$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa File: 936da8a2-1bee-3c6b-89ea-d0219b876b97.roa (raw, json) Hash identifier: SWVcBKhIe71FYK/mt+DwsqRwYnKnBuGOMOLNc6SmHVo= Subject key identifier: F7:0D:A7:BE:98:80:F0:93:0B:E7:BF:EC:63:0F:0C:96:88:75:D7:D7 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B99EC4B09D538D31DD8FA4120 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa Signing time: Wed 22 Oct 2025 01:42:29 +0000 ROA not before: Wed 22 Oct 2025 01:42:29 +0000 ROA not after: Tue 20 Jan 2026 02:42:29 +0000 asID: 33659 IP address blocks: 149.143.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:ec:4b:09:d5:38:d3:1d:d8:fa:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 22 01:42:29 2025 GMT Not After : Jan 20 02:42:29 2026 GMT Subject: CN=753acb52-fc19-4ecb-a515-dcb5d7a2f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:94:82:41:c5:b9:6f:f6:e5:ad:39:3c:59: 43:61:ff:09:47:75:d4:35:89:a2:5e:77:c2:f2:17: 32:80:11:2b:5e:21:d2:ec:b2:4e:d4:a9:62:6c:31: 2e:81:7b:b2:aa:6b:82:99:e1:77:28:8f:74:7c:56: 62:c7:33:d2:19:7e:10:70:32:3a:72:49:a4:79:db: ea:3f:7c:8b:f6:4b:d3:29:cc:c1:54:08:b8:79:c3: 34:c2:75:c8:5d:e8:dc:75:94:dc:2b:5d:fb:07:87: c5:70:ff:4b:db:fd:86:d5:1e:cd:29:0c:b3:57:8f: 36:ab:50:b9:32:e7:85:71:6d:77:67:08:e1:5c:2e: 21:04:81:9e:da:66:64:f9:a6:dd:d5:a1:3b:ab:71: bb:4f:b3:c8:38:bd:c9:5b:08:8a:03:b1:0d:66:3c: ed:e5:97:ab:50:34:6d:d7:fc:18:3c:24:83:b9:32: ab:8a:b5:7b:d9:2a:0a:4c:a8:a9:dd:39:1b:b5:3d: 0b:f7:ce:5d:f5:74:32:9b:38:39:b7:e7:5e:b3:c3: 75:22:ea:46:1f:9b:78:6b:8b:ed:c8:29:7d:58:60: 57:8d:35:2a:4d:f2:ad:61:1b:d2:25:fa:04:92:24: 55:64:a5:21:4f:b4:87:98:51:d2:b2:16:72:60:e3: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0D:A7:BE:98:80:F0:93:0B:E7:BF:EC:63:0F:0C:96:88:75:D7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bd:78:e8:1b:32:53:99:26:ab:69:f1:6a:c8:8c:f5:d7:15: 3e:1d:e5:76:30:c0:9d:82:d8:de:c5:cb:4f:1e:23:26:b3:0b: 01:b2:52:e8:86:46:50:40:28:70:22:b9:6b:a8:1d:a9:e0:68: 15:cf:b9:de:de:bf:d2:af:b9:f1:71:7a:ed:ca:8f:ff:95:11: e7:bd:08:ee:77:90:09:a8:be:cf:18:92:c0:ed:e2:4d:e7:72: 8f:bf:a7:64:ee:42:90:3c:87:57:e8:42:7e:06:69:b6:26:ad: 13:b2:0d:7d:64:f8:53:7c:2e:f5:78:1f:71:d6:d7:9f:9a:bd: cb:c0:b8:0b:05:26:0e:73:a2:99:89:1a:7d:13:85:32:ec:32: 4d:4e:5e:d4:57:13:eb:b9:e1:5f:d4:3e:19:bb:e4:5d:d7:1a: 9e:9b:fa:e7:da:6a:4e:1e:a4:d8:1b:ac:bc:ad:63:2c:00:a2: b5:ce:51:b9:16:07:84:24:9d:6e:62:3b:4f:bd:de:38:e5:84: 32:0a:ae:ac:7d:87:1c:71:62:81:1f:83:e9:02:e6:42:a2:94: 90:e7:bc:f2:b7:55:05:11:46:43:2a:17:00:28:bb:18:89:c0: 00:6c:68:27:cc:b7:2c:ea:a9:8c:0b:54:f6:ff:9a:ae:32:24: ba:7c:7d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ7EsJ1TjTHdj6QSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAyMjAxNDIyOVoXDTI2MDEyMDAyNDIyOVowLzEtMCsGA1UEAxMk NzUzYWNiNTItZmMxOS00ZWNiLWE1MTUtZGNiNWQ3YTJmNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTOUgkHFuW/25a05PFlDYf8JR3XUNYmiXnfC 8hcygBErXiHS7LJO1KlibDEugXuyqmuCmeF3KI90fFZixzPSGX4QcDI6ckmkedvq P3yL9kvTKczBVAi4ecM0wnXIXejcdZTcK137B4fFcP9L2/2G1R7NKQyzV482q1C5 MueFcW13ZwjhXC4hBIGe2mZk+abd1aE7q3G7T7PIOL3JWwiKA7ENZjzt5ZerUDRt 1/wYPCSDuTKrirV72SoKTKip3TkbtT0L985d9XQymzg5t+des8N1IupGH5t4a4vt yCl9WGBXjTUqTfKtYRvSJfoEkiRVZKUhT7SHmFHSshZyYON83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcNp76YgPCTC+e/7GMPDJaIddfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTM2ZGE4YTItMWJlZS0z YzZiLTg5ZWEtZDAyMTliODc2Yjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy9eOgbMlOZJqtp8WrIjPXXFT4d5XYwwJ2C2N7Fy08eIyazCwGyUuiG RlBAKHAiuWuoHangaBXPud7ev9KvufFxeu3Kj/+VEee9CO53kAmovs8YksDt4k3n co+/p2TuQpA8h1foQn4GabYmrROyDX1k+FN8LvV4H3HW15+avcvAuAsFJg5zopmJ Gn0ThTLsMk1OXtRXE+u54V/UPhm75F3XGp6b+ufaak4epNgbrLytYywAorXOUbkW B4QknW5iO0+93jjlhDIKrqx9hxxxYoEfg+kC5kKilJDnvPK3VQURRkMqFwAouxiJ wABsaCfMtyzqqYwLVPb/mq4yJLp8fWY= -----END CERTIFICATE-----Generated at Wed Nov 5 19:06:03 2025 by rpki-client