$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa File: bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa (raw, json) Hash identifier: 0wWCFUf9RQHPRTIF9uXgv+n2/2mpIOlGIXctyUpHl8U= Subject key identifier: AD:6F:E1:CF:D8:B5:87:7C:07:76:82:40:77:B4:8E:FA:DC:D3:F3:1A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584DBBA0431B27AE4F3CB0179B00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 1239 IP address blocks: 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:43:1b:27:ae:4f:3c:b0:17:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=346748a2-3cb2-4dbd-b5c9-ccc80391547c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:d3:ba:f3:09:8d:48:8f:01:fc:c9:98:65: b9:c5:b5:9e:d4:0a:fd:49:8c:1b:4c:ca:e8:65:01: 45:98:f2:a1:28:1a:96:aa:c3:6a:1e:00:bc:8a:eb: e6:6d:cc:47:b9:33:34:76:40:4e:8b:08:4d:29:83: ca:6f:3b:57:1d:62:74:83:ed:b3:28:b1:6a:5a:47: 66:6d:3b:ce:9d:98:ee:0c:5f:58:eb:1b:f2:2e:a0: 54:e5:33:c2:fc:13:12:ab:f9:ee:56:15:01:25:58: 9b:b8:1a:e7:cc:ed:64:96:82:a8:6a:b1:9e:5d:7e: 81:17:2e:51:91:81:55:eb:4f:55:25:66:a5:bb:1e: 26:d9:52:91:e3:a4:4d:aa:bc:4b:ca:e6:53:e4:6d: c0:d3:7c:01:98:6f:75:7d:4b:e5:93:40:9a:b8:42: d0:bd:e2:01:76:46:55:96:b1:48:26:87:40:f4:4a: 5d:5e:3e:04:9f:fc:1d:4a:7d:49:1a:d1:54:e6:33: a7:80:df:2d:ef:8e:ea:60:44:98:ab:76:a5:f0:a6: 2c:61:66:eb:56:b0:17:bc:3e:2e:4d:34:27:23:e0: cf:df:47:78:f4:af:bf:80:7f:5d:53:9d:9e:6f:a2: 39:45:59:29:7a:20:ed:7b:cc:96:66:78:52:f1:cc: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6F:E1:CF:D8:B5:87:7C:07:76:82:40:77:B4:8E:FA:DC:D3:F3:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cf:86:84:09:dc:4c:a6:52:79:e8:3e:bf:47:69:6a:63:9e: a0:5e:09:24:19:61:8b:37:f5:04:30:14:e5:4e:c3:0f:f1:f8: f2:b0:07:ef:32:bc:12:a6:61:93:4d:94:71:3d:c8:64:66:fc: 27:49:3d:a8:ec:36:bd:9d:3f:7f:c0:fb:2f:e9:86:14:0d:f5: 93:78:17:25:75:c3:cb:b6:16:27:45:f1:79:3a:02:77:13:90: cb:3c:10:9a:7c:e5:ce:bc:45:c5:68:11:4f:40:f6:47:d1:c3: e0:26:0d:3a:19:22:46:c0:e5:99:f1:cc:c3:37:64:71:a8:05: 51:ef:3e:74:0f:18:ec:d7:f6:09:cc:cf:ce:ec:cf:a8:a6:7d: e9:1f:c1:60:83:21:ff:41:3e:bb:3a:e5:ad:db:77:43:66:44: f3:b5:e8:67:05:d2:fa:42:59:23:f6:45:cf:eb:df:1e:d1:f2: 5f:ee:8a:38:c4:fd:2d:36:03:02:c7:30:77:0d:90:38:8e:a3: 65:2e:14:23:95:09:e2:11:53:3d:87:97:93:63:6c:5e:1c:41: cd:f7:d3:d1:1d:e6:3d:04:d5:a5:f0:e9:ec:e3:f1:e8:2b:90: 33:09:61:12:c0:a9:df:e4:f7:7e:2d:fc:99:a2:9a:f4:9f:eb: 10:91:2a:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEMbJ65PPLAXmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk MzQ2NzQ4YTItM2NiMi00ZGJkLWI1YzktY2NjODAzOTE1NDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu23TuvMJjUiPAfzJmGW5xbWe1Ar9SYwbTMro ZQFFmPKhKBqWqsNqHgC8iuvmbcxHuTM0dkBOiwhNKYPKbztXHWJ0g+2zKLFqWkdm bTvOnZjuDF9Y6xvyLqBU5TPC/BMSq/nuVhUBJVibuBrnzO1kloKoarGeXX6BFy5R kYFV609VJWalux4m2VKR46RNqrxLyuZT5G3A03wBmG91fUvlk0CauELQveIBdkZV lrFIJodA9EpdXj4En/wdSn1JGtFU5jOngN8t747qYESYq3al8KYsYWbrVrAXvD4u TTQnI+DP30d49K+/gH9dU52eb6I5RVkpeiDte8yWZnhS8cz+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1v4c/YtYd8B3aCQHe0jvrc0/MaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmZhNmJhMjUtNjhmZC0z NDkzLThkNDUtNDU1ODNjOGI5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvPhoQJ3EymUnnoPr9HaWpjnqBeCSQZYYs39QQwFOVOww/x+PKwB+8y vBKmYZNNlHE9yGRm/CdJPajsNr2dP3/A+y/phhQN9ZN4FyV1w8u2FidF8Xk6AncT kMs8EJp85c68RcVoEU9A9kfRw+AmDToZIkbA5ZnxzMM3ZHGoBVHvPnQPGOzX9gnM z87sz6imfekfwWCDIf9BPrs65a3bd0NmRPO16GcF0vpCWSP2Rc/r3x7R8l/uijjE /S02AwLHMHcNkDiOo2UuFCOVCeIRUz2Hl5NjbF4cQc3309Ed5j0E1aXw6ezj8egr kDMJYRLAqd/k934t/JmimvSf6xCRKts= -----END CERTIFICATE-----Generated at Wed May 13 05:52:20 2026 by rpki-client