$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa File: d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa (raw, json) Hash identifier: 1fpw/iPs+aZMYucbT2Qw8wh7LLAHTqeILXGkUe1IMF8= Subject key identifier: 63:DA:8C:09:B0:6D:F7:77:38:C0:AF:EC:79:DF:DC:86:EA:A6:BC:A0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F63F82F9EE9AD4831DB7D1E80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 20115 IP address blocks: 149.143.148.0/23 maxlen: 23 149.143.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2f:9e:e9:ad:48:31:db:7d:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=6e14348f-2733-4741-8826-0bfd04248b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:92:9f:77:17:2e:c4:5c:6c:7c:94:d6:e2: dc:88:f3:c6:3c:30:ae:e5:7f:6c:bc:96:2d:9e:9e: 47:dd:52:cd:b8:f7:1e:3e:55:95:b6:bf:47:4f:94: 43:2f:31:bf:6c:0c:a5:ac:f8:fd:7e:1b:2c:f9:c0: e1:1d:ce:91:6f:94:19:66:f6:19:ac:d1:a7:81:49: 09:10:53:0b:e8:5c:92:55:c3:af:7c:4d:13:37:5f: 2f:76:d8:de:f9:ea:56:e2:88:70:f0:a3:ff:9a:fa: 6e:9c:64:b8:27:0c:cc:78:60:17:12:d1:b3:fe:20: 4a:a3:cb:a8:d1:f0:9b:03:de:b8:b8:83:f4:fb:7d: 7e:b2:dc:b3:25:50:b0:d0:e6:cc:4c:1f:a4:ed:d6: 12:9f:36:06:0c:d9:c2:23:81:df:48:51:1e:9e:8e: f6:cf:5f:8b:76:cd:07:35:32:59:78:d4:e7:27:ef: 7e:0e:76:f7:43:8d:88:10:5b:b2:23:af:d6:e1:08: 17:99:6e:2f:fe:93:5e:b7:30:47:e9:87:63:c5:fe: 77:e3:76:f8:92:a9:5e:5a:16:cf:b8:3d:6f:52:b0: 34:a9:bf:9e:1c:25:5f:88:6c:98:3e:df:fc:fa:2e: 02:7d:12:f3:ad:9f:ec:08:3d:fd:0d:48:ac:cc:3a: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DA:8C:09:B0:6D:F7:77:38:C0:AF:EC:79:DF:DC:86:EA:A6:BC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.148.0/23 149.143.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e9:8c:2c:07:94:60:05:a0:73:a3:d0:ad:c7:55:d0:da:f7: 9f:f1:9f:01:79:2c:3a:67:52:8d:fd:46:af:dc:ad:e4:eb:7d: f9:68:e1:fd:c7:19:22:4c:b1:0b:9a:a5:ba:a6:2a:d9:20:29: e3:7a:74:8c:aa:68:c3:4a:11:40:82:59:65:bc:ca:c6:48:34: eb:83:80:1d:1a:17:53:09:4a:dd:2e:08:4b:c7:a4:1e:cd:0e: 33:0e:0b:d4:bc:82:a8:24:2a:17:c5:73:3b:81:59:14:65:a5: c6:a9:2c:81:2a:18:3b:ea:05:14:d1:ab:c4:85:44:50:af:fe: 88:46:42:6d:bd:cf:9f:96:d3:db:4b:9f:33:8e:59:a1:32:bc: b3:ab:6d:bb:45:37:e6:51:dc:2b:b0:6e:28:79:71:a7:e2:fb: 63:89:3c:75:60:b5:d2:11:b8:8e:2d:ec:34:3c:54:0e:c8:1f: 65:a1:49:63:96:81:13:4e:22:9e:aa:1e:13:71:dc:23:61:1d: a8:6d:70:a8:30:3c:10:b4:54:fe:4a:d4:e2:6f:41:a0:35:68: b9:0e:73:71:da:65:52:08:4a:3e:a4:41:3c:7d:c1:97:8a:cf: 5e:85:d9:95:56:08:81:7e:25:f0:45:77:36:1a:62:df:2e:af: 11:99:9b:1e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9j+C+e6a1IMdt9HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NmUxNDM0OGYtMjczMy00NzQxLTg4MjYtMGJmZDA0MjQ4YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDWSn3cXLsRcbHyU1uLciPPGPDCu5X9svJYt np5H3VLNuPcePlWVtr9HT5RDLzG/bAylrPj9fhss+cDhHc6Rb5QZZvYZrNGngUkJ EFML6FySVcOvfE0TN18vdtje+epW4ohw8KP/mvpunGS4JwzMeGAXEtGz/iBKo8uo 0fCbA964uIP0+31+styzJVCw0ObMTB+k7dYSnzYGDNnCI4HfSFEeno72z1+Lds0H NTJZeNTnJ+9+Dnb3Q42IEFuyI6/W4QgXmW4v/pNetzBH6Ydjxf5343b4kqleWhbP uD1vUrA0qb+eHCVfiGyYPt/8+i4CfRLzrZ/sCD39DUiszDoczwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGPajAmwbfd3OMCv7Hnf3IbqprygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDlhMDJkZDItZmZlOC0z N2I5LTliMzgtZmU5ZmQxZmVmZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+UAwQA lY+XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAjpjCwHlGAFoHOj0K3HVdDa95/xnwF5LDpnUo39Rq/creTr fflo4f3HGSJMsQuapbqmKtkgKeN6dIyqaMNKEUCCWWW8ysZINOuDgB0aF1MJSt0u CEvHpB7NDjMOC9S8gqgkKhfFczuBWRRlpcapLIEqGDvqBRTRq8SFRFCv/ohGQm29 z5+W09tLnzOOWaEyvLOrbbtFN+ZR3Cuwbih5cafi+2OJPHVgtdIRuI4t7DQ8VA7I H2WhSWOWgRNOIp6qHhNx3CNhHahtcKgwPBC0VP5K1OJvQaA1aLkOc3HaZVIISj6k QTx9wZeKz16F2ZVWCIF+JfBFdzYaYt8urxGZmx4= -----END CERTIFICATE-----Generated at Mon Oct 19 19:40:22 2026 by rpki-client