$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa File: 699bb085-21f9-3bdc-ab99-1d59c26ac363.roa (raw, json) Hash identifier: Oq+lK5ehYSDZtqkBPWrG7mpEUt09FUhceYDjRP661YE= Subject key identifier: 7A:95:A7:8B:76:33:06:59:CA:28:A1:73:80:37:CD:64:1A:0A:6E:B5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584ED597255F13F378A3CAEC6D40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa Signing time: Fri 14 Aug 2026 13:00:12 +0000 ROA not before: Fri 14 Aug 2026 13:00:12 +0000 ROA not after: Thu 12 Nov 2026 14:00:12 +0000 asID: 20115 IP address blocks: 149.143.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:97:25:5f:13:f3:78:a3:ca:ec:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 14 13:00:12 2026 GMT Not After : Nov 12 14:00:12 2026 GMT Subject: CN=3709d3be-28f7-4fe2-9005-6fb857e50d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:00:00:a2:23:dd:80:59:e3:1f:03:26:9d: 43:d3:81:28:9f:02:95:6e:80:cf:80:33:39:72:37: 73:c8:c2:00:0b:88:4e:a9:2f:64:06:e3:a8:6b:de: b3:e4:99:73:aa:00:77:df:df:2d:02:09:ba:64:9c: 62:52:fb:e4:91:a1:28:7f:f6:9e:f2:4f:26:25:07: 81:10:9c:c7:86:91:0d:38:31:a9:05:65:72:9b:35: 89:94:31:a6:17:2b:8b:5b:86:43:95:93:fb:5f:45: 70:e3:27:09:0c:dc:bc:3f:86:24:99:f3:bf:e6:ad: 4a:3f:6f:d2:d0:8e:be:45:ef:57:28:28:07:12:52: 0c:7a:6a:80:59:c6:27:36:56:75:2a:64:8e:e9:81: 41:74:dd:43:5d:42:1f:74:e0:b4:30:a8:f2:a3:50: 68:98:38:25:91:06:aa:4d:d7:1b:c6:5f:cf:89:eb: e1:d1:40:40:84:23:85:55:77:27:c2:fe:5a:7e:ce: a2:3b:78:2a:0a:81:97:6f:f0:e7:e2:46:0e:ac:3e: b0:b5:6c:1a:51:03:58:c7:35:36:db:c9:35:24:f9: ae:69:aa:60:77:2f:c1:f6:b6:8c:44:f0:73:7b:ef: 22:fc:64:2f:99:d5:9d:c5:f1:2e:5a:fd:ea:09:e3: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:95:A7:8B:76:33:06:59:CA:28:A1:73:80:37:CD:64:1A:0A:6E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/699bb085-21f9-3bdc-ab99-1d59c26ac363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:75:64:c7:6c:55:c4:22:12:b4:13:cc:f4:f3:ca:59:2f:b7: ac:42:a9:7f:99:51:dc:fc:e7:46:64:52:70:cb:93:c5:e0:87: 6c:fa:9b:84:a3:9e:5e:0a:4c:56:15:f1:8f:f2:2a:ef:f2:ac: 67:a2:32:e1:69:db:bc:d9:26:dd:ea:89:8a:9f:8d:2e:9d:e9: f9:6e:dd:ac:6a:a0:79:8f:3a:c4:83:d2:36:ed:b2:e8:1f:97: 03:83:52:47:7a:80:a1:1a:5f:90:25:c9:b4:d9:a3:73:97:56: d8:41:28:4b:62:0d:bf:a2:01:d6:db:5a:8e:92:ce:2f:41:1a: 9d:3c:d5:49:83:bb:b5:36:ad:09:6f:49:60:b7:b2:ac:6a:8f: e5:28:df:9e:ca:67:bd:25:34:f4:1c:d9:3a:cc:b9:5f:52:d5: 9f:ef:6d:f7:09:59:2e:f0:ae:77:c1:e7:bf:79:d2:26:11:1f: 0e:54:2d:e4:ef:e8:f2:a2:c3:53:8e:a5:97:f6:c7:89:c9:28: 60:3b:91:20:50:11:49:12:6b:75:74:2f:f8:6e:61:e4:41:7d: dd:bb:88:20:17:73:cb:fb:93:a1:f9:ae:98:c8:dd:21:39:aa: 97:99:f7:4d:33:74:8c:43:8b:34:35:a4:87:17:10:96:8a:95: 3f:c8:38:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7VlyVfE/N4o8rsbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDgxNDEzMDAxMloXDTI2MTExMjE0MDAxMlowLzEtMCsGA1UEAxMk MzcwOWQzYmUtMjhmNy00ZmUyLTkwMDUtNmZiODU3ZTUwZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+wAAKIj3YBZ4x8DJp1D04EonwKVboDPgDM5 cjdzyMIAC4hOqS9kBuOoa96z5JlzqgB3398tAgm6ZJxiUvvkkaEof/ae8k8mJQeB EJzHhpENODGpBWVymzWJlDGmFyuLW4ZDlZP7X0Vw4ycJDNy8P4YkmfO/5q1KP2/S 0I6+Re9XKCgHElIMemqAWcYnNlZ1KmSO6YFBdN1DXUIfdOC0MKjyo1BomDglkQaq Tdcbxl/Pievh0UBAhCOFVXcnwv5afs6iO3gqCoGXb/Dn4kYOrD6wtWwaUQNYxzU2 28k1JPmuaapgdy/B9raMRPBze+8i/GQvmdWdxfEuWv3qCeMI7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqVp4t2MwZZyiihc4A3zWQaCm61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjk5YmIwODUtMjFmOS0z YmRjLWFiOTktMWQ1OWMyNmFjMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ1ZMdsVcQiErQTzPTzylkvt6xCqX+ZUdz850ZkUnDLk8Xgh2z6m4Sj nl4KTFYV8Y/yKu/yrGeiMuFp27zZJt3qiYqfjS6d6flu3axqoHmPOsSD0jbtsugf lwODUkd6gKEaX5AlybTZo3OXVthBKEtiDb+iAdbbWo6Szi9BGp081UmDu7U2rQlv SWC3sqxqj+Uo357KZ70lNPQc2TrMuV9S1Z/vbfcJWS7wrnfB57950iYRHw5ULeTv 6PKiw1OOpZf2x4nJKGA7kSBQEUkSa3V0L/huYeRBfd27iCAXc8v7k6H5rpjI3SE5 qpeZ900zdIxDizQ1pIcXEJaKlT/IOJc= -----END CERTIFICATE-----Generated at Tue Sep 1 03:55:09 2026 by rpki-client