$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json) Hash identifier: eUNhypKLKBuEOkMVsr6H6kXC2m9TOlCkhwVmYvLvQKs= Subject key identifier: 20:13:72:C4:11:E3:4A:5E:ED:46:2E:DF:54:74:22:09:F5:24:29:95 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E779A23D4BE44DB3560134740 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 34119 IP address blocks: 149.143.150.0/23 maxlen: 23 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:23:d4:be:44:db:35:60:13:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=dda9d39b-873a-44cd-b3f0-135e866da73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:11:ec:e2:04:e4:40:c2:f7:1d:01:72:89: 65:c3:28:c2:34:a2:0e:de:ec:d1:51:a1:68:04:43: 99:d4:1d:6f:4d:22:5d:f8:e8:40:b0:e9:68:f3:64: 1b:2c:ea:1a:96:f8:c2:99:11:9a:77:1f:57:f8:3d: 4b:d6:75:31:8d:6b:33:0a:57:1a:9d:c4:97:0c:06: e1:35:d7:73:01:16:b1:99:7f:26:06:bf:98:ba:ce: b2:f9:7d:59:76:b4:0a:13:7b:98:03:8d:fe:87:2d: 7c:e6:75:40:77:8c:a2:43:87:e7:3a:9a:ae:8c:09: fe:9e:d6:28:05:e9:18:af:98:f9:6b:55:96:22:66: 52:0b:03:c1:7a:38:1b:51:f7:1f:49:70:84:b6:04: e3:fa:d2:01:56:79:1e:bb:bb:6c:28:51:ff:20:2b: 62:85:46:0e:bb:1d:31:97:79:e3:3e:8a:e9:66:39: 66:e8:4d:a8:c4:1c:20:20:3c:8e:6d:21:46:6e:f6: 93:d2:cd:bc:ce:6f:fd:95:a5:30:ed:98:6e:0e:bd: a7:3c:0a:c9:44:56:d8:59:fb:57:ef:08:71:cd:d4: d0:e8:a9:a3:29:f7:88:42:96:a5:4a:d5:78:11:93: 2b:4e:76:10:e6:1c:0b:96:d7:54:b0:bb:17:eb:ed: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:72:C4:11:E3:4A:5E:ED:46:2E:DF:54:74:22:09:F5:24:29:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:78:31:bf:e2:df:57:42:da:8c:6d:92:e1:7a:b3:5b:ae:fc: e0:29:f5:3e:8e:e1:53:08:b2:2d:61:1a:67:d6:14:0f:35:5f: a4:2f:fc:32:96:bc:fe:1a:7a:17:9c:b2:69:33:20:93:8f:ef: 37:32:e7:78:6a:be:82:9f:88:86:2d:5b:4b:b5:cb:d2:78:4c: 00:cd:76:5a:1e:ea:5a:44:3b:c1:e4:de:f4:1a:f8:d7:01:92: 97:dc:d6:d6:61:27:d3:08:a0:b1:9e:f5:e7:67:c1:bd:b7:30: 45:fb:91:ae:a0:bd:7e:18:59:2f:9c:27:9d:0a:99:85:96:63: c2:67:b5:04:8e:43:1d:39:3c:9f:e1:56:89:fc:ad:82:5d:9f: a2:46:5a:fc:bc:10:5e:68:41:f2:50:90:f7:17:39:22:4f:8f: ed:48:ec:56:ba:50:d6:37:09:28:e7:7a:e6:58:93:bb:9b:a6: 78:1f:16:44:86:e8:1d:03:e6:da:ae:e8:79:3b:cd:d7:15:b9: ec:81:e6:86:a3:e1:a0:10:4b:5a:03:5e:40:03:b1:54:bd:87: d3:9b:05:4b:bc:a3:af:14:98:10:aa:f6:37:9d:ba:36:c1:6d: a5:28:7c:e6:4a:27:78:34:00:a9:08:90:00:55:34:d6:a7:5e: 33:cb:33:1d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE53miPUvkTbNWATR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ZGRhOWQzOWItODczYS00NGNkLWIzZjAtMTM1ZTg2NmRhNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x4R7OIE5EDC9x0BcollwyjCNKIO3uzRUaFo BEOZ1B1vTSJd+OhAsOlo82QbLOoalvjCmRGadx9X+D1L1nUxjWszClcancSXDAbh NddzARaxmX8mBr+Yus6y+X1ZdrQKE3uYA43+hy185nVAd4yiQ4fnOpqujAn+ntYo BekYr5j5a1WWImZSCwPBejgbUfcfSXCEtgTj+tIBVnkeu7tsKFH/ICtihUYOux0x l3njPorpZjlm6E2oxBwgIDyObSFGbvaT0s28zm/9laUw7ZhuDr2nPArJRFbYWftX 7whxzdTQ6KmjKfeIQpalStV4EZMrTnYQ5hwLltdUsLsX6+1JmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCATcsQR40pe7UYu31R0Ign1JCmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VmMTUwMjgtNzQzNC0z ZDAzLWI2NGQtY2I5MTA1ZjJmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+WAwQC lY+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE14Mb/i31dC2oxtkuF6s1uu/OAp9T6O4VMIsi1hGmfWFA81 X6Qv/DKWvP4aehecsmkzIJOP7zcy53hqvoKfiIYtW0u1y9J4TADNdloe6lpEO8Hk 3vQa+NcBkpfc1tZhJ9MIoLGe9ednwb23MEX7ka6gvX4YWS+cJ50KmYWWY8JntQSO Qx05PJ/hVon8rYJdn6JGWvy8EF5oQfJQkPcXOSJPj+1I7Fa6UNY3CSjneuZYk7ub pngfFkSG6B0D5tqu6Hk7zdcVueyB5oaj4aAQS1oDXkADsVS9h9ObBUu8o68UmBCq 9jedujbBbaUofOZKJ3g0AKkIkABVNNanXjPLMx0= -----END CERTIFICATE-----Generated at Wed Jul 15 07:29:13 2026 by rpki-client