$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: qaHz+CqwRQa2XFw4OyysabBGZ83/Z4grwAvLfvO52qg= Subject key identifier: 4E:17:B1:CA:45:A3:F3:82:2B:40:DF:60:A2:42:50:9D:A0:96:41:7A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F3E47D6D7330CB4C3F0BC1040 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d6:d7:33:0c:b4:c3:f0:bc:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=e3a34916-de2c-4933-80db-64253ceb49cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:24:84:d1:f6:b1:15:30:31:cc:3c:b5:27:da: 76:e3:14:b4:87:f2:2a:50:3c:d0:18:44:9a:be:f1: 02:f9:d4:af:b6:20:b8:f6:15:b0:f3:d1:2c:e3:0d: 6f:15:95:cc:4c:01:63:cd:ef:cf:aa:a9:49:dd:8c: c0:88:be:8a:46:8f:2f:1c:23:4a:d6:d6:d4:7d:15: 2c:e5:8b:01:39:5e:57:fe:6f:11:eb:9d:b6:2b:bc: ae:fa:ab:45:ec:1d:0f:b3:30:a4:0d:e7:d3:39:09: 81:4f:d3:a5:4d:34:fa:54:f5:ea:39:c3:52:ab:a6: 82:8c:24:fc:fa:6e:0c:4e:a6:c0:1d:84:9c:d2:3d: 07:59:aa:cf:34:0b:0b:d7:47:85:ea:ea:48:1b:65: 7f:e0:51:3e:cf:9b:f8:da:bd:9d:19:4d:20:c0:fa: 12:c1:5e:d6:20:f5:58:c3:53:33:3d:1d:8b:2e:cd: 93:21:da:a8:c7:06:17:ee:57:53:aa:d0:10:cd:4b: 00:23:80:a8:b3:f0:3b:2f:a7:95:b0:85:0f:45:14: b0:db:af:a1:1e:4e:81:02:52:6c:db:76:04:51:2f: 21:05:c3:00:ee:c1:89:61:1d:0c:2d:a8:fa:00:e7: 23:5e:22:9e:43:f2:90:a5:54:75:6e:d5:cb:29:aa: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:17:B1:CA:45:A3:F3:82:2B:40:DF:60:A2:42:50:9D:A0:96:41:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c1:3c:4c:25:29:f3:33:25:1d:d7:07:db:98:8c:41:9d:ac: f8:f1:9f:81:8c:28:af:43:6d:db:e0:7a:02:c6:5b:2c:26:29: eb:2d:7e:8a:91:91:d5:e2:d9:a1:38:ae:63:db:17:60:f0:81: 24:a8:1d:70:11:70:ab:c3:d5:b3:4d:ed:f3:a0:69:a0:45:e8: 85:1b:58:1f:29:95:e7:ad:fc:30:17:25:21:0f:db:6b:bf:9b: 49:b0:b9:a0:f4:50:df:ba:71:0d:cf:3b:a0:ff:9b:55:28:13: 03:d8:4b:58:27:58:5f:ae:bf:6d:3f:74:5a:83:4c:c9:a4:49: 83:9b:84:ec:c5:31:26:c2:ba:1f:c7:1c:c6:2f:a8:34:4c:b8: 1a:48:3d:55:38:c3:4b:e2:72:43:bc:df:82:6f:86:f4:fb:83: dc:e6:46:9e:8d:5c:ba:16:a9:6e:6d:96:57:b2:18:1f:b1:af: 0f:36:d7:60:51:bf:3e:47:b9:c2:2c:75:38:34:a5:fe:bc:41: 55:35:34:61:f5:68:8e:1c:4a:34:1e:ba:e5:a3:74:fb:8f:56: b6:54:fb:0e:75:3c:b6:88:70:59:d5:2d:c2:3c:ee:4e:b6:d6: ed:0c:9f:51:8a:37:5f:df:7c:b0:a2:f6:ed:7f:fa:69:1c:e6: 97:47:47:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9bXMwy0w/C8EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZTNhMzQ5MTYtZGUyYy00OTMzLTgwZGItNjQyNTNjZWI0OWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ySE0faxFTAxzDy1J9p24xS0h/IqUDzQGESa vvEC+dSvtiC49hWw89Es4w1vFZXMTAFjze/PqqlJ3YzAiL6KRo8vHCNK1tbUfRUs 5YsBOV5X/m8R6522K7yu+qtF7B0PszCkDefTOQmBT9OlTTT6VPXqOcNSq6aCjCT8 +m4MTqbAHYSc0j0HWarPNAsL10eF6upIG2V/4FE+z5v42r2dGU0gwPoSwV7WIPVY w1MzPR2LLs2TIdqoxwYX7ldTqtAQzUsAI4Cos/A7L6eVsIUPRRSw26+hHk6BAlJs 23YEUS8hBcMA7sGJYR0MLaj6AOcjXiKeQ/KQpVR1btXLKaqLxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4XscpFo/OCK0DfYKJCUJ2glkF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7BPEwlKfMzJR3XB9uYjEGdrPjxn4GMKK9DbdvgegLGWywmKestfoqR kdXi2aE4rmPbF2DwgSSoHXARcKvD1bNN7fOgaaBF6IUbWB8pleet/DAXJSEP22u/ m0mwuaD0UN+6cQ3PO6D/m1UoEwPYS1gnWF+uv20/dFqDTMmkSYObhOzFMSbCuh/H HMYvqDRMuBpIPVU4w0vickO834JvhvT7g9zmRp6NXLoWqW5tlleyGB+xrw8212BR vz5HucIsdTg0pf68QVU1NGH1aI4cSjQeuuWjdPuPVrZU+w51PLaIcFnVLcI87k62 1u0Mn1GKN1/ffLCi9u1/+mkc5pdHR9o= -----END CERTIFICATE-----Generated at Mon Sep 21 13:52:48 2026 by rpki-client