$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa File: 936da8a2-1bee-3c6b-89ea-d0219b876b97.roa (raw, json) Hash identifier: J7o/tmziqTRsRYNCano7RWjSt3LTZ3sMApQAiqNtlgk= Subject key identifier: 35:5E:FC:4A:4B:86:62:1B:4A:DA:4D:98:FA:26:29:20:5B:EE:E3:34 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D5B4F9E11552834E480105E80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 33659 IP address blocks: 149.143.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9e:11:55:28:34:e4:80:10:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=89211352-32a8-43d7-b372-61aa81477971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:b7:1f:22:bf:43:bd:a5:f4:7a:25:da:36: 31:0e:a0:e1:d2:6e:d1:17:07:b3:40:af:75:26:1a: c8:e5:a2:61:b3:da:7c:4f:58:ec:99:79:ed:a2:6d: da:4b:8c:f1:33:0e:59:bd:a2:e8:00:af:c5:1e:5f: fa:96:bf:0e:d3:ae:98:f2:58:9f:a4:db:d9:23:fc: 01:31:dd:75:ce:f9:5c:46:80:cd:de:fa:fc:f0:6b: 8f:e3:4b:a7:9b:14:4d:e6:bf:aa:a9:d2:7e:7b:40: f8:0f:6b:bb:e2:15:5f:71:dd:44:a4:4d:fb:4f:2e: 27:e6:c2:0d:f0:1c:4b:48:31:b0:92:b3:b3:59:cf: f6:de:03:1f:7b:5d:a7:47:49:23:cd:9c:10:fb:50: b0:a0:b3:20:af:24:23:b2:d6:2c:82:88:54:c2:df: 02:f0:d5:a1:a0:47:38:6b:b1:c5:41:86:10:8d:36: c6:41:56:8f:d1:6c:08:3f:72:da:47:93:cc:e7:78: 35:16:b3:4f:52:82:52:0a:5f:6b:81:ce:b8:8c:c7: cb:63:36:91:34:9e:8b:4e:b8:ec:ed:5f:9b:e0:e6: 2f:3b:da:86:68:b8:59:32:c5:f5:51:98:d3:ae:32: 34:81:c3:fb:43:a4:83:0e:26:f4:79:23:8a:a7:f9: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5E:FC:4A:4B:86:62:1B:4A:DA:4D:98:FA:26:29:20:5B:EE:E3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/936da8a2-1bee-3c6b-89ea-d0219b876b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ee:8a:30:75:f9:a2:7b:bc:75:72:b5:09:a5:71:40:65:fa: ad:9b:b6:c0:90:71:0a:50:a7:ec:c5:61:68:11:f6:5a:65:a3: 82:ee:8e:ce:2d:94:cf:55:5a:b5:b8:50:3c:81:52:b2:3e:e4: f7:3c:67:e6:80:e9:35:47:81:57:0b:6c:5e:52:71:f5:0e:cc: f7:9d:f1:b3:ef:98:80:c1:e2:61:c7:6f:65:80:25:db:9c:41: bf:7c:6c:84:ac:db:52:83:9d:a5:53:f4:ab:7c:be:06:93:6e: 04:65:6f:f1:a1:99:f0:33:2a:68:51:a9:d0:4a:dd:96:a6:1a: db:30:e9:fc:d2:22:3f:a9:6d:5e:50:09:6d:c6:51:99:3b:bd: 84:32:91:ea:0e:15:c6:13:b6:04:0e:67:b1:47:87:93:86:2b: 5b:81:66:9e:59:33:b6:14:86:96:19:1d:40:74:1c:36:48:f3: 69:35:8c:92:25:19:5a:bb:2b:1f:d7:e7:af:58:7a:1a:ac:d9: bd:3b:af:fa:6c:7e:51:31:07:db:35:27:0d:cd:14:49:40:57: 9d:0b:2b:8c:61:86:27:cf:7e:71:20:aa:3c:85:2b:99:06:07: b7:62:bf:74:f2:ec:58:69:39:5b:50:dc:f5:6c:89:f7:69:55: d5:19:80:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT54RVSg05IAQXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ODkyMTEzNTItMzJhOC00M2Q3LWIzNzItNjFhYTgxNDc3OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/63HyK/Q72l9Hol2jYxDqDh0m7RFwezQK91 JhrI5aJhs9p8T1jsmXntom3aS4zxMw5ZvaLoAK/FHl/6lr8O066Y8lifpNvZI/wB Md11zvlcRoDN3vr88GuP40unmxRN5r+qqdJ+e0D4D2u74hVfcd1EpE37Ty4n5sIN 8BxLSDGwkrOzWc/23gMfe12nR0kjzZwQ+1CwoLMgryQjstYsgohUwt8C8NWhoEc4 a7HFQYYQjTbGQVaP0WwIP3LaR5PM53g1FrNPUoJSCl9rgc64jMfLYzaRNJ6LTrjs 7V+b4OYvO9qGaLhZMsX1UZjTrjI0gcP7Q6SDDib0eSOKp/lzfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVe/EpLhmIbStpNmPomKSBb7uM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTM2ZGE4YTItMWJlZS0z YzZiLTg5ZWEtZDAyMTliODc2Yjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3uijB1+aJ7vHVytQmlcUBl+q2btsCQcQpQp+zFYWgR9lplo4Lujs4t lM9VWrW4UDyBUrI+5Pc8Z+aA6TVHgVcLbF5ScfUOzPed8bPvmIDB4mHHb2WAJduc Qb98bISs21KDnaVT9Kt8vgaTbgRlb/GhmfAzKmhRqdBK3ZamGtsw6fzSIj+pbV5Q CW3GUZk7vYQykeoOFcYTtgQOZ7FHh5OGK1uBZp5ZM7YUhpYZHUB0HDZI82k1jJIl GVq7Kx/X569Yehqs2b07r/psflExB9s1Jw3NFElAV50LK4xhhifPfnEgqjyFK5kG B7div3Ty7FhpOVtQ3PVsifdpVdUZgJ8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:05:07 2026 by rpki-client