$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa File: 3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa (raw, json) Hash identifier: 24T3qyizv2mMHbDAZ++kaBPwuB4lIQKSpc9XIqQB7vA= Subject key identifier: DB:58:3C:D9:40:CB:87:A9:1A:36:BB:21:AB:EF:4B:8D:BA:B7:7E:B5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EA44524966FB5B399F4D63E40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 64200 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:24:96:6f:b5:b3:99:f4:d6:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=f3506ad4-43be-449f-b526-c1e07e90eb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:6a:ab:25:75:b9:f9:63:64:09:72:5c:c6: 35:f2:2d:33:5f:38:f9:cd:48:c5:23:44:f6:7c:ab: 86:0d:8d:d1:c7:fd:04:02:60:17:85:aa:fa:ed:7f: 13:59:63:16:4a:af:0a:b7:89:c1:9a:95:d1:7c:b2: ce:f7:8c:b3:1d:eb:7d:81:dd:07:d8:3a:4e:bd:80: dd:bb:ee:39:c9:0b:4d:79:56:d5:93:30:18:bf:12: 3e:7f:7b:54:2b:b3:96:29:16:1d:88:8a:db:26:a6: 70:c1:6f:7b:7e:f4:4d:16:08:79:56:86:08:c0:5d: 5f:07:e0:b1:5a:e2:f7:72:3e:85:53:09:3a:71:ed: f4:5c:03:da:06:50:bc:55:ab:b9:5d:36:89:1a:0e: 7b:4f:8d:6a:77:e1:90:a3:0c:b9:01:67:fe:7a:8a: c0:3c:14:a3:53:ee:47:26:21:bb:27:a5:6e:b1:bb: 11:8e:c9:5b:01:a1:6f:f0:1d:53:99:7e:e8:d9:eb: 71:e8:b0:f2:22:1d:ab:7c:45:39:89:9b:70:d4:5a: 30:c7:eb:83:67:8a:de:9d:66:ce:54:e7:f1:50:cc: 05:a5:83:f3:8d:33:8b:40:70:eb:e3:c3:a7:09:6d: 62:6b:63:97:82:f3:1e:59:bc:25:98:cf:2a:b3:77: 14:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:58:3C:D9:40:CB:87:A9:1A:36:BB:21:AB:EF:4B:8D:BA:B7:7E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:53:02:49:ec:cf:58:ba:f6:91:4b:51:0a:6c:41:ec:1a:d9: 84:5d:b0:7e:e8:16:22:60:30:e0:e0:f3:bd:a5:61:38:9a:74: 4b:9d:f0:0a:fa:ba:6b:57:68:bb:f2:bd:26:e0:b6:5c:9b:10: 53:31:a1:37:15:d9:31:4b:5a:38:51:07:52:0b:f9:e6:8f:45: 7d:fd:de:60:fe:5a:87:17:8a:d3:ec:fb:b7:f9:b6:03:37:fb: 04:79:4a:a6:7c:6f:a7:ae:46:51:97:45:db:b0:3a:0f:89:40: 69:30:ad:3d:e6:a6:fa:9b:30:c9:98:53:73:c8:8b:2f:24:dc: da:31:98:41:8e:01:fd:3f:0c:d0:a0:aa:08:01:81:44:58:29: 82:73:5f:93:16:21:40:0d:eb:67:fb:1f:50:9c:11:59:d9:ab: d1:b5:36:32:ba:1f:0a:73:5b:fc:67:3a:e2:21:8b:ea:30:f4: 44:c9:8b:62:ce:a3:e1:29:25:87:39:06:49:53:17:05:ed:3d: d8:99:fd:34:d9:6d:20:0d:bf:1d:89:92:76:c4:28:69:c2:18: 5e:7b:90:19:a3:3f:1b:66:07:d2:fd:28:77:16:e6:68:86:dc: cf:04:0d:2d:85:fc:e4:8f:c3:68:aa:52:13:bc:33:13:4a:61: fc:0e:63:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRSSWb7WzmfTWPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk ZjM1MDZhZDQtNDNiZS00NDlmLWI1MjYtYzFlMDdlOTBlYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZqqyV1ufljZAlyXMY18i0zXzj5zUjFI0T2 fKuGDY3Rx/0EAmAXhar67X8TWWMWSq8Kt4nBmpXRfLLO94yzHet9gd0H2DpOvYDd u+45yQtNeVbVkzAYvxI+f3tUK7OWKRYdiIrbJqZwwW97fvRNFgh5VoYIwF1fB+Cx WuL3cj6FUwk6ce30XAPaBlC8Vau5XTaJGg57T41qd+GQowy5AWf+eorAPBSjU+5H JiG7J6VusbsRjslbAaFv8B1TmX7o2etx6LDyIh2rfEU5iZtw1Fowx+uDZ4renWbO VOfxUMwFpYPzjTOLQHDr48OnCW1ia2OXgvMeWbwlmM8qs3cU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtYPNlAy4epGja7IavvS426t361MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvM2UxNmYyZjAtYTFiNS0z NzFiLWE5MTctZGJkMDQwZTljMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJTAknsz1i69pFLUQpsQewa2YRdsH7oFiJgMODg872lYTiadEud8Ar6 umtXaLvyvSbgtlybEFMxoTcV2TFLWjhRB1IL+eaPRX393mD+WocXitPs+7f5tgM3 +wR5SqZ8b6euRlGXRduwOg+JQGkwrT3mpvqbMMmYU3PIiy8k3NoxmEGOAf0/DNCg qggBgURYKYJzX5MWIUAN62f7H1CcEVnZq9G1NjK6HwpzW/xnOuIhi+ow9ETJi2LO o+EpJYc5BklTFwXtPdiZ/TTZbSANvx2JknbEKGnCGF57kBmjPxtmB9L9KHcW5miG 3M8EDS2F/OSPw2iqUhO8MxNKYfwOY8s= -----END CERTIFICATE-----Generated at Tue Jul 28 17:22:35 2026 by rpki-client