$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: DFDfLulacfCSPHdkOT1jLSXnC1a9GpPNm6AYJUPIDwg= Subject key identifier: F0:B8:B1:83:AD:1A:C6:48:73:6B:AD:A7:29:7C:DE:12:14:D3:30:AC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E9BE5098641DD218481134F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:09:86:41:dd:21:84:81:13:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=b07a1d6e-dfb0-4ef8-ae8f-405cb06602df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:b0:3f:27:08:68:cb:0a:ab:ec:63:27:02: 68:ae:d8:a1:4b:04:64:ff:c3:e4:ea:a7:64:a2:44: 98:c1:ce:a8:9f:09:6a:0b:cd:04:67:50:e5:f0:ff: 00:12:d2:5e:68:fe:17:b0:04:37:f5:09:c5:55:2e: 61:60:6b:8d:4f:f2:1a:a0:52:39:0e:08:50:4c:cd: 7a:19:3e:8a:02:e7:80:d1:55:ec:8a:4b:45:df:6d: 96:2b:6b:70:be:a8:03:77:ec:49:58:93:f0:a4:27: 28:af:7a:1f:99:2d:43:b2:9c:a9:84:20:0d:bd:09: c4:08:ba:55:3f:ea:59:a4:bf:61:4a:46:d3:ec:20: c6:37:4b:69:42:9f:05:d9:c0:a8:20:ab:ee:5c:59: 42:d6:64:f4:56:b3:c2:e4:cf:b1:3c:cf:1d:0e:9a: 1a:17:a3:9b:96:d9:a3:8f:49:7c:6d:b6:e2:f2:b9: 27:ad:59:4c:af:bc:69:8a:07:cc:b1:05:a6:59:e4: d9:5c:a4:54:53:55:f6:35:68:bb:73:d4:5c:dd:bf: 54:e4:1d:10:eb:2d:fa:e0:a0:34:f4:bc:34:c2:13: 0a:e0:84:9e:8e:47:73:99:fd:39:5a:c1:bc:c5:d9: 0e:69:1e:74:24:77:bd:d8:11:84:c4:d4:4e:b5:44: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:B1:83:AD:1A:C6:48:73:6B:AD:A7:29:7C:DE:12:14:D3:30:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d6:be:1a:d3:b8:3f:25:86:44:9e:37:5f:e7:26:d4:00:83: ac:36:26:d1:25:2e:bc:93:f5:45:d8:ab:a7:1a:18:a7:2b:cb: 60:1d:79:7d:38:e6:c6:1b:cb:88:98:80:46:b2:15:ef:45:ea: 55:c9:eb:8f:0e:cc:1f:b9:a5:98:8e:07:b8:7a:39:07:d3:e8: f5:94:c7:b7:ec:b4:28:7e:c6:80:a4:49:62:20:fe:46:3b:4f: 53:1f:57:bf:4b:70:84:f5:c9:85:05:94:cc:78:23:50:68:10: f2:54:80:e9:dc:c0:7d:c8:85:4e:ee:0a:a8:e7:5d:ac:62:74: 96:04:f5:cf:f4:1f:88:20:8b:ed:6c:db:f6:4e:30:12:e6:96: 8f:34:1c:8a:94:1a:4c:e2:e5:65:5c:b5:bf:9c:2b:3e:21:4b: 94:f2:b6:cf:62:86:a3:70:65:c5:f4:70:05:f4:2e:b0:d7:ee: 12:85:ac:ae:a6:58:0d:c7:cb:28:f5:07:15:95:4e:88:7f:3c: cc:84:72:50:98:15:32:bd:2d:e2:b9:ef:99:ae:23:66:84:20: 99:04:58:ae:77:8d:47:38:36:91:59:c7:ea:fb:2d:29:87:cb: ba:1e:ca:1a:7f:ce:e3:f8:0e:a2:81:9d:9a:04:0e:e7:43:82: 57:dd:ed:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QmGQd0hhIETT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YjA3YTFkNmUtZGZiMC00ZWY4LWFlOGYtNDA1Y2IwNjYwMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsviwPycIaMsKq+xjJwJortihSwRk/8Pk6qdk okSYwc6onwlqC80EZ1Dl8P8AEtJeaP4XsAQ39QnFVS5hYGuNT/IaoFI5DghQTM16 GT6KAueA0VXsiktF322WK2twvqgDd+xJWJPwpCcor3ofmS1DspyphCANvQnECLpV P+pZpL9hSkbT7CDGN0tpQp8F2cCoIKvuXFlC1mT0VrPC5M+xPM8dDpoaF6Obltmj j0l8bbbi8rknrVlMr7xpigfMsQWmWeTZXKRUU1X2NWi7c9Rc3b9U5B0Q6y364KA0 9Lw0whMK4ISejkdzmf05WsG8xdkOaR50JHe92BGExNROtURL1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC4sYOtGsZIc2utpyl83hIU0zCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADWvhrTuD8lhkSeN1/nJtQAg6w2JtElLryT9UXYq6caGKcry2AdeX04 5sYby4iYgEayFe9F6lXJ648OzB+5pZiOB7h6OQfT6PWUx7fstCh+xoCkSWIg/kY7 T1MfV79LcIT1yYUFlMx4I1BoEPJUgOncwH3IhU7uCqjnXaxidJYE9c/0H4ggi+1s 2/ZOMBLmlo80HIqUGkzi5WVctb+cKz4hS5Tyts9ihqNwZcX0cAX0LrDX7hKFrK6m WA3Hyyj1BxWVToh/PMyEclCYFTK9LeK575muI2aEIJkEWK53jUc4NpFZx+r7LSmH y7oeyhp/zuP4DqKBnZoEDudDglfd7ZA= -----END CERTIFICATE-----Generated at Tue Jul 28 13:40:41 2026 by rpki-client