$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7eb88ae7-11b6-3074-a2cb-fe5e070a4034.roa File: 7eb88ae7-11b6-3074-a2cb-fe5e070a4034.roa (raw, json) Hash identifier: vUQNwEwRJJjL+r0YCWtu3nv05fjD5h/2ykLz/IIF/I0= Subject key identifier: 7C:EB:46:96:24:90:4C:75:5C:FA:4D:A0:56:10:92:9E:B7:B4:D4:2B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EFD0EF45EC8FB0F7A88BA6DE0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7eb88ae7-11b6-3074-a2cb-fe5e070a4034.roa Signing time: Fri 28 Aug 2026 16:18:09 +0000 ROA not before: Fri 28 Aug 2026 16:18:09 +0000 ROA not after: Thu 26 Nov 2026 17:18:09 +0000 asID: 6079 IP address blocks: 149.143.128.0/23 maxlen: 23 149.143.130.0/23 maxlen: 23 149.143.132.0/23 maxlen: 23 149.143.134.0/23 maxlen: 23 149.143.136.0/23 maxlen: 23 149.143.138.0/23 maxlen: 23 149.143.140.0/23 maxlen: 23 149.143.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fd:0e:f4:5e:c8:fb:0f:7a:88:ba:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 28 16:18:09 2026 GMT Not After : Nov 26 17:18:09 2026 GMT Subject: CN=4b6724dd-ca9a-42f3-bef0-e974fb9ec326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:3b:0c:c0:4d:c4:00:fd:ae:37:25:08:3c: 53:47:be:c6:38:56:18:8e:f2:4e:70:be:55:02:fa: 24:77:52:0e:0c:6e:06:5c:c4:4c:db:55:dc:b4:0a: 58:16:98:eb:bd:bb:03:0b:8c:0a:20:7e:7b:b2:14: 02:05:98:94:34:bd:db:dd:9e:dd:57:61:79:3f:f6: 5d:7a:3e:f8:d2:e2:98:0a:b5:c2:db:83:41:18:d5: 07:9c:b4:8a:04:77:63:fa:0e:b2:16:e3:6d:2c:c9: e4:5b:fe:e7:97:99:b7:4b:90:76:15:d3:ba:11:78: 18:14:ce:2d:5b:21:50:e9:3f:4c:21:c8:a1:ae:0c: f7:6a:c1:c2:de:fe:3c:0c:3e:f0:32:57:a7:9c:a7: c5:36:ba:6a:b2:cc:67:30:e3:07:dc:77:7f:60:7e: 18:37:a9:b5:ea:fc:dc:b8:68:d4:e5:ca:58:20:a5: 5b:7a:04:1c:37:a9:3f:44:9a:1e:4e:2f:50:d5:a2: c9:55:53:2c:ea:c4:8f:9b:ec:db:a5:ff:f1:63:83: b0:4d:9f:07:1e:eb:13:54:10:53:44:58:3f:0b:1b: 7d:33:22:90:23:67:61:e6:95:8c:6a:5d:07:92:d1: 9c:6e:83:d7:94:20:a2:3d:bd:70:b2:b2:1b:95:51: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:46:96:24:90:4C:75:5C:FA:4D:A0:56:10:92:9E:B7:B4:D4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/7eb88ae7-11b6-3074-a2cb-fe5e070a4034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:94:a4:f9:2b:44:99:5a:d7:9f:d7:c6:63:e8:d2:24:a6:4f: 07:65:c4:fa:b5:1f:00:4b:f3:c8:35:18:de:c3:bb:7a:b6:21: 3c:5b:da:e0:85:33:b8:b3:db:f6:fc:ce:62:61:09:9e:dc:2d: 1e:37:9f:74:af:5e:13:25:42:2a:ff:84:3f:d9:67:d6:b1:07: 74:d8:1f:9e:62:fa:83:f9:18:d6:dd:f4:d4:79:81:7c:19:6f: fa:a5:ae:57:64:02:cf:44:24:bb:59:51:ce:d7:06:53:f1:9b: 14:25:a4:1c:2b:4f:71:09:96:cd:ad:46:55:a0:92:e2:b3:42: 01:9b:eb:28:c2:2d:57:da:b7:90:d2:ba:93:00:e6:86:da:0b: 32:3e:0b:be:db:c3:ee:c0:28:cf:b7:d0:26:05:ba:ab:6f:87: a1:a6:92:5a:5d:88:f0:89:23:b7:45:7b:70:35:a0:62:6c:ae: fc:be:55:97:32:4e:04:c2:60:d8:21:30:b8:80:14:71:8c:7a: 2f:67:87:21:3c:6d:20:1a:a0:fe:41:c7:47:13:2a:3a:51:83: 07:78:be:18:63:71:c7:d5:19:35:e2:c5:b1:82:b8:79:b6:4e: e7:8f:1e:71:95:5e:ae:df:17:09:e0:0e:b2:51:01:27:cb:3e: 75:6c:64:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE79DvReyPsPeoi6beAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDgyODE2MTgwOVoXDTI2MTEyNjE3MTgwOVowLzEtMCsGA1UEAxMk NGI2NzI0ZGQtY2E5YS00MmYzLWJlZjAtZTk3NGZiOWVjMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW07DMBNxAD9rjclCDxTR77GOFYYjvJOcL5V Avokd1IODG4GXMRM21XctApYFpjrvbsDC4wKIH57shQCBZiUNL3b3Z7dV2F5P/Zd ej740uKYCrXC24NBGNUHnLSKBHdj+g6yFuNtLMnkW/7nl5m3S5B2FdO6EXgYFM4t WyFQ6T9MIcihrgz3asHC3v48DD7wMlennKfFNrpqssxnMOMH3Hd/YH4YN6m16vzc uGjU5cpYIKVbegQcN6k/RJoeTi9Q1aLJVVMs6sSPm+zbpf/xY4OwTZ8HHusTVBBT RFg/Cxt9MyKQI2dh5pWMal0HktGcboPXlCCiPb1wsrIblVEt9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzrRpYkkEx1XPpNoFYQkp63tNQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvN2ViODhhZTctMTFiNi0z MDc0LWEyY2ItZmU1ZTA3MGE0MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyUpPkrRJla15/XxmPo0iSmTwdlxPq1HwBL88g1GN7Du3q2ITxb2uCF M7iz2/b8zmJhCZ7cLR43n3SvXhMlQir/hD/ZZ9axB3TYH55i+oP5GNbd9NR5gXwZ b/qlrldkAs9EJLtZUc7XBlPxmxQlpBwrT3EJls2tRlWgkuKzQgGb6yjCLVfat5DS upMA5obaCzI+C77bw+7AKM+30CYFuqtvh6GmklpdiPCJI7dFe3A1oGJsrvy+VZcy TgTCYNghMLiAFHGMei9nhyE8bSAaoP5Bx0cTKjpRgwd4vhhjccfVGTXixbGCuHm2 TuePHnGVXq7fFwngDrJRASfLPnVsZAE= -----END CERTIFICATE-----Generated at Tue Sep 1 03:40:03 2026 by rpki-client