$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa File: 699bb085-21f9-3bdc-ab99-1d59c26ac363.roa (raw, json) Hash identifier: eidfbdXyoaom/MUvhKKKsb/nN31hwOOS+BWzGQw15mc= Subject key identifier: 9D:9A:7E:37:45:8A:32:8D:D4:A1:C1:C2:39:0E:85:F1:20:06:25:E2 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D52EF7D918CC389290A049880 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa Signing time: Sun 29 Mar 2026 01:00:24 +0000 ROA not before: Sun 29 Mar 2026 01:00:24 +0000 ROA not after: Sat 27 Jun 2026 01:00:24 +0000 asID: 20115 IP address blocks: 149.143.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:ef:7d:91:8c:c3:89:29:0a:04:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 29 01:00:24 2026 GMT Not After : Jun 27 01:00:24 2026 GMT Subject: CN=b3dce46a-9709-4cc9-bf67-e346e8168fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:19:5b:2d:da:f9:66:61:2c:3f:ce:bd:20: 66:b9:c8:87:a6:21:d1:44:fa:b0:26:3a:de:20:6c: f3:f7:ea:8e:dc:4d:d7:99:32:25:a9:7f:17:a0:8c: 98:8a:53:1e:7d:fc:b1:ff:42:61:01:c8:0d:30:1c: 54:9a:05:19:a4:9c:04:de:f8:4e:f1:62:73:bf:0c: d7:42:91:84:d1:ab:64:04:cd:c9:b3:2e:d7:ac:69: 11:79:00:9e:ba:cc:20:4f:35:4c:f3:ee:61:75:c4: fe:82:3e:6c:52:98:7d:27:23:3e:ef:06:be:e3:62: 48:ed:c5:20:b8:81:af:2b:61:da:1e:a6:85:9f:22: 31:f3:06:09:94:84:81:b6:4f:db:92:f1:80:26:de: d1:76:2c:72:90:99:5d:b1:4b:40:7f:ab:1e:f4:be: fe:ff:22:6f:b8:20:ad:0f:55:36:1a:19:9a:33:fd: ad:20:1d:a2:a5:ea:0b:4f:14:77:8a:04:0b:dd:85: 38:f7:8c:5b:15:a8:43:a8:b7:bb:68:eb:6e:d9:c2: 79:bb:dc:37:ef:05:65:b0:77:b7:81:53:95:16:59: d8:26:b2:62:0f:bd:e1:c6:41:92:61:ec:08:33:d8: 58:e4:84:47:cc:4a:28:f1:b3:3a:49:91:17:10:a5: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:7E:37:45:8A:32:8D:D4:A1:C1:C2:39:0E:85:F1:20:06:25:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f7:02:9b:8c:ee:6f:12:73:72:c4:34:74:40:08:8a:3c:95: 14:73:ef:bf:f4:d0:d1:6e:06:6b:30:77:29:2f:e9:2d:1e:09: fd:e1:1b:ff:a6:9d:3e:4d:60:dc:4c:2e:7a:8c:20:6d:46:02: aa:2a:40:02:be:c9:13:03:95:c8:e3:19:5f:0e:b0:db:7a:b2: de:a1:b5:92:b6:1a:05:d2:6a:59:75:e2:ae:25:14:59:db:6d: 94:ce:09:b9:29:e6:8a:d2:85:aa:95:0b:1e:4e:49:a2:92:b9: 84:6f:cb:2e:95:82:2b:54:2d:a2:7c:f3:8a:bb:fc:70:b3:47: c2:0b:3b:3e:b2:3a:4f:c8:15:ca:17:a2:96:59:04:bb:ba:83: 97:62:2d:14:02:c8:fd:53:e3:24:9a:1e:1c:73:61:b2:a9:74: 30:0c:6f:8b:e1:f3:39:6c:54:84:7c:bf:8b:30:f6:15:a1:ea: cc:8b:a6:64:19:a8:4e:24:e3:8e:97:a7:39:7f:dd:c6:ed:bc: b5:ff:06:04:07:33:14:7f:2c:8a:5b:67:31:94:73:51:09:d3: 22:7e:a3:87:ab:91:39:e9:40:c6:d3:39:44:f8:d7:a2:4a:30: 40:0c:0a:1b:74:a6:7a:24:64:f7:89:7c:b6:c0:82:36:a4:61: eb:18:65:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1S732RjMOJKQoEmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMyOTAxMDAyNFoXDTI2MDYyNzAxMDAyNFowLzEtMCsGA1UEAxMk YjNkY2U0NmEtOTcwOS00Y2M5LWJmNjctZTM0NmU4MTY4ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweAZWy3a+WZhLD/OvSBmuciHpiHRRPqwJjre IGzz9+qO3E3XmTIlqX8XoIyYilMeffyx/0JhAcgNMBxUmgUZpJwE3vhO8WJzvwzX QpGE0atkBM3Jsy7XrGkReQCeuswgTzVM8+5hdcT+gj5sUph9JyM+7wa+42JI7cUg uIGvK2HaHqaFnyIx8wYJlISBtk/bkvGAJt7RdixykJldsUtAf6se9L7+/yJvuCCt D1U2GhmaM/2tIB2ipeoLTxR3igQL3YU494xbFahDqLe7aOtu2cJ5u9w37wVlsHe3 gVOVFlnYJrJiD73hxkGSYewIM9hY5IRHzEoo8bM6SZEXEKXJSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2afjdFijKN1KHBwjkOhfEgBiXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjk5YmIwODUtMjFmOS0z YmRjLWFiOTktMWQ1OWMyNmFjMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX3ApuM7m8Sc3LENHRACIo8lRRz77/00NFuBmswdykv6S0eCf3hG/+m nT5NYNxMLnqMIG1GAqoqQAK+yRMDlcjjGV8OsNt6st6htZK2GgXSall14q4lFFnb bZTOCbkp5orShaqVCx5OSaKSuYRvyy6VgitULaJ884q7/HCzR8ILOz6yOk/IFcoX opZZBLu6g5diLRQCyP1T4ySaHhxzYbKpdDAMb4vh8zlsVIR8v4sw9hWh6syLpmQZ qE4k446Xpzl/3cbtvLX/BgQHMxR/LIpbZzGUc1EJ0yJ+o4erkTnpQMbTOUT416JK MEAMCht0pnokZPeJfLbAgjakYesYZWc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:57 2026 by rpki-client