$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/841c9cc8-273f-384a-9835-10e3ef1bff12.roa File: 841c9cc8-273f-384a-9835-10e3ef1bff12.roa (raw, json) Hash identifier: QarpKWqIS5fpyA9PctH9xZkbrVbR81DHysFqtAb68JE= Subject key identifier: 4D:12:78:6F:D2:2C:4F:D3:5B:91:05:9B:00:DA:1D:0C:C9:3D:57:DC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584D3C595E63909A8691EE2749D0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/841c9cc8-273f-384a-9835-10e3ef1bff12.roa Signing time: Fri 20 Mar 2026 22:50:09 +0000 ROA not before: Fri 20 Mar 2026 22:50:09 +0000 ROA not after: Thu 18 Jun 2026 22:50:09 +0000 asID: 54702 IP address blocks: 149.143.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:59:5e:63:90:9a:86:91:ee:27:49:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 20 22:50:09 2026 GMT Not After : Jun 18 22:50:09 2026 GMT Subject: CN=dd529b02-077a-4853-8146-ba3fd1a7965f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:e3:5a:f3:11:7f:a5:e5:f7:b1:f3:07:9a: cf:48:a3:f3:c7:4b:98:61:13:ab:ad:57:ab:19:c5: 3c:a8:2a:86:10:d4:70:12:e9:f3:c1:de:22:9f:53: be:3e:cd:b6:a7:f5:72:08:65:3b:f0:30:a0:71:8f: 3b:88:0a:49:90:a4:cf:6e:97:4c:93:a9:b1:ca:0b: 83:a4:be:52:b4:4c:de:03:a4:5e:59:0d:de:1d:a9: 0e:b5:f5:7d:b1:78:69:77:82:95:e9:66:a9:e9:db: 32:38:c4:64:bd:ff:20:45:f2:15:24:72:6b:3c:d7: ea:5f:0a:ed:ae:97:86:0e:4a:20:7e:37:75:e7:a1: 6b:13:e4:a0:ce:92:36:0f:e4:78:bc:48:02:f6:84: 01:10:2b:99:47:e7:4f:40:54:40:76:d7:8b:7c:d2: 4d:c8:2e:cc:33:32:0f:e3:af:f0:00:23:0c:54:0f: 71:7f:22:e4:ce:82:76:bd:ce:3b:95:6a:61:b7:13: 61:d8:cc:ac:8a:13:df:40:4d:fa:be:68:f0:27:f6: 8c:41:56:37:c1:0c:f4:fe:c0:23:18:84:92:03:2b: 45:3c:16:3e:ae:ac:ab:de:4f:21:23:b9:71:7c:75: 62:80:d1:18:36:1c:22:d1:bd:71:c3:34:bb:82:40: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:78:6F:D2:2C:4F:D3:5B:91:05:9B:00:DA:1D:0C:C9:3D:57:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/841c9cc8-273f-384a-9835-10e3ef1bff12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:08:49:56:1d:21:3f:66:6d:6d:f1:4a:cc:64:e7:6f:52:23: 97:f1:62:d3:22:f4:d4:57:ca:c2:4f:58:4b:17:e7:4c:92:fa: 4b:0f:28:4c:95:5b:3f:06:15:e2:81:04:1d:7a:12:b4:bb:21: 71:0d:bc:49:2d:2d:c6:fe:11:bd:1a:15:4e:2e:5b:17:fe:a7: 9c:52:e1:60:7d:ad:49:8c:8b:a9:61:49:34:60:5d:1f:f7:28: e4:34:1b:7a:ca:10:cc:f2:ef:b0:75:ab:ce:9f:cf:49:66:9e: 18:03:ce:b5:64:58:63:48:65:27:f7:cc:09:32:4b:97:cd:35: 4e:63:95:4d:0d:97:42:02:ce:ed:42:a3:2e:aa:cc:65:eb:8b: 83:20:45:ba:da:dd:b2:14:99:0e:7c:6a:dd:4f:5a:a6:a4:2d: f6:d6:4d:cc:f4:20:7a:27:44:eb:89:c1:db:8e:da:c2:15:8e: c0:29:3c:e9:e6:20:6e:57:ae:cf:68:1c:74:7b:6d:c2:e8:c0: 94:7e:95:41:26:ad:ba:fc:db:fe:ab:8f:69:12:dd:59:f0:5b: 7c:c9:00:14:d1:1e:bf:89:5c:51:43:62:5c:20:1e:9d:65:10: 5d:a1:c8:c6:6b:48:3e:09:95:77:99:ce:7d:b4:f1:ee:db:66: e8:b1:de:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE08WV5jkJqGke4nSdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDMyMDIyNTAwOVoXDTI2MDYxODIyNTAwOVowLzEtMCsGA1UEAxMk ZGQ1MjliMDItMDc3YS00ODUzLTgxNDYtYmEzZmQxYTc5NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEvjWvMRf6Xl97HzB5rPSKPzx0uYYROrrVer GcU8qCqGENRwEunzwd4in1O+Ps22p/VyCGU78DCgcY87iApJkKTPbpdMk6mxyguD pL5StEzeA6ReWQ3eHakOtfV9sXhpd4KV6Wap6dsyOMRkvf8gRfIVJHJrPNfqXwrt rpeGDkogfjd156FrE+SgzpI2D+R4vEgC9oQBECuZR+dPQFRAdteLfNJNyC7MMzIP 46/wACMMVA9xfyLkzoJ2vc47lWphtxNh2MysihPfQE36vmjwJ/aMQVY3wQz0/sAj GISSAytFPBY+rqyr3k8hI7lxfHVigNEYNhwi0b1xwzS7gkCEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0SeG/SLE/TW5EFmwDaHQzJPVfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvODQxYzljYzgtMjczZi0z ODRhLTk4MzUtMTBlM2VmMWJmZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlY+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYISVYdIT9mbW3xSsxk529SI5fxYtMi9NRXysJPWEsX50yS+ksPKEyV Wz8GFeKBBB16ErS7IXENvEktLcb+Eb0aFU4uWxf+p5xS4WB9rUmMi6lhSTRgXR/3 KOQ0G3rKEMzy77B1q86fz0lmnhgDzrVkWGNIZSf3zAkyS5fNNU5jlU0Nl0ICzu1C oy6qzGXri4MgRbra3bIUmQ58at1PWqakLfbWTcz0IHonROuJwduO2sIVjsApPOnm IG5Xrs9oHHR7bcLowJR+lUEmrbr82/6rj2kS3VnwW3zJABTRHr+JXFFDYlwgHp1l EF2hyMZrSD4JlXeZzn208e7bZuix3ug= -----END CERTIFICATE-----Generated at Wed Mar 25 21:27:30 2026 by rpki-client