$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa File: 6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json) Hash identifier: nhNGctTLD5Esgfd/f7Gz6XTDiNR4oT5mZfqF053Xb9U= Subject key identifier: 9A:65:6F:76:76:A7:5E:7A:94:BB:0B:EA:29:6B:68:B9:8D:D7:FC:38 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F3E47D95BC39CE5DA6C2DF080 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 1239 IP address blocks: 149.143.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d9:5b:c3:9c:e5:da:6c:2d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c971fcdf-7380-498b-ba59-0a02316d9df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:ec:18:ca:d5:ff:93:df:51:6f:db:00:f2: 2a:12:6d:e9:3b:53:9f:76:75:4e:4b:b6:de:4a:92: 83:b7:87:5b:7f:4b:56:e3:4b:94:cf:85:8f:8f:14: aa:9f:a7:b3:b8:60:5e:bb:a4:f6:26:e6:7f:06:f2: a5:e6:46:55:63:34:51:ce:7c:52:97:46:6f:37:84: d6:22:b0:1b:de:a4:3d:0e:01:3d:ac:4d:c1:2d:9e: 55:3e:f0:4e:fc:c4:a4:9d:ad:7d:14:68:8e:98:b4: 97:67:8b:57:cf:dc:68:61:42:58:12:db:ec:98:0c: a3:88:cd:4f:12:55:f7:d9:14:c8:f8:7b:d9:f1:9e: 7d:a1:1a:00:26:da:c5:19:9f:cf:d9:7a:4e:a1:b1: 5b:c5:00:75:ef:1f:b0:d6:39:49:f5:6b:55:87:a2: fc:65:6d:0a:00:74:24:27:96:36:82:b8:cc:8d:c2: 89:e3:db:d7:16:0b:d4:6a:54:1a:c7:af:00:57:c3: a6:d5:e3:63:f0:a5:4c:b2:91:f1:c4:de:e3:d1:a1: 03:70:e7:a6:b5:ab:99:5b:dc:a4:c8:5f:82:15:58: d3:98:d3:a3:ce:01:6c:c6:a0:db:fb:34:31:e1:fb: 10:a4:26:a3:06:c1:92:77:e6:d7:6d:51:dd:2c:0d: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:65:6F:76:76:A7:5E:7A:94:BB:0B:EA:29:6B:68:B9:8D:D7:FC:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0f:db:c1:7d:26:dc:e5:e7:bc:4c:eb:28:8f:49:f1:90:8e: 64:3a:57:64:f4:6b:b1:5d:87:34:04:9d:40:87:3b:c5:67:e6: 92:37:b7:ac:73:63:95:ef:47:d9:02:d5:a9:37:48:ae:1a:51: 9c:37:1c:b3:cf:e6:f0:76:7e:34:6f:54:f0:86:bd:6e:9c:38: f2:95:6a:5f:76:16:91:06:c1:c0:da:ed:bf:48:22:92:62:1a: 42:c7:9e:82:c5:74:a6:83:a9:a7:e5:c1:04:e9:47:9f:65:2e: 13:e3:db:bb:db:02:1c:ae:67:9f:b1:bf:51:a3:9a:cc:53:8d: 78:33:a4:f1:12:b1:1f:1f:36:5d:eb:67:43:ed:b8:69:29:eb: 58:c7:ab:07:aa:e4:b7:db:28:f0:17:54:04:8c:a9:65:ac:f8: e1:01:9b:88:ad:40:31:f9:41:fb:18:8a:4f:3b:c0:03:ec:76: 62:c9:1c:06:cb:c2:c0:fc:82:36:6d:3d:9d:5c:c8:c4:98:76: 1e:d3:3b:79:f3:39:06:18:ba:8e:e9:78:ca:57:23:7c:e3:7e: 6f:8a:0f:86:97:eb:b6:c8:5c:80:e1:46:75:97:b1:19:56:b2: bd:8b:c4:3a:d6:78:49:5c:8c:cb:37:2f:ee:13:cc:e5:27:8e: a4:1b:b7:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9lbw5zl2mwt8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Yzk3MWZjZGYtNzM4MC00OThiLWJhNTktMGEwMjMxNmQ5ZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw23sGMrV/5PfUW/bAPIqEm3pO1OfdnVOS7be SpKDt4dbf0tW40uUz4WPjxSqn6ezuGBeu6T2JuZ/BvKl5kZVYzRRznxSl0ZvN4TW IrAb3qQ9DgE9rE3BLZ5VPvBO/MSkna19FGiOmLSXZ4tXz9xoYUJYEtvsmAyjiM1P ElX32RTI+HvZ8Z59oRoAJtrFGZ/P2XpOobFbxQB17x+w1jlJ9WtVh6L8ZW0KAHQk J5Y2grjMjcKJ49vXFgvUalQax68AV8Om1eNj8KVMspHxxN7j0aEDcOemtauZW9yk yF+CFVjTmNOjzgFsxqDb+zQx4fsQpCajBsGSd+bXbVHdLA05DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJplb3Z2p156lLsL6ilraLmN1/w4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmQ3YTE4MTgtYjAzZi0z NDRkLWJhNmYtZDJmNDhkNmQ0YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcP28F9Jtzl57xM6yiPSfGQjmQ6V2T0a7FdhzQEnUCHO8Vn5pI3t6xz Y5XvR9kC1ak3SK4aUZw3HLPP5vB2fjRvVPCGvW6cOPKVal92FpEGwcDa7b9IIpJi GkLHnoLFdKaDqaflwQTpR59lLhPj27vbAhyuZ5+xv1GjmsxTjXgzpPESsR8fNl3r Z0PtuGkp61jHqweq5LfbKPAXVASMqWWs+OEBm4itQDH5QfsYik87wAPsdmLJHAbL wsD8gjZtPZ1cyMSYdh7TO3nzOQYYuo7peMpXI3zjfm+KD4aX67bIXIDhRnWXsRlW sr2LxDrWeElcjMs3L+4TzOUnjqQbt4Q= -----END CERTIFICATE-----Generated at Thu Sep 24 23:46:53 2026 by rpki-client