$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa File: 6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json) Hash identifier: XGZOvjLSd+65ZQ0sJjPhGDUD/TXhWFdzsB5wj18LwNM= Subject key identifier: 3E:45:A3:85:76:76:DC:27:1F:88:27:97:66:AF:4C:DC:AE:F5:37:D5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E9BE50C0E05C43880D2B684A0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 1239 IP address blocks: 149.143.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:0c:0e:05:c4:38:80:d2:b6:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=29661815-e1cd-475d-8306-f974608a373c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:b0:9b:6e:dd:cd:60:a0:20:3a:b4:98:8c: 4f:e7:64:8e:96:3e:e2:5f:2a:ef:77:75:18:a1:81: 91:5e:97:2c:16:53:05:c7:89:bd:7b:6a:c4:d0:87: 8e:e1:57:a1:aa:61:81:a3:32:2e:c7:c9:b4:dd:c7: 3e:3a:08:79:c4:ab:c4:3c:c4:ba:c6:a9:28:28:28: 6e:89:ca:af:1b:56:45:10:2e:af:dc:b6:e1:d5:61: a0:62:83:2c:3c:b0:d2:a0:34:d6:ec:12:3f:c4:5b: 81:85:3e:03:bb:9d:83:b4:eb:f5:92:49:bb:1c:39: f8:85:78:3f:cf:e8:11:a8:15:15:e7:95:c1:6b:18: c4:09:05:3a:b6:70:e9:34:d1:16:79:5c:40:20:69: bb:31:82:45:ff:94:3f:69:e0:ea:cd:94:b1:b2:46: 48:e1:62:f9:0a:71:11:a0:7d:ca:5c:a3:01:43:6b: 6a:e4:37:b1:2b:ce:cb:42:56:c8:dc:36:f0:63:b1: 13:25:df:c5:4f:66:9f:3b:52:0b:4c:8d:b3:1b:5b: 30:5c:d7:01:65:0a:2e:57:cf:c7:91:ef:1c:58:b4: bc:b8:ff:ea:7b:1e:09:40:fd:cf:0d:2c:b6:9a:92: 5d:6f:00:28:f4:ea:5b:f6:4d:14:b5:4f:de:97:2d: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:45:A3:85:76:76:DC:27:1F:88:27:97:66:AF:4C:DC:AE:F5:37:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:99:bf:f9:f1:81:1d:db:22:ff:e3:4d:bb:0a:7a:21:53:1c: bf:63:2d:fd:da:f3:0f:28:2b:4b:5a:21:fe:9c:d8:00:fc:1e: 5e:2b:65:22:1d:f8:22:40:d8:61:83:ef:eb:51:22:b1:94:a1: a8:0b:2b:cd:a1:be:65:50:b0:d1:bd:fa:df:10:a8:57:6e:6a: ff:48:59:96:28:8f:03:4d:ba:51:b6:8b:e1:19:5a:f7:99:bc: d6:5d:55:dd:f1:54:de:04:50:1f:02:62:25:6a:72:ea:8a:e6: 35:be:3b:83:57:a6:17:6c:f7:43:78:27:de:6f:ca:a1:29:8d: 19:d9:24:8b:f6:e2:09:e0:87:4e:e4:20:88:6f:0f:8f:32:85: 77:9a:44:51:6a:ab:3a:bb:df:bf:24:3c:7d:4f:4e:9b:d7:91: b9:21:19:47:cb:4c:f2:a9:ee:f7:2d:07:b9:06:80:5e:e4:d3: 41:21:b8:d4:b9:83:64:b6:18:62:28:b3:69:f0:f9:d9:7b:21: b8:3e:ce:48:f5:41:da:e9:37:78:f4:c3:ca:0f:c3:6d:47:86: 83:d7:23:14:be:1e:b7:3b:41:56:d5:10:a6:b0:e4:81:c9:1e: ec:39:7f:b1:df:96:08:6a:26:0a:c2:76:de:69:fb:a5:98:8e: a0:43:ff:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QwOBcQ4gNK2hKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk Mjk2NjE4MTUtZTFjZC00NzVkLTgzMDYtZjk3NDYwOGEzNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGKwm27dzWCgIDq0mIxP52SOlj7iXyrvd3UY oYGRXpcsFlMFx4m9e2rE0IeO4VehqmGBozIux8m03cc+Ogh5xKvEPMS6xqkoKChu icqvG1ZFEC6v3Lbh1WGgYoMsPLDSoDTW7BI/xFuBhT4Du52DtOv1kkm7HDn4hXg/ z+gRqBUV55XBaxjECQU6tnDpNNEWeVxAIGm7MYJF/5Q/aeDqzZSxskZI4WL5CnER oH3KXKMBQ2tq5DexK87LQlbI3DbwY7ETJd/FT2afO1ILTI2zG1swXNcBZQouV8/H ke8cWLS8uP/qex4JQP3PDSy2mpJdbwAo9Opb9k0UtU/ely2mmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Fo4V2dtwnH4gnl2avTNyu9TfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmQ3YTE4MTgtYjAzZi0z NDRkLWJhNmYtZDJmNDhkNmQ0YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaZv/nxgR3bIv/jTbsKeiFTHL9jLf3a8w8oK0taIf6c2AD8Hl4rZSId +CJA2GGD7+tRIrGUoagLK82hvmVQsNG9+t8QqFduav9IWZYojwNNulG2i+EZWveZ vNZdVd3xVN4EUB8CYiVqcuqK5jW+O4NXphds90N4J95vyqEpjRnZJIv24gngh07k IIhvD48yhXeaRFFqqzq7378kPH1PTpvXkbkhGUfLTPKp7vctB7kGgF7k00EhuNS5 g2S2GGIos2nw+dl7Ibg+zkj1QdrpN3j0w8oPw21HhoPXIxS+Hrc7QVbVEKaw5IHJ Huw5f7HflghqJgrCdt5p+6WYjqBD/+0= -----END CERTIFICATE-----Generated at Tue Jul 28 19:49:39 2026 by rpki-client