$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: pQswXo3Dg67rs5A4Z24yqsBF0w6YSrMu+3VPavPAlZk= Subject key identifier: F9:0B:CF:03:C9:5E:1A:E7:50:B4:6B:33:5E:77:B7:A8:58:80:8E:98 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F3E47D6E430DE6E3B2B598C60 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d6:e4:30:de:6e:3b:2b:59:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a46b2d9a-57f6-4d22-b341-fe09c766674d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:06:75:1f:3a:7a:f6:01:55:62:ce:1f:59: 01:81:b1:d8:ae:a2:53:19:c7:41:64:61:14:53:03: 10:a5:e0:1c:81:a7:e0:59:b2:16:45:d6:c2:d7:d0: 48:1c:64:b5:4d:3b:f8:63:ca:35:cc:dc:60:02:a3: d7:35:07:bc:04:f5:d4:4a:14:6c:4e:38:72:5d:5b: 32:a5:6f:e4:82:7e:51:52:eb:2a:86:96:70:a0:7b: ff:b1:77:bb:b0:d7:ab:ff:d4:4b:be:ac:3f:f1:6d: 61:20:fd:ea:a8:96:09:dd:44:6c:72:31:fe:2d:42: 4b:6d:c5:38:39:51:7c:e3:07:50:ca:79:42:57:c1: db:74:36:0c:e8:99:f9:68:28:1a:13:0d:29:55:70: c4:dc:88:c2:7c:db:0a:78:ea:8f:4f:a3:94:a2:ab: 23:7a:41:14:50:00:d6:6e:e1:d1:36:d5:6c:59:aa: 04:de:ed:ed:ae:4e:b6:1e:28:b4:06:a3:d7:02:d5: 71:82:3e:65:72:a2:22:c2:e5:fb:67:e5:26:0d:25: 52:1c:78:c0:0d:20:12:39:cb:7e:7b:14:4e:f4:1b: 89:86:22:cd:f8:cd:2c:b5:ee:8d:e1:ae:d7:64:46: 99:22:01:a3:5e:55:3b:8a:2f:22:fb:8b:35:77:0a: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:CF:03:C9:5E:1A:E7:50:B4:6B:33:5E:77:B7:A8:58:80:8E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b0:54:4d:a8:5a:f3:10:f3:fa:f4:0e:6f:b4:c2:61:48:9d: 91:14:6e:17:39:dd:ff:fe:f1:0a:67:e2:df:23:49:54:1a:88: f2:10:bb:d7:85:ea:ce:87:30:d7:ae:53:7e:24:65:1b:24:a5: 58:79:25:2d:73:f9:e4:f6:7f:71:18:1d:96:b0:7f:0e:b6:32: 4f:06:bb:5a:bd:2f:8d:87:f8:4c:6f:b8:ad:47:09:84:e7:8a: 35:13:5d:6d:46:51:67:11:26:9c:58:d7:0e:48:2c:cd:d9:10: a3:1e:88:c2:18:c4:fc:e5:06:3b:b6:72:66:98:f4:05:1c:09: 6b:b7:fc:06:df:aa:9d:b4:31:b3:98:e9:d8:5d:09:ad:eb:42: 1c:8c:d8:3b:6c:b9:ca:31:ae:37:92:55:ee:6d:b1:3b:97:3c: c3:90:1a:53:ae:43:7a:39:c3:98:20:08:0f:d3:06:1e:e6:f0: eb:83:1d:44:b0:e1:ab:9e:85:2f:5b:fd:b3:fe:3a:f4:fc:8d: 48:c2:3a:ca:b9:33:68:dd:e2:08:85:8e:8a:c2:c2:88:ba:cc: b4:28:b8:e3:09:6a:e2:12:db:14:5a:87:4f:18:d7:2e:ef:d3: da:01:32:4a:d8:3d:d6:58:35:4d:f2:ab:fa:18:0d:20:56:4b: 42:7c:96:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9bkMN5uOytZjGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YTQ2YjJkOWEtNTdmNi00ZDIyLWIzNDEtZmUwOWM3NjY2NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G8GdR86evYBVWLOH1kBgbHYrqJTGcdBZGEU UwMQpeAcgafgWbIWRdbC19BIHGS1TTv4Y8o1zNxgAqPXNQe8BPXUShRsTjhyXVsy pW/kgn5RUusqhpZwoHv/sXe7sNer/9RLvqw/8W1hIP3qqJYJ3URscjH+LUJLbcU4 OVF84wdQynlCV8HbdDYM6Jn5aCgaEw0pVXDE3IjCfNsKeOqPT6OUoqsjekEUUADW buHRNtVsWaoE3u3trk62Hii0BqPXAtVxgj5lcqIiwuX7Z+UmDSVSHHjADSASOct+ exRO9BuJhiLN+M0ste6N4a7XZEaZIgGjXlU7ii8i+4s1dwpaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkLzwPJXhrnULRrM153t6hYgI6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHewVE2oWvMQ8/r0Dm+0wmFInZEUbhc53f/+8Qpn4t8jSVQaiPIQu9eF 6s6HMNeuU34kZRskpVh5JS1z+eT2f3EYHZawfw62Mk8Gu1q9L42H+ExvuK1HCYTn ijUTXW1GUWcRJpxY1w5ILM3ZEKMeiMIYxPzlBju2cmaY9AUcCWu3/Abfqp20MbOY 6dhdCa3rQhyM2DtsucoxrjeSVe5tsTuXPMOQGlOuQ3o5w5ggCA/TBh7m8OuDHUSw 4auehS9b/bP+OvT8jUjCOsq5M2jd4giFjorCwoi6zLQouOMJauIS2xRah08Y1y7v 09oBMkrYPdZYNU3yq/oYDSBWS0J8ljM= -----END CERTIFICATE-----Generated at Mon Sep 21 19:10:33 2026 by rpki-client