
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa
File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json)
Hash identifier: 5znVuHm4BnXkQ4OB1S/kgW6K8MbzM8UAeeEjnGBokTk=
Subject key identifier: 05:18:47:D6:82:0D:10:3C:5B:D0:6F:AA:D5:7F:61:0F:AB:85:49:F4
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584CB6B71F8B121D9B4FA64E2180
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa
Signing time: Sun 01 Feb 2026 02:00:32 +0000
ROA not before: Sun 01 Feb 2026 02:00:32 +0000
ROA not after: Sat 02 May 2026 01:00:32 +0000
asID: 34119
IP address blocks: 149.143.150.0/23 maxlen: 23
149.143.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b6:b7:1f:8b:12:1d:9b:4f:a6:4e:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 1 02:00:32 2026 GMT
Not After : May 2 01:00:32 2026 GMT
Subject: CN=82d12103-4c5b-4a89-ab28-b46462fd653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:7b:87:52:17:8d:31:24:1c:55:ef:26:07:
8a:83:28:1e:01:e5:5f:67:7e:40:cb:39:bb:cc:25:
d7:b6:0c:c1:56:32:1b:78:18:1d:8b:5d:5a:82:29:
e7:8c:38:e5:22:75:3e:c8:03:d3:25:6c:34:2c:ac:
47:ed:de:60:d6:18:f2:a4:78:00:86:35:6d:09:cc:
33:97:71:7d:00:21:82:00:9f:fa:d0:8b:96:97:85:
a6:7f:30:1b:b6:73:ba:dc:65:7f:d0:68:85:99:5e:
c8:29:ba:13:7e:24:45:11:02:91:2c:87:20:55:d9:
70:af:32:f6:ab:08:bd:03:7d:0e:f7:6f:52:84:44:
00:06:95:3e:bb:6b:e4:60:58:45:ff:8c:11:f4:3f:
ea:95:4d:e1:e6:ef:04:c9:4c:41:db:f0:a6:bc:ed:
6b:d2:72:9e:de:41:fa:de:81:73:c9:2d:b7:a0:79:
6e:a7:d9:66:c7:04:0e:e4:de:bd:62:de:0f:2f:49:
28:a9:86:64:c5:29:3a:b5:97:06:3a:58:4e:d6:f3:
43:b6:08:7c:6e:a6:4b:4d:3b:87:08:8e:02:ff:4f:
e5:91:ba:30:a1:bf:94:96:50:e6:41:95:ba:8c:61:
9c:47:31:d1:bc:81:6a:21:d8:4a:4f:3f:de:b6:e5:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:18:47:D6:82:0D:10:3C:5B:D0:6F:AA:D5:7F:61:0F:AB:85:49:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.150.0/23
149.143.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:36:1a:56:24:32:91:c8:b6:f5:1a:19:aa:f7:b3:75:ab:b3:
b2:6d:ad:47:f7:bb:2e:6c:2e:36:fb:71:03:c2:ca:8c:86:c2:
5e:17:50:b6:26:0a:8b:aa:f7:c7:8e:72:14:92:06:32:d1:38:
1d:d0:ae:bb:bc:11:60:17:86:de:4c:76:80:7c:34:bb:0b:74:
e2:6f:cd:58:ff:a3:89:b7:b1:3e:64:ce:ed:04:87:58:76:08:
16:38:5d:09:22:d1:25:d4:9b:a7:5a:57:79:e9:c3:87:1e:31:
d4:54:03:8d:c6:20:da:51:d4:f1:cb:dc:e8:17:5a:7e:25:ef:
c0:ec:8b:37:b7:06:92:0d:90:72:76:24:86:6d:ba:59:c2:ca:
7b:78:36:c9:33:3c:00:e1:7a:fd:62:c6:f6:ba:57:4a:0d:3d:
15:1a:c1:22:ad:f2:68:8c:7d:36:78:79:0f:0a:f6:de:24:c9:
ac:e8:b9:64:c9:31:49:a8:11:66:14:9b:36:e6:c9:99:7c:b4:
77:22:d3:87:0d:ac:f8:3a:0a:74:60:ce:9b:49:24:0e:f6:fe:
e3:c1:0f:f5:1f:6d:45:44:64:83:e7:b6:c7:47:ea:d2:76:d2:
7f:52:e6:e3:1a:e2:8c:37:ce:c8:a3:cc:3f:38:39:96:5d:55:
b8:1a:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 19:03:16 2026 by rpki-client