$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa File: bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa (raw, json) Hash identifier: fzKuxrA7tdXcL9DZhIpHWonSnwNRjsLZ7oDBq8sBbSw= Subject key identifier: 9D:6F:71:CB:FB:C5:F1:2B:D5:1E:D9:53:FC:ED:A2:AC:08:20:2C:F2 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E9BE50992B6DD3F6DAF1E8700 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 1239 IP address blocks: 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:09:92:b6:dd:3f:6d:af:1e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=5328889c-60ed-4075-85aa-6772913691ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:44:07:d0:56:96:8a:77:66:3a:87:30:bc: 33:23:8b:78:88:72:13:82:f5:a6:d3:93:9d:3d:5e: 44:c3:be:ce:17:f5:1e:eb:53:69:46:b3:03:82:81: df:6c:46:3d:38:fa:4b:91:3c:bb:0f:4f:f4:0b:47: 0b:88:1e:eb:fb:59:e9:71:52:08:96:01:2d:86:12: fa:b2:b8:ad:91:15:b9:35:6d:ab:9e:3b:bb:52:75: 57:c3:fd:e1:7f:a5:a9:79:57:c8:cb:76:9d:1d:2f: f7:e8:d1:4c:69:40:8e:ea:ae:4a:2e:b1:9b:e6:21: 4a:5b:c1:01:61:74:ce:52:44:2f:c9:f7:35:76:98: 82:7f:d5:28:73:84:0a:9c:8c:37:bf:3d:cd:19:59: f6:a6:66:b8:29:5c:14:e0:bb:de:99:69:69:63:29: 98:b8:92:a5:c0:f7:fe:1f:06:08:9f:a0:32:ba:30: 6c:f5:4b:86:aa:9d:96:18:90:b1:b6:a6:1f:41:6b: 5f:40:75:33:2e:61:64:89:45:12:fe:02:d4:2b:d6: 3a:a5:c8:7a:ca:3a:71:16:65:a2:96:35:9e:c6:62: d6:fe:00:af:3b:89:18:5d:3c:2d:0c:13:24:1c:58: 6a:e6:08:a0:e6:f7:48:da:c3:e3:84:ed:fd:af:39: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:71:CB:FB:C5:F1:2B:D5:1E:D9:53:FC:ED:A2:AC:08:20:2C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:58:04:47:95:5f:7c:54:fc:b6:13:07:73:f7:ba:1d:c0:e2: a2:b7:59:bb:20:7c:0a:30:14:c2:26:fa:f5:92:97:58:4f:89: c4:3c:1c:fe:98:6c:b1:fd:f0:5e:4f:c9:e5:c0:c1:9f:ac:fa: 24:7b:3d:be:f9:43:74:6a:07:61:01:0a:77:02:b8:0a:7c:a9: 1b:87:66:47:ad:94:84:8d:6d:96:06:bc:3e:34:3b:d2:6d:f5: 3b:d2:4e:f4:ae:e8:3b:55:bc:22:3d:e7:18:c3:dd:2f:87:8b: ad:50:ca:7f:16:23:ac:83:a2:32:d8:a4:62:fb:3e:dd:02:81: 12:42:85:de:5a:1e:09:47:4e:f4:03:c2:da:9a:fd:14:63:4e: fd:6f:a2:4e:ac:ee:3a:0b:5a:26:4b:f6:d3:73:db:3b:b6:e3: 97:f6:a3:4c:76:d5:14:cb:80:17:c5:bd:d9:df:f1:ad:ac:7c: 16:1a:e9:91:87:25:66:ea:43:29:a4:a1:98:9c:63:8f:86:76: 54:0f:24:51:22:fa:db:0f:d0:fd:e3:f5:45:6b:1d:99:51:50: 15:26:03:0c:d9:44:25:8a:69:9c:4b:3b:ce:27:e7:49:e7:bc: fa:71:ec:ae:de:fe:27:ca:32:51:1d:a7:05:cd:81:3d:f7:a1: 1a:8b:12:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QmStt0/ba8ehwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NTMyODg4OWMtNjBlZC00MDc1LTg1YWEtNjc3MjkxMzY5MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX5EB9BWlop3ZjqHMLwzI4t4iHITgvWm05Od PV5Ew77OF/Ue61NpRrMDgoHfbEY9OPpLkTy7D0/0C0cLiB7r+1npcVIIlgEthhL6 sritkRW5NW2rnju7UnVXw/3hf6WpeVfIy3adHS/36NFMaUCO6q5KLrGb5iFKW8EB YXTOUkQvyfc1dpiCf9Uoc4QKnIw3vz3NGVn2pma4KVwU4LvemWlpYymYuJKlwPf+ HwYIn6AyujBs9UuGqp2WGJCxtqYfQWtfQHUzLmFkiUUS/gLUK9Y6pch6yjpxFmWi ljWexmLW/gCvO4kYXTwtDBMkHFhq5gig5vdI2sPjhO39rzn+pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1vccv7xfEr1R7ZU/ztoqwIICzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmZhNmJhMjUtNjhmZC0z NDkzLThkNDUtNDU1ODNjOGI5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZYBEeVX3xU/LYTB3P3uh3A4qK3WbsgfAowFMIm+vWSl1hPicQ8HP6Y bLH98F5PyeXAwZ+s+iR7Pb75Q3RqB2EBCncCuAp8qRuHZketlISNbZYGvD40O9Jt 9TvSTvSu6DtVvCI95xjD3S+Hi61Qyn8WI6yDojLYpGL7Pt0CgRJChd5aHglHTvQD wtqa/RRjTv1vok6s7joLWiZL9tNz2zu245f2o0x21RTLgBfFvdnf8a2sfBYa6ZGH JWbqQymkoZicY4+GdlQPJFEi+tsP0P3j9UVrHZlRUBUmAwzZRCWKaZxLO84n50nn vPpx7K7e/ifKMlEdpwXNgT33oRqLEpQ= -----END CERTIFICATE-----Generated at Tue Jul 28 16:05:45 2026 by rpki-client