$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: q+UbUPv5bG6lzr5URnNKrTLu3jggRUu0CxVaEUQyn0U= Subject key identifier: 77:10:B9:22:4A:71:9E:92:0D:A8:26:00:32:F8:39:88:27:7C:8F:4C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584CDB0202F882BA13C6E603D580 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:02:f8:82:ba:13:c6:e6:03:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=d2c42d8b-4db1-4941-bf0f-8b10afe26282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:d7:4e:97:29:2d:ae:33:6c:f3:d7:7b:74: 6d:37:c2:03:04:f9:b3:ce:7b:c0:e5:62:cf:69:4a: 84:a2:f3:7b:3c:4d:6e:ee:51:de:de:29:df:2a:b8: 85:f0:81:14:31:79:7d:d1:1a:94:d8:cb:46:1a:17: 69:52:d8:de:7e:20:19:e4:d2:60:65:a2:f5:b9:da: ab:43:da:8a:e4:70:bd:5d:2f:23:d0:48:52:55:41: 19:52:f8:3b:6b:d4:a4:91:59:db:ab:a9:40:cc:8c: ff:3c:8b:53:e6:98:2a:92:ea:2c:6c:77:ba:6c:96: d1:81:50:cc:8a:03:7d:9e:d2:38:34:80:0f:46:be: a9:0e:d9:61:c5:0f:39:79:21:66:f1:2b:e0:1a:e0: 3a:6b:28:d4:1d:b0:af:ad:a8:90:e1:99:ba:f6:4e: 23:f5:66:96:07:e5:c1:f6:79:82:ef:5a:20:9e:58: ca:3f:cf:06:e4:81:5c:d1:dc:c8:b7:92:8e:6e:8c: c1:75:9c:b2:7a:bb:29:e9:b3:d1:3d:67:86:e4:3e: 4d:8e:7b:07:a6:cc:75:24:de:7d:8c:0c:de:13:c9: 84:7f:2f:d1:83:74:10:95:a3:9a:53:42:c9:a1:64: 79:bb:fb:29:9c:e2:19:ef:87:c7:54:a7:4c:11:ab: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:10:B9:22:4A:71:9E:92:0D:A8:26:00:32:F8:39:88:27:7C:8F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f7:5b:f6:6d:26:8c:ba:b4:b5:34:a0:15:e1:f1:af:4f:0e: 6a:a2:52:19:a0:54:c2:14:9d:63:e1:dc:f7:60:3b:0f:86:85: b7:bd:17:37:f1:40:26:80:f0:37:e7:3a:54:a1:30:e6:3b:30: a2:97:b4:96:03:92:cc:93:69:5a:a6:d3:af:cc:64:c1:1f:28: 3d:b1:5d:e2:03:dc:14:51:49:f6:c6:58:d8:7d:8d:9b:59:30: 1d:47:3f:39:66:28:96:c9:09:e4:24:d5:60:70:c1:5c:a4:4c: e4:bd:86:ec:8e:69:ac:0b:bc:0b:60:19:81:e3:f6:fa:37:cc: 88:87:c2:af:d9:fb:0e:de:d1:93:91:0b:16:cf:47:b0:fd:eb: 1f:0d:2f:f7:ae:2a:3c:60:4d:ae:98:d5:f5:1c:82:23:1f:a3: 7a:76:45:32:9f:60:e1:4e:f3:df:70:e7:80:9f:43:fb:01:c5: ca:42:f8:5c:57:ed:d1:b6:3e:9e:7f:24:a6:c1:74:ce:0d:aa: 03:fa:5e:25:7d:87:f6:9e:1a:31:d1:cd:46:d0:3c:ce:d4:01: a7:36:aa:0d:72:0b:fa:46:ca:eb:4f:05:3e:81:60:b8:9c:0b: 40:9b:70:01:42:4a:b7:6f:7e:57:dc:56:c7:18:f1:06:a4:b4: 75:b7:20:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAgL4groTxuYD1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk ZDJjNDJkOGItNGRiMS00OTQxLWJmMGYtOGIxMGFmZTI2MjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGzXTpcpLa4zbPPXe3RtN8IDBPmzznvA5WLP aUqEovN7PE1u7lHe3infKriF8IEUMXl90RqU2MtGGhdpUtjefiAZ5NJgZaL1udqr Q9qK5HC9XS8j0EhSVUEZUvg7a9SkkVnbq6lAzIz/PItT5pgqkuosbHe6bJbRgVDM igN9ntI4NIAPRr6pDtlhxQ85eSFm8SvgGuA6ayjUHbCvraiQ4Zm69k4j9WaWB+XB 9nmC71ognljKP88G5IFc0dzIt5KObozBdZyyersp6bPRPWeG5D5NjnsHpsx1JN59 jAzeE8mEfy/Rg3QQlaOaU0LJoWR5u/spnOIZ74fHVKdMEasZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcQuSJKcZ6SDagmADL4OYgnfI9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv3W/ZtJoy6tLU0oBXh8a9PDmqiUhmgVMIUnWPh3PdgOw+Ghbe9Fzfx QCaA8DfnOlShMOY7MKKXtJYDksyTaVqm06/MZMEfKD2xXeID3BRRSfbGWNh9jZtZ MB1HPzlmKJbJCeQk1WBwwVykTOS9huyOaawLvAtgGYHj9vo3zIiHwq/Z+w7e0ZOR CxbPR7D96x8NL/euKjxgTa6Y1fUcgiMfo3p2RTKfYOFO899w54CfQ/sBxcpC+FxX 7dG2Pp5/JKbBdM4NqgP6XiV9h/aeGjHRzUbQPM7UAac2qg1yC/pGyutPBT6BYLic C0CbcAFCSrdvflfcVscY8QaktHW3IOs= -----END CERTIFICATE-----Generated at Sun Feb 22 05:55:21 2026 by rpki-client