$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa File: 3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa (raw, json) Hash identifier: QjFKG1evfiBX7G4h1GL/mLl3hdJbgsyoLmKdLf+IR68= Subject key identifier: 63:ED:D8:95:BC:62:D7:76:31:24:4B:EE:F0:A5:01:34:20:2E:18:A8 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CE36225BBC6E458F871C87080 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 64200 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:25:bb:c6:e4:58:f8:71:c8:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=9517106e-31af-4802-9d3a-55d0730e7c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:8d:86:f7:f8:0b:27:07:ec:ba:3f:7c:f1: b6:ed:a9:60:54:44:48:cf:b7:11:73:a0:a2:1f:70: f4:7f:bc:61:3f:f2:6c:76:6b:4a:d1:8b:7c:aa:31: 05:40:53:d4:1e:d8:04:99:1c:34:e8:36:b4:b2:e9: df:14:d6:50:10:4a:4f:b6:a5:c5:88:38:59:66:d9: cc:8d:b3:f3:9d:f0:da:a8:e1:0c:ad:33:0f:c6:66: 8a:4c:c2:96:65:07:ad:fb:a7:04:36:6b:c8:13:97: b1:10:d6:03:6d:6e:f6:b3:6c:31:c6:55:b6:a7:8b: 74:ae:1b:23:bc:54:a4:47:0d:2a:19:08:22:d8:93: 47:58:19:09:95:2e:5f:2e:25:14:6b:ac:36:ad:3a: 77:dc:b6:2a:b0:42:fa:26:81:0c:39:1c:64:fb:0e: a8:79:e1:66:df:32:6c:54:d3:1c:01:a2:06:78:a8: 68:2d:45:f1:d6:a9:08:d6:ff:1e:e3:1e:0c:16:56: 7a:62:75:55:95:d7:75:af:cd:b8:0b:f8:f5:4b:59: a3:d1:2a:8f:7b:80:c9:b1:2f:10:46:07:28:1f:c7: 40:7b:34:87:68:c0:d7:4c:0b:d2:b1:ee:6a:b2:cf: db:7c:ec:98:5a:d2:a7:a7:a2:7c:bb:c0:42:6f:25: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:D8:95:BC:62:D7:76:31:24:4B:EE:F0:A5:01:34:20:2E:18:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0d:32:40:31:7f:f6:99:77:6d:fd:e8:99:b9:d9:55:ff:cb: ff:fa:9f:6b:a1:c5:40:4e:44:45:55:9a:30:1b:ad:6a:b4:1f: d4:ed:db:ce:b3:3b:9f:7e:e3:9f:89:53:a0:d1:9e:e9:fb:16: 02:af:01:43:54:5b:16:13:48:f5:60:57:bb:8b:0e:01:c3:1c: 9e:9d:d1:06:5d:72:15:3e:73:51:e2:6b:f0:2f:c4:44:e0:84: 97:eb:e1:db:86:98:79:0e:c0:a4:28:fa:97:aa:9d:2a:55:11: 7e:c7:51:f4:e8:cc:f6:b7:8c:3d:e5:fa:12:94:85:81:cb:b3: 83:86:4f:81:d5:fe:7b:06:e4:74:7b:8f:b4:3d:19:3c:0e:79: 6d:15:20:b6:2d:a4:7f:be:0c:a9:d1:ef:40:b6:36:c0:90:04: 28:1b:60:57:25:0f:da:a1:dc:57:8d:ca:b5:5c:f7:84:b2:da: 0a:5e:45:3b:30:a8:be:4b:ed:ca:f9:3d:53:85:b8:d6:75:03: 55:9e:6e:b9:a4:c6:09:9e:2b:3e:76:7c:20:53:17:57:dd:44: 10:53:24:4a:a5:f7:57:e6:1a:64:7b:12:1d:23:9c:6d:19:85: df:8e:53:d3:8c:33:02:b0:5f:9a:0f:0b:fe:4f:c7:c7:03:a3: 2a:88:b5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYiW7xuRY+HHIcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk OTUxNzEwNmUtMzFhZi00ODAyLTlkM2EtNTVkMDczMGU3YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhyNhvf4CycH7Lo/fPG27algVERIz7cRc6Ci H3D0f7xhP/JsdmtK0Yt8qjEFQFPUHtgEmRw06Da0sunfFNZQEEpPtqXFiDhZZtnM jbPznfDaqOEMrTMPxmaKTMKWZQet+6cENmvIE5exENYDbW72s2wxxlW2p4t0rhsj vFSkRw0qGQgi2JNHWBkJlS5fLiUUa6w2rTp33LYqsEL6JoEMORxk+w6oeeFm3zJs VNMcAaIGeKhoLUXx1qkI1v8e4x4MFlZ6YnVVldd1r824C/j1S1mj0SqPe4DJsS8Q RgcoH8dAezSHaMDXTAvSse5qss/bfOyYWtKnp6J8u8BCbyXX/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPt2JW8Ytd2MSRL7vClATQgLhioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvM2UxNmYyZjAtYTFiNS0z NzFiLWE5MTctZGJkMDQwZTljMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoNMkAxf/aZd2396Jm52VX/y//6n2uhxUBOREVVmjAbrWq0H9Tt286z O59+45+JU6DRnun7FgKvAUNUWxYTSPVgV7uLDgHDHJ6d0QZdchU+c1Hia/AvxETg hJfr4duGmHkOwKQo+peqnSpVEX7HUfTozPa3jD3l+hKUhYHLs4OGT4HV/nsG5HR7 j7Q9GTwOeW0VILYtpH++DKnR70C2NsCQBCgbYFclD9qh3FeNyrVc94Sy2gpeRTsw qL5L7cr5PVOFuNZ1A1WebrmkxgmeKz52fCBTF1fdRBBTJEql91fmGmR7Eh0jnG0Z hd+OU9OMMwKwX5oPC/5Px8cDoyqItVw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:43:58 2026 by rpki-client