$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3525dbd8-e693-310b-9d20-829abadda9ab.roa File: 3525dbd8-e693-310b-9d20-829abadda9ab.roa (raw, json) Hash identifier: jHe+BOBHe80IA5aEWQcBp3SD8+upz5NhO/9hKyXzfUU= Subject key identifier: E0:BD:FE:14:AA:FA:F8:7D:B7:C7:AC:87:AD:09:90:27:5E:4C:E1:19 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584E858F8832851B3D37899C9A00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3525dbd8-e693-310b-9d20-829abadda9ab.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 212238 IP address blocks: 149.143.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:88:32:85:1b:3d:37:89:9c:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=08cce5f7-73f8-4bd3-b275-9f93ac46f019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:2d:80:df:87:d4:dc:a2:d0:e7:33:4d:ef: dc:26:32:ec:eb:66:97:92:4c:9b:b3:28:a1:dd:e7: a0:98:ca:c8:fc:87:b4:55:a3:fe:56:3e:d5:22:ac: a1:ca:99:ee:6e:b9:33:96:7a:98:80:ea:57:1d:7d: 62:f3:24:78:c2:b3:32:6e:1c:b0:e6:89:68:f5:95: 92:1a:7e:bb:54:72:d6:a7:a8:f8:31:43:8c:0d:12: af:c9:cf:e5:4e:55:6f:2e:30:62:b9:10:eb:11:a0: 2d:b1:4d:9d:c7:94:e2:36:14:6b:a8:48:d3:ea:6c: a2:13:1b:13:bf:76:c4:19:f4:89:30:26:7f:cf:f3: 4d:77:72:a9:c2:9e:ad:7a:33:75:bb:e8:7d:d4:e0: 5d:ba:ae:ea:06:59:94:b7:8d:5c:35:1c:91:22:f2: 05:58:06:ba:75:01:fe:cc:8a:63:c0:e9:26:b3:00: 6f:90:dd:6b:7e:e0:2a:20:07:3f:dc:ef:31:af:2d: 8b:83:80:b2:0a:ff:eb:5c:7f:5c:d4:a8:05:23:63: 94:40:ce:50:ad:d5:cf:66:90:08:55:c1:8e:cc:f5: 52:59:f0:dc:4a:d5:db:59:90:42:df:a2:34:cb:09: 84:c1:c5:79:f2:b1:a5:bb:f9:28:32:d4:72:06:17: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:FE:14:AA:FA:F8:7D:B7:C7:AC:87:AD:09:90:27:5E:4C:E1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3525dbd8-e693-310b-9d20-829abadda9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:18:09:e0:ea:a1:47:2b:84:3a:d4:13:b5:98:ca:a4:ef:2f: 03:73:52:bc:2e:ab:8a:bf:e2:f5:ab:1f:1e:4c:42:d5:ef:a1: 50:a8:4d:43:ac:0e:ad:bf:ed:de:a3:1a:1e:94:2a:8e:27:51: 58:fb:9c:ec:3c:7b:3f:5b:08:e2:ed:b5:79:98:4a:20:fa:ce: 0f:aa:2d:6c:87:1e:21:4d:b3:ec:ae:06:5c:05:88:79:33:5e: 63:ba:c5:64:8d:47:94:0d:25:4e:83:0a:2c:79:23:1e:5d:07: 88:fd:56:d6:74:5a:c2:be:69:df:29:3c:f2:ef:46:90:5c:d0: ec:91:38:e1:3a:fb:a9:40:ea:de:f1:5f:5b:be:76:d8:02:c5: 9f:aa:01:b6:ef:62:9c:fb:a9:9e:8e:50:59:c9:40:01:e7:4e: ba:19:6f:79:94:2e:2f:31:6a:ba:4c:72:02:66:f7:49:78:b3: 9a:24:48:a1:95:f4:46:13:86:fd:8c:9f:57:80:1d:0a:77:79: b7:3e:9d:5b:d9:70:58:c1:80:f7:f7:a1:ba:bd:17:e3:bb:82: 5b:9b:70:a1:29:d8:f2:0d:10:96:8e:77:c4:9e:21:5d:c1:d4: 58:d0:41:2d:aa:f9:ad:3f:2b:e8:ec:ec:29:0b:9d:75:89:74: 2f:59:af:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj4gyhRs9N4mcmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk MDhjY2U1ZjctNzNmOC00YmQzLWIyNzUtOWY5M2FjNDZmMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlotgN+H1Nyi0OczTe/cJjLs62aXkkybsyih 3eegmMrI/Ie0VaP+Vj7VIqyhypnubrkzlnqYgOpXHX1i8yR4wrMybhyw5olo9ZWS Gn67VHLWp6j4MUOMDRKvyc/lTlVvLjBiuRDrEaAtsU2dx5TiNhRrqEjT6myiExsT v3bEGfSJMCZ/z/NNd3Kpwp6tejN1u+h91OBduq7qBlmUt41cNRyRIvIFWAa6dQH+ zIpjwOkmswBvkN1rfuAqIAc/3O8xry2Lg4CyCv/rXH9c1KgFI2OUQM5QrdXPZpAI VcGOzPVSWfDcStXbWZBC36I0ywmEwcV58rGlu/koMtRyBhcZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC9/hSq+vh9t8esh60JkCdeTOEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzUyNWRiZDgtZTY5My0z MTBiLTlkMjAtODI5YWJhZGRhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwYCeDqoUcrhDrUE7WYyqTvLwNzUrwuq4q/4vWrHx5MQtXvoVCoTUOs Dq2/7d6jGh6UKo4nUVj7nOw8ez9bCOLttXmYSiD6zg+qLWyHHiFNs+yuBlwFiHkz XmO6xWSNR5QNJU6DCix5Ix5dB4j9VtZ0WsK+ad8pPPLvRpBc0OyROOE6+6lA6t7x X1u+dtgCxZ+qAbbvYpz7qZ6OUFnJQAHnTroZb3mULi8xarpMcgJm90l4s5okSKGV 9EYThv2Mn1eAHQp3ebc+nVvZcFjBgPf3obq9F+O7glubcKEp2PINEJaOd8SeIV3B 1FjQQS2q+a0/K+js7CkLnXWJdC9Zr5g= -----END CERTIFICATE-----Generated at Sat Jul 18 02:30:43 2026 by rpki-client