$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa File: 699bb085-21f9-3bdc-ab99-1d59c26ac363.roa (raw, json) Hash identifier: KFC5JyPEwgbgcYr5NLVXd3xwpwl0IF+UU5DacYbxMPw= Subject key identifier: 0E:FA:AD:40:A5:54:31:EC:9E:6A:C7:B3:96:68:96:C9:6E:83:97:6C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F778365BB7A9CB9B8530B3900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 20115 IP address blocks: 149.143.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:65:bb:7a:9c:b9:b8:53:0b:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=879cc850-dd90-43ea-b4c7-c2c87a909ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:7c:1a:90:35:d8:16:89:43:e0:3c:df:ac: 5c:84:a5:33:92:a8:6e:6f:e7:fc:31:df:4c:70:3f: 9f:f5:7e:5f:42:9c:de:fd:08:1b:b5:09:54:46:bf: 74:84:3e:7e:87:52:4c:13:a7:36:3f:62:58:79:59: 4b:d8:57:95:62:62:aa:90:a2:15:ad:73:c7:6f:4d: e0:19:c9:17:19:4d:fc:be:42:5e:55:98:5e:b0:68: fb:34:2d:33:d9:05:9a:fe:ab:f8:ba:bd:17:85:c5: 4d:e1:b8:7e:81:03:b1:02:f6:d2:0a:af:aa:0e:ef: 8c:c8:ae:d8:c5:c5:c7:2d:b0:4e:cb:c7:11:20:cf: 32:70:0a:5e:10:6a:bd:a9:79:2c:66:67:61:0b:c7: 05:f9:b8:48:ce:c6:13:20:f9:81:d6:1b:15:3e:a2: dd:8d:6e:63:69:78:ea:c2:f7:ee:af:d6:5f:d5:ae: 40:f0:9c:50:da:a2:76:b6:2c:6f:d8:d5:6b:a0:5d: 44:cd:e0:9a:6f:4f:26:f7:9d:56:e0:b7:2c:90:9c: d5:41:39:7a:b1:3d:b8:d8:aa:23:0e:b5:c3:45:78: 6d:47:a6:bf:0f:54:48:b4:ee:c4:65:79:b4:a4:d4: 18:a3:97:cd:97:13:d3:88:d5:9e:29:4d:0f:10:c0: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FA:AD:40:A5:54:31:EC:9E:6A:C7:B3:96:68:96:C9:6E:83:97:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:17:4d:02:fc:07:07:ca:08:18:1b:fd:40:a7:37:ff:13:34: 63:24:e8:94:2c:93:aa:66:82:80:4d:07:3d:c3:3f:ce:6e:ff: 4a:65:ca:3f:bd:65:f9:ff:8b:b6:f9:2e:05:04:3e:99:64:13: 12:b8:ac:85:64:46:82:cb:2d:48:78:bb:4b:f6:00:23:2a:b3: b8:62:55:bd:bb:c7:59:53:d6:d0:81:ee:b6:7e:22:6d:4b:19: 98:94:11:7e:7d:a9:61:1c:4d:49:92:18:3a:39:f7:4d:54:2a: 58:49:7b:4a:55:2a:9c:62:e8:12:4e:ef:e5:17:8a:8d:37:2d: fe:89:1a:e0:23:7d:56:eb:58:72:6c:aa:20:fa:db:c3:b0:45: c4:50:22:cf:bb:b7:91:1d:cf:21:ce:89:0b:9a:68:2c:d8:60: b7:0a:af:a5:63:e9:98:91:45:54:15:78:22:42:e0:5c:ea:2b: 22:80:cf:e6:58:ec:61:df:93:e5:36:5b:64:3a:12:61:20:c2: 10:e1:4e:b2:32:c9:f2:30:d8:05:e1:e9:56:e3:06:59:1c:16: 51:68:1f:10:c0:8b:9d:eb:f6:1c:b0:bd:c0:43:2e:a1:84:7e: ca:82:be:8a:40:56:44:45:48:ab:32:63:e5:d5:bd:12:b8:3c: 62:6f:5b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2W7epy5uFMLOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODc5Y2M4NTAtZGQ5MC00M2VhLWI0YzctYzJjODdhOTA5ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7t8GpA12BaJQ+A836xchKUzkqhub+f8Md9M cD+f9X5fQpze/QgbtQlURr90hD5+h1JME6c2P2JYeVlL2FeVYmKqkKIVrXPHb03g GckXGU38vkJeVZhesGj7NC0z2QWa/qv4ur0XhcVN4bh+gQOxAvbSCq+qDu+MyK7Y xcXHLbBOy8cRIM8ycApeEGq9qXksZmdhC8cF+bhIzsYTIPmB1hsVPqLdjW5jaXjq wvfur9Zf1a5A8JxQ2qJ2tixv2NVroF1EzeCab08m951W4LcskJzVQTl6sT242Koj DrXDRXhtR6a/D1RItO7EZXm0pNQYo5fNlxPTiNWeKU0PEMAetQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA76rUClVDHsnmrHs5Zolslug5dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjk5YmIwODUtMjFmOS0z YmRjLWFiOTktMWQ1OWMyNmFjMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoXTQL8BwfKCBgb/UCnN/8TNGMk6JQsk6pmgoBNBz3DP85u/0plyj+9 Zfn/i7b5LgUEPplkExK4rIVkRoLLLUh4u0v2ACMqs7hiVb27x1lT1tCB7rZ+Im1L GZiUEX59qWEcTUmSGDo5901UKlhJe0pVKpxi6BJO7+UXio03Lf6JGuAjfVbrWHJs qiD628OwRcRQIs+7t5EdzyHOiQuaaCzYYLcKr6Vj6ZiRRVQVeCJC4FzqKyKAz+ZY 7GHfk+U2W2Q6EmEgwhDhTrIyyfIw2AXh6VbjBlkcFlFoHxDAi53r9hywvcBDLqGE fsqCvopAVkRFSKsyY+XVvRK4PGJvW7w= -----END CERTIFICATE-----Generated at Fri Oct 23 22:32:49 2026 by rpki-client