$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json) Hash identifier: vJ6XsH43QCjCsKyYaqTbARTKNHCoatGqKg+MTl/eH2E= Subject key identifier: 59:D0:71:E8:60:BE:6C:DA:7B:EE:56:60:CB:EF:F2:0E:B7:61:E4:9A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D975560904A97C3B2861E6BC0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 34119 IP address blocks: 149.143.150.0/23 maxlen: 23 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:60:90:4a:97:c3:b2:86:1e:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=2f01c5ff-6b0e-4f73-a4b7-5a1a2fbfbd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:36:c7:cc:63:01:46:2f:bb:f3:9f:39:cd: 28:01:a5:1a:08:6e:71:52:a8:29:37:bb:71:d5:87: 4f:a6:fe:92:d2:d6:85:2d:5e:1b:82:1b:fb:4d:78: 41:f0:a0:a8:0f:09:ee:3f:e2:92:bb:60:78:f4:e3: d5:43:73:cd:a8:8d:91:e8:cd:89:6a:94:34:8f:30: 35:7c:f8:8f:af:21:db:18:ee:d3:92:10:67:11:77: 54:00:43:54:72:74:07:74:d3:08:7c:e1:ec:76:56: c0:c2:3b:cf:38:c4:57:ca:6e:1a:47:d7:26:fa:d4: 59:4c:16:54:2b:d9:00:c9:fa:20:87:0a:a5:0e:24: 28:bc:9e:c8:9f:2b:9d:b7:54:40:0f:fa:ee:e6:ac: 4b:41:ef:86:b5:d6:35:ea:f1:13:d0:86:0a:cc:b6: 47:23:d8:29:f2:2c:13:a3:4f:c5:e5:4b:d5:23:6d: 8c:21:54:3d:62:4c:51:1a:4d:64:f3:e8:86:f4:22: 02:f6:01:0e:75:53:7e:2c:00:7d:8e:f0:06:71:80: e9:08:72:2f:02:0c:7e:0c:d4:4c:80:24:d1:9b:76: 1a:a2:ec:ed:26:4a:e3:a6:4c:0f:b0:44:69:60:11: 62:6c:fc:4d:48:f2:26:a7:3d:89:84:8a:89:d9:1b: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D0:71:E8:60:BE:6C:DA:7B:EE:56:60:CB:EF:F2:0E:B7:61:E4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:80:b3:ac:aa:42:55:14:9b:da:2a:d3:06:94:08:4b:fc:41: 5f:f1:d2:21:57:e3:cf:88:22:44:58:76:97:d6:13:e8:d4:6c: b0:b0:56:10:d5:bc:44:26:27:54:f7:6c:ae:f9:f1:67:d1:31: 09:3c:10:3b:02:fe:80:f1:d2:b0:56:bd:b5:aa:9e:eb:7c:7e: 92:97:15:29:84:58:6a:3b:34:a0:82:c7:41:af:26:16:7d:89: 84:d2:66:50:a7:4f:c3:97:3b:e8:16:02:38:c0:c3:8f:e2:d5: ae:32:89:50:52:08:b7:50:f9:0a:ad:02:0b:7e:df:04:63:24: 17:fa:dd:ed:fa:24:2a:f5:00:2b:28:8a:ce:1a:57:ea:67:a3: 4b:d8:fe:59:70:29:51:cd:9c:74:1a:35:50:ed:95:b6:b3:27: e3:fd:96:29:91:76:40:07:3d:5b:89:e9:5d:b2:db:4d:b4:7a: 16:d4:2e:29:07:5a:bb:3a:3c:24:cc:49:98:0d:77:c7:bb:fd: ed:a6:27:d9:58:35:81:19:ac:1a:8b:54:c9:39:fa:28:41:c8: 86:37:ad:db:b5:99:86:33:34:9a:fb:16:c3:a1:32:40:bd:d5: e5:4f:6d:da:81:c2:50:48:47:d5:8a:12:85:9d:5e:24:23:88: d8:8e:d5:94 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2XVWCQSpfDsoYea8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk MmYwMWM1ZmYtNmIwZS00ZjczLWE0YjctNWExYTJmYmZiZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj02x8xjAUYvu/OfOc0oAaUaCG5xUqgpN7tx 1YdPpv6S0taFLV4bghv7TXhB8KCoDwnuP+KSu2B49OPVQ3PNqI2R6M2JapQ0jzA1 fPiPryHbGO7TkhBnEXdUAENUcnQHdNMIfOHsdlbAwjvPOMRXym4aR9cm+tRZTBZU K9kAyfoghwqlDiQovJ7Inyudt1RAD/ru5qxLQe+GtdY16vET0IYKzLZHI9gp8iwT o0/F5UvVI22MIVQ9YkxRGk1k8+iG9CIC9gEOdVN+LAB9jvAGcYDpCHIvAgx+DNRM gCTRm3YaouztJkrjpkwPsERpYBFibPxNSPImpz2JhIqJ2Rt0rwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFnQcehgvmzae+5WYMvv8g63YeSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VmMTUwMjgtNzQzNC0z ZDAzLWI2NGQtY2I5MTA1ZjJmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+WAwQC lY+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACaAs6yqQlUUm9oq0waUCEv8QV/x0iFX48+IIkRYdpfWE+jU bLCwVhDVvEQmJ1T3bK758WfRMQk8EDsC/oDx0rBWvbWqnut8fpKXFSmEWGo7NKCC x0GvJhZ9iYTSZlCnT8OXO+gWAjjAw4/i1a4yiVBSCLdQ+QqtAgt+3wRjJBf63e36 JCr1ACsois4aV+pno0vY/llwKVHNnHQaNVDtlbazJ+P9limRdkAHPVuJ6V2y2020 ehbULikHWrs6PCTMSZgNd8e7/e2mJ9lYNYEZrBqLVMk5+ihByIY3rdu1mYYzNJr7 FsOhMkC91eVPbdqBwlBIR9WKEoWdXiQjiNiO1ZQ= -----END CERTIFICATE-----Generated at Thu Apr 23 03:45:27 2026 by rpki-client