$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: B/0DNNrBALBGR+dASnmaGx14aFARFl9eehYep/PTNnM= Subject key identifier: B7:7C:67:FE:9E:FF:F5:95:4F:FD:CB:A9:41:96:AB:D4:ED:17:AB:54 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DBBA0430E17E81DCB05D1C76C Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:43:0e:17:e8:1d:cb:05:d1:c7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=ec0f3f52-5ce9-4119-9b13-0b0db6bf705d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:67:5c:75:3b:9b:5c:6e:08:e9:40:f3:88: 32:3e:47:0b:2e:4f:6c:f4:52:69:e9:98:8e:e4:b5: 84:d2:fb:c6:cb:b3:e8:5f:3d:08:94:80:98:f3:79: fc:cf:7d:7b:c0:10:ed:05:12:8f:36:47:9d:dc:0a: 07:7b:da:ec:67:5d:6d:ae:26:f4:2d:87:85:35:c0: 24:1b:d3:ff:c6:0b:2d:22:a7:48:5b:5e:8a:c0:60: 22:52:34:3b:f5:d2:d9:f2:c2:35:58:ff:c5:a7:95: 76:fd:ef:7f:e5:c0:a1:a5:7f:50:5a:84:15:6d:ca: 95:2b:3e:24:c0:99:49:4a:b8:cf:46:6a:40:d6:fd: 0a:0f:97:14:1b:1d:b5:be:12:59:eb:54:7a:a6:2b: 1e:ce:6f:8a:f5:fd:1a:ca:b1:07:03:10:d9:bf:da: 7f:46:8c:92:30:b5:b5:74:e0:ba:f5:d7:9d:d6:61: 7f:ba:5d:01:f0:bd:b4:0e:b4:6a:23:1b:d6:53:dc: 9e:be:68:cf:8a:1b:bd:61:2c:99:db:76:e1:66:e3: ab:31:d2:da:01:98:f0:ec:70:7f:a2:0f:1f:a8:f8: 94:a2:bc:66:71:7d:a6:2c:4a:99:d0:60:db:18:da: d9:a2:ea:63:8d:56:46:e7:c5:3b:96:b7:75:63:17: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:67:FE:9E:FF:F5:95:4F:FD:CB:A9:41:96:AB:D4:ED:17:AB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d2:92:05:8f:27:e2:02:72:fa:dc:fd:33:e7:0f:dc:03:04: d5:a4:ce:94:76:e9:a5:d6:5d:1f:7d:e0:7d:6b:8b:0c:ac:e4: 73:c3:9d:34:ad:e6:63:c5:27:2e:fb:09:b9:a5:0d:97:b3:a0: 61:17:f1:5f:55:d9:9d:67:ed:45:30:4c:1a:73:62:19:ac:a8: 2e:86:53:62:64:5a:c4:73:49:8c:47:c0:bd:f2:25:d8:78:b9: 59:09:34:1c:96:84:ee:a0:cf:fc:7f:bc:17:45:17:28:aa:0f: 6d:12:a4:f4:bb:fe:81:86:1c:1e:39:08:61:fc:9c:fe:6e:13: 8d:4a:41:f6:36:26:e7:b7:67:1e:c5:3f:88:ee:fe:41:eb:9e: 85:72:b9:b2:f1:a6:4b:60:91:34:fa:a6:ed:16:16:87:a8:40: 63:a7:c1:26:4d:7a:1e:88:66:cf:ce:53:e2:9a:af:46:c0:2e: 9d:da:a9:88:86:c3:55:df:a8:b3:82:77:db:ca:2c:fd:83:39: 43:66:61:8f:44:ee:23:4d:c2:51:a5:b4:d8:5c:b5:f1:da:db: 0d:3e:46:e7:17:33:e4:7d:14:0e:28:50:d7:13:5a:06:09:37: 4a:4d:31:98:b1:03:c3:62:d4:0b:5c:2c:68:c0:53:6e:bf:e3: a8:c8:03:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEMOF+gdywXRx2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk ZWMwZjNmNTItNWNlOS00MTE5LTliMTMtMGIwZGI2YmY3MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlZnXHU7m1xuCOlA84gyPkcLLk9s9FJp6ZiO 5LWE0vvGy7PoXz0IlICY83n8z317wBDtBRKPNked3AoHe9rsZ11trib0LYeFNcAk G9P/xgstIqdIW16KwGAiUjQ79dLZ8sI1WP/Fp5V2/e9/5cChpX9QWoQVbcqVKz4k wJlJSrjPRmpA1v0KD5cUGx21vhJZ61R6pisezm+K9f0ayrEHAxDZv9p/RoySMLW1 dOC69ded1mF/ul0B8L20DrRqIxvWU9yevmjPihu9YSyZ23bhZuOrMdLaAZjw7HB/ og8fqPiUorxmcX2mLEqZ0GDbGNrZoupjjVZG58U7lrd1YxcP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd8Z/6e//WVT/3LqUGWq9TtF6tUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfSkgWPJ+ICcvrc/TPnD9wDBNWkzpR26aXWXR994H1riwys5HPDnTSt 5mPFJy77CbmlDZezoGEX8V9V2Z1n7UUwTBpzYhmsqC6GU2JkWsRzSYxHwL3yJdh4 uVkJNByWhO6gz/x/vBdFFyiqD20SpPS7/oGGHB45CGH8nP5uE41KQfY2Jue3Zx7F P4ju/kHrnoVyubLxpktgkTT6pu0WFoeoQGOnwSZNeh6IZs/OU+Kar0bALp3aqYiG w1XfqLOCd9vKLP2DOUNmYY9E7iNNwlGltNhctfHa2w0+RucXM+R9FA4oUNcTWgYJ N0pNMZixA8Ni1AtcLGjAU26/46jIA0w= -----END CERTIFICATE-----Generated at Wed May 13 13:13:11 2026 by rpki-client