$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: 0i1S05uozuYiJ8OpBNZG4QlF34eAZCs6g/0QM9ftlU0= Subject key identifier: 4C:E5:D6:8E:41:7E:2E:49:87:50:80:9D:51:3C:C1:86:73:C8:13:D3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E9BE5097938582B76C4DF7480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:09:79:38:58:2b:76:c4:df:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=c2b624b4-9563-4cb2-8ec3-90341e41baf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:8c:eb:6e:fb:82:e2:f7:9e:d1:82:4a:f4: 2d:7d:e7:3e:07:1d:6d:40:ae:90:85:cc:ad:03:51: 7f:6b:ca:88:3a:06:6e:e3:e0:36:8d:7e:15:46:87: 89:14:fb:c5:44:f4:30:35:47:47:ce:c7:c7:b5:81: 5d:26:28:d9:06:88:7d:5a:0f:36:ec:70:5d:95:cc: fb:a8:7d:db:71:1a:82:63:93:23:cb:5a:54:9a:75: 36:a4:80:0e:db:f4:f7:c4:14:76:ac:7d:b1:44:ba: 15:cf:89:21:66:2a:87:8b:65:b8:54:28:45:78:40: 59:51:51:f2:9c:ca:3a:b1:fe:71:4b:66:2d:fb:02: 3d:93:04:31:c8:62:56:00:49:47:9f:9f:b3:11:f1: 20:c2:2e:c5:1a:64:4e:16:7f:51:5a:b2:2f:bf:0b: 3a:76:ab:e1:fe:ad:55:6e:29:95:c8:70:48:42:21: 17:fe:ec:a0:34:54:e2:52:bc:68:80:84:3e:6c:54: d2:1b:9d:bf:43:f9:d9:41:d8:9a:97:37:27:c6:78: 41:89:14:c7:88:b0:d3:d4:ec:3c:f6:b8:2c:e8:ca: 3f:b6:e3:7a:e2:56:8a:b8:2c:f9:85:95:b1:2d:1b: c0:20:e5:e0:b0:51:8a:cb:5d:82:4a:c2:c7:1a:07: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E5:D6:8E:41:7E:2E:49:87:50:80:9D:51:3C:C1:86:73:C8:13:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7a:37:1c:1f:f9:d7:75:5d:f1:53:ca:f1:41:13:e2:b2:a8: ed:06:eb:9e:1e:01:09:74:18:e7:b7:93:a4:58:1c:a8:93:e5: 2a:4c:34:31:cd:c5:e7:4f:a2:ef:c0:ff:5e:90:a0:37:85:61: ed:2a:6a:ef:91:fc:1f:dd:11:9a:fb:b7:ec:88:c4:ea:d9:68: 72:3e:e6:9c:7e:16:25:ff:ad:9e:95:34:18:91:4e:b3:91:b0: 33:40:3d:26:ef:cf:99:d9:73:71:93:5c:49:34:2d:32:08:6a: a5:d4:71:03:68:31:04:a5:9d:ca:d3:52:53:fe:f4:5e:69:43: 1e:a3:cc:de:65:9b:6e:1a:56:3e:06:33:b0:1e:10:69:0a:f4: 3f:f0:53:e6:3d:78:f6:23:34:2e:22:44:4d:d6:60:ec:f3:6d: a2:04:6c:52:38:92:4d:bd:70:05:8c:49:ef:29:65:72:96:ca: 4e:b8:31:22:9c:77:b7:82:20:39:42:95:92:03:08:a2:30:11: 8e:4e:86:cf:3f:8b:a5:30:8d:37:d1:16:a6:78:64:e2:ea:5d: a0:2d:41:32:94:19:34:41:e5:31:29:3a:83:23:72:dd:8f:89: 5c:95:30:f5:7b:d4:c1:d1:42:cf:2b:ee:8c:41:cd:f0:f5:b8: b6:27:64:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Ql5OFgrdsTfdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YzJiNjI0YjQtOTU2My00Y2IyLThlYzMtOTAzNDFlNDFiYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT+M6277guL3ntGCSvQtfec+Bx1tQK6Qhcyt A1F/a8qIOgZu4+A2jX4VRoeJFPvFRPQwNUdHzsfHtYFdJijZBoh9Wg827HBdlcz7 qH3bcRqCY5Mjy1pUmnU2pIAO2/T3xBR2rH2xRLoVz4khZiqHi2W4VChFeEBZUVHy nMo6sf5xS2Yt+wI9kwQxyGJWAElHn5+zEfEgwi7FGmROFn9RWrIvvws6dqvh/q1V bimVyHBIQiEX/uygNFTiUrxogIQ+bFTSG52/Q/nZQdialzcnxnhBiRTHiLDT1Ow8 9rgs6Mo/tuN64laKuCz5hZWxLRvAIOXgsFGKy12CSsLHGgd8OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzl1o5Bfi5Jh1CAnVE8wYZzyBPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC16Nxwf+dd1XfFTyvFBE+KyqO0G654eAQl0GOe3k6RYHKiT5SpMNDHN xedPou/A/16QoDeFYe0qau+R/B/dEZr7t+yIxOrZaHI+5px+FiX/rZ6VNBiRTrOR sDNAPSbvz5nZc3GTXEk0LTIIaqXUcQNoMQSlncrTUlP+9F5pQx6jzN5lm24aVj4G M7AeEGkK9D/wU+Y9ePYjNC4iRE3WYOzzbaIEbFI4kk29cAWMSe8pZXKWyk64MSKc d7eCIDlClZIDCKIwEY5Ohs8/i6UwjTfRFqZ4ZOLqXaAtQTKUGTRB5TEpOoMjct2P iVyVMPV71MHRQs8r7oxBzfD1uLYnZA8= -----END CERTIFICATE-----Generated at Tue Jul 28 16:05:30 2026 by rpki-client