$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa File: 3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa (raw, json) Hash identifier: VPovDK8yH2i913dJgDQ61OalC8XhSa4jveTdZz3Pm00= Subject key identifier: E5:5A:AB:F3:FB:EF:82:8C:0D:D7:7E:DB:99:29:EC:93:08:84:EF:C7 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DC40062950FEAFEE5EFC50B80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 64200 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:62:95:0f:ea:fe:e5:ef:c5:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=8e9f956c-44d6-423e-bf29-943c40306e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:09:3d:59:7f:8a:b0:3d:bb:53:ea:fd:61:64: 18:62:64:ca:62:bd:4e:c7:2a:e0:f3:07:de:98:c3: 15:3f:b0:e7:b5:18:5f:fb:70:7e:52:3a:df:f9:4b: f1:33:5f:3f:d1:1d:4f:ed:12:6a:b1:ff:f3:58:4d: 72:31:c3:11:02:8e:75:ae:fa:bf:a1:54:e7:1c:0d: f5:2b:b0:6a:c7:d8:88:e2:b7:29:41:23:56:a5:61: 48:74:ac:63:68:c7:8a:bd:8a:c4:39:fc:ea:03:f7: da:43:5e:2d:b1:9b:15:d8:e5:67:01:2c:90:dd:f1: 6d:a7:31:39:19:24:73:d1:8d:4d:e4:bd:01:dd:10: 5f:3d:1b:30:e9:e0:b3:27:e8:7f:dc:31:d9:64:36: ba:d9:cd:73:d4:19:60:a3:bc:fd:a5:55:d9:86:1b: 5f:49:21:da:51:7c:89:0a:ef:79:5c:f1:d7:22:f1: d9:34:a3:de:68:00:7a:a3:40:97:a4:8e:35:ba:df: db:ad:d9:25:34:10:ed:d3:d1:88:16:79:12:5f:5b: d4:e2:d5:5e:92:34:cf:86:df:be:fd:6e:1e:80:04: 18:54:40:b8:ba:30:ab:5f:2a:56:1f:6c:c3:c5:3c: d4:6d:22:92:74:57:73:db:b6:d4:d0:bd:f0:87:d2: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:AB:F3:FB:EF:82:8C:0D:D7:7E:DB:99:29:EC:93:08:84:EF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e6:13:06:73:31:3f:9e:15:c9:b5:4a:87:fb:9e:84:26:9a: 8b:ea:df:69:c9:8a:56:12:a2:5b:5f:cf:38:64:36:4f:f7:6d: 4f:25:fa:95:45:92:c9:31:66:7f:8a:f1:bd:af:8d:e3:59:58: 66:33:1d:c0:32:bd:24:ed:a0:65:4a:e0:da:b6:ad:10:bb:a1: 8c:85:f5:9c:75:e0:d2:c0:75:ab:a9:e6:17:de:aa:98:3e:39: df:bd:e1:71:a6:1e:6f:21:da:d6:11:6d:15:28:eb:13:98:4a: 25:24:9c:17:55:90:48:2d:50:61:8f:1b:53:e3:23:e1:df:93: e5:b0:ea:4a:7e:dd:09:8b:75:50:60:bc:4f:c3:40:c0:72:52: c6:58:63:68:fa:1f:2f:f6:bf:6c:71:da:7d:51:0a:ff:41:36: 01:2b:a4:78:2d:45:36:18:bd:ca:2c:6e:6a:11:fd:08:95:e5: 6b:e9:7e:ff:ef:f7:3f:56:eb:3b:8b:e0:d1:f8:2a:d6:54:c3: 31:93:ef:97:29:1d:5a:f9:25:03:e9:1a:12:5f:b0:d6:8c:1c: 61:df:5c:b7:b9:f7:bc:5d:d7:32:ad:32:d2:ec:f4:52:53:3f: 6e:f2:2d:99:a5:a5:d0:42:00:51:d5:f6:93:c6:13:ae:64:d7: 8e:45:8d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAGKVD+r+5e/FC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk OGU5Zjk1NmMtNDRkNi00MjNlLWJmMjktOTQzYzQwMzA2ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQk9WX+KsD27U+r9YWQYYmTKYr1Oxyrg8wfe mMMVP7DntRhf+3B+Ujrf+UvxM18/0R1P7RJqsf/zWE1yMcMRAo51rvq/oVTnHA31 K7Bqx9iI4rcpQSNWpWFIdKxjaMeKvYrEOfzqA/faQ14tsZsV2OVnASyQ3fFtpzE5 GSRz0Y1N5L0B3RBfPRsw6eCzJ+h/3DHZZDa62c1z1Blgo7z9pVXZhhtfSSHaUXyJ Cu95XPHXIvHZNKPeaAB6o0CXpI41ut/brdklNBDt09GIFnkSX1vU4tVekjTPht++ /W4egAQYVEC4ujCrXypWH2zDxTzUbSKSdFdz27bU0L3wh9KjxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVaq/P774KMDdd+25kp7JMIhO/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvM2UxNmYyZjAtYTFiNS0z NzFiLWE5MTctZGJkMDQwZTljMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvmEwZzMT+eFcm1Sof7noQmmovq32nJilYSoltfzzhkNk/3bU8l+pVF kskxZn+K8b2vjeNZWGYzHcAyvSTtoGVK4Nq2rRC7oYyF9Zx14NLAdaup5hfeqpg+ Od+94XGmHm8h2tYRbRUo6xOYSiUknBdVkEgtUGGPG1PjI+Hfk+Ww6kp+3QmLdVBg vE/DQMByUsZYY2j6Hy/2v2xx2n1RCv9BNgErpHgtRTYYvcosbmoR/QiV5Wvpfv/v 9z9W6zuL4NH4KtZUwzGT75cpHVr5JQPpGhJfsNaMHGHfXLe597xd1zKtMtLs9FJT P27yLZmlpdBCAFHV9pPGE65k145FjbE= -----END CERTIFICATE-----Generated at Wed May 13 08:21:43 2026 by rpki-client