$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa File: f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa (raw, json) Hash identifier: rIRyRtM+Gz83jr+wn/giTYRieqaxYU26gAMVSscdhrc= Subject key identifier: A7:B6:A4:5D:58:28:D1:F5:0F:67:4A:13:28:E4:94:0F:DB:53:72:55 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D83CAB006668DDE69452A01C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 149.143.128.0/22 maxlen: 22 149.143.132.0/22 maxlen: 22 149.143.136.0/22 maxlen: 22 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:b0:06:66:8d:de:69:45:2a:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=d7aff3ca-7d42-4b54-851d-92557939557a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:ee:67:e3:35:59:42:62:fb:50:f1:39:06: 31:c3:4f:ac:b9:58:19:40:7c:4f:21:15:15:55:ce: ed:0e:1b:f5:d4:c2:3a:9d:33:20:05:b3:ca:59:9c: 10:57:8b:c5:f6:ac:ce:5f:fe:0c:74:21:3c:27:fd: 92:8a:31:35:bd:ff:40:b9:0b:c7:85:8c:b8:c0:ae: a3:4e:d1:95:c2:d1:6f:f3:88:fe:54:6d:6e:7b:95: f1:c9:45:36:11:fd:cd:1c:20:c6:22:8a:a2:85:da: f6:da:33:e0:8b:db:83:3c:2d:03:20:f0:72:dd:5f: e6:fe:2b:17:ae:fa:14:03:4a:13:09:33:48:68:81: 6c:29:f8:5e:b0:27:aa:c8:e2:fe:ea:fd:14:8e:ae: 3b:2a:60:32:2c:4b:f8:8f:61:d4:f1:c5:ef:6a:0e: fc:45:03:d2:4a:f5:63:13:4f:be:55:96:6d:1f:78: 10:3f:59:49:a9:c1:c9:82:2d:3a:97:01:f1:a1:03: c3:d3:c7:63:8d:c4:3b:f2:ab:4c:38:50:2c:1e:9a: 5e:26:5d:2e:53:5b:1a:e8:99:ac:93:89:7d:29:26: ad:78:a4:11:52:d9:c0:73:3d:16:53:ff:f0:a4:1b: c4:7c:c9:fb:36:5b:33:64:1c:e6:46:94:59:1b:aa: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:A4:5D:58:28:D1:F5:0F:67:4A:13:28:E4:94:0F:DB:53:72:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e6:20:56:95:35:e5:af:7d:91:21:ea:2a:7d:55:20:81:9b: 1c:28:fb:fc:7b:6b:f5:22:97:90:b9:75:12:a8:a3:37:3d:9b: 52:9e:a8:16:6c:8f:0b:36:92:c7:af:64:d7:09:4b:f8:25:12: 76:af:8a:aa:a2:cc:50:44:b7:0d:40:45:46:0f:45:97:7d:7a: 78:b6:73:9a:a9:b1:9f:96:78:4c:8e:9e:ed:57:b5:76:1b:d1: 59:aa:af:85:3e:1b:7b:f0:f1:23:5d:2f:04:d2:84:17:8d:cd: 96:8d:3b:0f:48:4a:24:8d:75:30:50:21:48:d6:7f:12:af:af: a3:fc:f1:8e:9c:60:b2:1c:b9:88:06:11:73:c4:0a:78:61:5c: c7:c8:45:ad:0f:ad:73:e2:80:e5:fb:fd:72:ae:78:ff:fa:d4: c9:6f:f4:5a:91:66:a3:fd:0d:98:05:f9:83:6b:3c:94:98:01: b8:9f:ff:ac:47:2c:3c:19:d8:21:14:3a:19:4b:45:9e:0a:e3: 7c:3e:ae:04:04:1a:b6:df:ec:3c:f8:31:33:de:cf:14:5c:e6: b8:5f:b4:15:84:53:e6:3d:52:7f:69:84:68:88:19:f5:6b:3a: 44:4c:0c:f5:8e:02:d9:03:37:8a:c5:64:0f:8b:e6:cb:33:e5: 8e:93:67:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyrAGZo3eaUUqAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ZDdhZmYzY2EtN2Q0Mi00YjU0LTg1MWQtOTI1NTc5Mzk1NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrfuZ+M1WUJi+1DxOQYxw0+suVgZQHxPIRUV Vc7tDhv11MI6nTMgBbPKWZwQV4vF9qzOX/4MdCE8J/2SijE1vf9AuQvHhYy4wK6j TtGVwtFv84j+VG1ue5XxyUU2Ef3NHCDGIoqihdr22jPgi9uDPC0DIPBy3V/m/isX rvoUA0oTCTNIaIFsKfhesCeqyOL+6v0Ujq47KmAyLEv4j2HU8cXvag78RQPSSvVj E0++VZZtH3gQP1lJqcHJgi06lwHxoQPD08djjcQ78qtMOFAsHppeJl0uU1sa6Jms k4l9KSateKQRUtnAcz0WU//wpBvEfMn7NlszZBzmRpRZG6q8LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKe2pF1YKNH1D2dKEyjklA/bU3JVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjQ0ZTNlY2YtY2E0OS0z NWQyLTgwMzItZjY3ZWQ0MmU0ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXmIFaVNeWvfZEh6ip9VSCBmxwo+/x7a/Uil5C5dRKoozc9m1KeqBZs jws2ksevZNcJS/glEnaviqqizFBEtw1ARUYPRZd9eni2c5qpsZ+WeEyOnu1XtXYb 0Vmqr4U+G3vw8SNdLwTShBeNzZaNOw9ISiSNdTBQIUjWfxKvr6P88Y6cYLIcuYgG EXPECnhhXMfIRa0PrXPigOX7/XKueP/61Mlv9FqRZqP9DZgF+YNrPJSYAbif/6xH LDwZ2CEUOhlLRZ4K43w+rgQEGrbf7Dz4MTPezxRc5rhftBWEU+Y9Un9phGiIGfVr OkRMDPWOAtkDN4rFZA+L5ssz5Y6TZ7E= -----END CERTIFICATE-----Generated at Fri Apr 17 18:17:44 2026 by rpki-client