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CC5726CE8626770CF5256BA00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3525dbd8-e693-310b-9d20-829abadda9ab.roa Signing time: Fri 06 Feb 2026 08:39:26 +0000 ROA not before: Fri 06 Feb 2026 08:39:26 +0000 ROA not after: Thu 07 May 2026 07:39:26 +0000 asID: 212238 IP address blocks: 149.143.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c5:72:6c:e8:62:67:70:cf:52:56:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 6 08:39:26 2026 GMT Not After : May 7 07:39:26 2026 GMT Subject: CN=6d32ce3b-495f-44de-ba24-ba962519689c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:ef:d7:cd:20:f2:57:ab:eb:0f:b1:7e:d3: ca:b9:f8:7c:f9:51:77:16:f0:8f:30:dd:67:55:12: 6e:69:c8:5e:24:53:0a:86:9e:56:03:fe:f5:e6:49: ef:e8:b2:4d:28:86:19:15:7a:51:50:fa:7b:6d:17: 94:18:01:ba:3f:6b:1d:c2:6b:5b:42:dc:56:36:ff: 60:2b:46:e0:e1:64:19:6e:ea:8e:58:d1:69:48:cf: 46:9a:62:8e:e6:a7:ea:21:ad:33:ed:90:d0:6e:df: f5:0c:06:e7:88:fc:b7:a9:5d:7d:8e:8b:a5:67:05: 2c:34:4a:77:0d:87:85:51:95:74:5a:25:58:a4:ab: 0f:34:f4:31:ce:5f:74:24:ef:14:78:6a:df:9c:3f: 0b:d7:b3:77:28:42:8b:eb:c2:8e:7e:4d:f3:90:a6: 20:1d:a6:d3:45:33:4e:45:01:eb:1d:26:b4:16:27: 3c:44:16:e9:f7:82:87:f8:41:dc:1f:7a:75:d2:c0: 41:54:8b:0c:4b:08:96:55:3d:06:72:1c:f4:5c:59: 65:3e:87:f2:1b:61:64:e4:c3:cf:cb:11:1e:c4:aa: 94:e1:51:9e:56:60:ed:8e:75:7f:10:7f:27:65:5a: 0c:c6:ad:48:31:77:0c:bd:46:88:ca:c5:8c:e3:3c: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:08:BF:F1:5A:4F:E0:B7:3F:96:BE:A6:12:3A:1D:D0:3F:F2:7E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3525dbd8-e693-310b-9d20-829abadda9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:82:80:e4:59:a4:b1:d0:e6:4f:9d:ba:a6:4a:f0:51:74:ec: 1e:34:61:b7:3f:13:1c:28:85:33:36:df:ed:ec:71:bd:e6:73: 74:93:18:eb:8f:5a:cd:ff:9c:54:1b:08:8e:c8:42:d8:01:8b: d3:60:8b:8a:ce:79:5b:00:49:55:01:9e:ae:94:95:2c:87:ae: 2d:aa:75:df:19:66:9a:ea:ab:69:cc:af:0f:82:a8:89:44:75: d6:7c:39:44:07:6a:34:a8:32:e0:9d:ff:fb:16:21:ce:b4:9c: bc:75:df:65:bb:91:da:14:98:5f:3a:83:c6:2f:7d:b2:63:dc: f2:08:87:03:f3:d3:6d:f1:f6:f4:41:8c:3d:63:d5:12:88:46: 1d:76:ce:83:d6:17:c4:a9:f2:87:8a:7b:bc:c7:3e:2e:3d:7f: ec:26:74:d8:0b:6d:35:5f:17:10:cd:1c:da:d0:7b:22:ab:c7: 92:da:2a:2a:e4:49:e5:12:76:6c:eb:40:ab:4a:c2:d1:7e:62: c8:27:b5:f9:05:98:93:65:d3:ab:de:b7:93:c7:29:be:4f:ca: b0:f5:f6:26:27:ae:e7:1e:d8:48:e8:0e:0b:53:12:0c:ea:89: 62:a5:b6:b9:b2:a9:ae:6a:4e:3d:4f:b2:5a:c6:b9:7a:0d:f2: 8f:a1:0e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzFcmzoYmdwz1JWugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDIwNjA4MzkyNloXDTI2MDUwNzA3MzkyNlowLzEtMCsGA1UEAxMk NmQzMmNlM2ItNDk1Zi00NGRlLWJhMjQtYmE5NjI1MTk2ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJLv180g8ler6w+xftPKufh8+VF3FvCPMN1n VRJuacheJFMKhp5WA/715knv6LJNKIYZFXpRUPp7bReUGAG6P2sdwmtbQtxWNv9g K0bg4WQZbuqOWNFpSM9GmmKO5qfqIa0z7ZDQbt/1DAbniPy3qV19joulZwUsNEp3 DYeFUZV0WiVYpKsPNPQxzl90JO8UeGrfnD8L17N3KEKL68KOfk3zkKYgHabTRTNO RQHrHSa0Fic8RBbp94KH+EHcH3p10sBBVIsMSwiWVT0Gchz0XFllPofyG2Fk5MPP yxEexKqU4VGeVmDtjnV/EH8nZVoMxq1IMXcMvUaIysWM4zxqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAIv/FaT+C3P5a+phI6HdA/8n5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzUyNWRiZDgtZTY5My0z MTBiLTlkMjAtODI5YWJhZGRhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOCgORZpLHQ5k+duqZK8FF07B40Ybc/ExwohTM23+3scb3mc3STGOuP Ws3/nFQbCI7IQtgBi9Ngi4rOeVsASVUBnq6UlSyHri2qdd8ZZprqq2nMrw+CqIlE ddZ8OUQHajSoMuCd//sWIc60nLx132W7kdoUmF86g8YvfbJj3PIIhwPz023x9vRB jD1j1RKIRh12zoPWF8Sp8oeKe7zHPi49f+wmdNgLbTVfFxDNHNrQeyKrx5LaKirk SeUSdmzrQKtKwtF+YsgntfkFmJNl06vet5PHKb5PyrD19iYnruce2EjoDgtTEgzq iWKltrmyqa5qTj1PslrGuXoN8o+hDlE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:53:38 2026 by rpki-client