$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json) Hash identifier: sOE8SJ+KwPN8GUdGUPCyk9Wv0FX/vGgJpVHYNsuYBwk= Subject key identifier: C3:7A:84:DC:F5:C8:B8:5A:1E:D5:A0:95:F0:31:44:00:71:26:D4:33 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F19FCF1CA7E6D65833FFAFEB8 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 34119 IP address blocks: 149.143.150.0/23 maxlen: 23 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f1:ca:7e:6d:65:83:3f:fa:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=2280549e-bacc-4608-8f0f-ed8dbe8b7bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:4d:92:cd:45:f0:02:ac:a8:da:38:92:3b: 48:09:65:6d:d5:74:da:f5:2a:e2:36:e0:eb:bd:17: c0:35:77:3a:33:b5:f8:d6:99:86:87:91:f0:83:92: cb:fa:ad:aa:05:cf:5c:16:7f:db:da:87:1d:2a:00: da:9a:a7:6a:6c:5a:d9:2a:6c:b7:52:01:af:76:08: 09:d9:0d:8c:92:24:b0:34:c5:b7:93:7d:27:8d:d7: 5c:2d:ee:3d:c5:9b:d2:e0:8b:39:14:cb:9a:94:11: 26:85:75:91:24:f2:b4:15:42:82:e4:eb:1b:07:70: e8:68:d9:32:71:18:d0:41:a7:7e:84:3a:95:b9:14: c0:4e:46:bf:04:84:67:9f:76:38:35:cf:1f:60:4d: 02:ec:62:50:0f:7b:6c:9f:ca:33:66:b4:92:1e:df: 6c:a1:91:00:c9:36:8b:8e:8b:ac:1a:1d:32:e9:3f: 6b:7e:9f:d6:75:4d:27:be:43:5b:a6:51:af:16:72: bb:16:18:41:5b:78:b5:54:5a:7c:74:ac:37:9f:42: 34:a9:76:33:f0:7d:5a:ba:a9:f6:57:4f:af:fa:59: ab:a9:3e:a8:f4:54:94:4d:e0:2a:a1:6d:89:89:64: 54:88:31:dc:88:2a:b2:1d:f1:15:1d:66:53:00:95: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7A:84:DC:F5:C8:B8:5A:1E:D5:A0:95:F0:31:44:00:71:26:D4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:dc:5b:bb:6b:b2:e9:2b:31:92:8a:06:6f:07:8a:a2:59:d1: 88:d5:e6:5e:50:cb:68:36:67:ec:dc:b1:e4:f0:58:a1:54:e2: 35:da:cb:c7:fb:e9:22:38:83:a2:09:25:24:76:45:3e:ac:08: 11:83:f1:3b:fa:e7:1d:93:94:f9:76:32:0a:a9:50:43:0e:bd: da:30:22:f5:d0:89:38:be:9e:da:77:5d:d3:b2:06:64:cf:25: 81:20:45:7e:7e:e9:1e:8e:b6:d7:f8:eb:cf:a2:a6:81:cc:9c: 5c:c2:3e:c4:69:ea:a9:55:51:70:50:36:91:70:b0:53:38:db: 68:99:86:9d:76:cc:98:b8:37:73:49:0a:06:a5:08:89:6c:1c: 47:14:5a:ce:55:75:98:8a:93:2e:5d:1f:8f:95:4c:ac:18:06: 41:2e:62:4c:29:a8:75:b0:fa:c7:45:04:28:24:af:cc:04:a4: 3e:09:28:4d:7a:3d:de:6d:fe:5a:f8:f9:48:6e:e1:2b:28:bd: cd:a1:1d:ad:b1:2f:9e:d9:a5:b8:ab:ed:ff:17:73:ce:1c:1c: 7a:c2:b6:1e:30:e4:a9:3e:74:d2:96:c6:f6:6f:41:3a:24:f0: b9:81:25:ce:b9:7a:72:4b:54:7c:8d:ed:71:7d:e5:36:2e:9f: 2a:13:40:c6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8Z/PHKfm1lgz/6/rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MjI4MDU0OWUtYmFjYy00NjA4LThmMGYtZWQ4ZGJlOGI3YmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYZNks1F8AKsqNo4kjtICWVt1XTa9SriNuDr vRfANXc6M7X41pmGh5Hwg5LL+q2qBc9cFn/b2ocdKgDamqdqbFrZKmy3UgGvdggJ 2Q2MkiSwNMW3k30njddcLe49xZvS4Is5FMualBEmhXWRJPK0FUKC5OsbB3DoaNky cRjQQad+hDqVuRTATka/BIRnn3Y4Nc8fYE0C7GJQD3tsn8ozZrSSHt9soZEAyTaL jousGh0y6T9rfp/WdU0nvkNbplGvFnK7FhhBW3i1VFp8dKw3n0I0qXYz8H1auqn2 V0+v+lmrqT6o9FSUTeAqoW2JiWRUiDHciCqyHfEVHWZTAJUYMQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMN6hNz1yLhaHtWglfAxRABxJtQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VmMTUwMjgtNzQzNC0z ZDAzLWI2NGQtY2I5MTA1ZjJmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+WAwQC lY+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADzcW7trsukrMZKKBm8HiqJZ0YjV5l5Qy2g2Z+zcseTwWKFU 4jXay8f76SI4g6IJJSR2RT6sCBGD8Tv65x2TlPl2MgqpUEMOvdowIvXQiTi+ntp3 XdOyBmTPJYEgRX5+6R6Ottf468+ipoHMnFzCPsRp6qlVUXBQNpFwsFM422iZhp12 zJi4N3NJCgalCIlsHEcUWs5VdZiKky5dH4+VTKwYBkEuYkwpqHWw+sdFBCgkr8wE pD4JKE16Pd5t/lr4+Uhu4Ssovc2hHa2xL57Zpbir7f8Xc84cHHrCth4w5Kk+dNKW xvZvQTok8LmBJc65enJLVHyN7XF95TYunyoTQMY= -----END CERTIFICATE-----Generated at Sun Sep 20 20:15:56 2026 by rpki-client