$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa File: d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa (raw, json) Hash identifier: c61rM77OHdEqcDz/VLprobp+zlwrB1wZOCD3wkQ93j8= Subject key identifier: 39:F3:2C:AB:D0:AF:2C:30:2B:95:00:0A:D3:EF:2E:0E:19:B8:D4:D1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B7FE9E9F620760B0B9BE49D20 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa Signing time: Sun 12 Oct 2025 18:06:40 +0000 ROA not before: Sun 12 Oct 2025 18:06:40 +0000 ROA not after: Sat 10 Jan 2026 19:06:40 +0000 asID: 20115 IP address blocks: 149.143.148.0/23 maxlen: 23 149.143.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:e9:e9:f6:20:76:0b:0b:9b:e4:9d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 12 18:06:40 2025 GMT Not After : Jan 10 19:06:40 2026 GMT Subject: CN=ce8d4b7e-c46f-4381-86bd-3fc6109ea5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:06:c4:5b:bf:d1:ce:50:d6:f7:c3:c4:80: d1:89:ac:8b:19:5a:88:67:f7:12:66:fd:b2:21:d9: 6f:7d:a1:8a:b3:0b:01:9f:95:51:42:64:84:9e:c5: f7:a9:83:e0:a0:11:8a:94:7c:26:d1:f4:f9:c4:fd: 3a:e0:b9:5b:8e:09:9e:51:bb:1b:e1:14:0b:c2:08: 6b:ed:3d:6f:50:52:70:c8:1c:af:38:0a:0c:18:03: 4f:e1:c7:84:ee:19:a3:d0:ae:ee:c4:d8:80:dc:be: 0d:36:ed:e0:12:c4:7b:11:e9:50:7a:18:99:44:3d: 85:56:ae:f7:b0:5e:ad:da:1b:3d:de:33:1c:fb:42: 89:69:53:b2:f9:d2:49:2b:17:3d:33:f2:cc:6e:c7: 8b:a1:ed:90:69:40:c3:d5:96:46:9a:ed:a4:6a:cc: c3:d1:df:f4:8d:8b:d2:0d:14:6d:76:33:79:6e:df: d9:a2:6a:79:43:30:4a:74:ef:74:27:a1:9d:92:1a: 84:34:aa:20:62:69:30:d0:cf:88:20:5e:3a:56:07: ff:d9:b4:8b:9a:0d:f8:15:49:28:f5:f8:05:e3:9c: b2:25:cf:f3:00:b7:6a:9b:08:ef:cb:e4:d3:3c:49: 11:05:31:c4:de:f4:a1:34:c4:ef:06:40:78:a8:cb: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F3:2C:AB:D0:AF:2C:30:2B:95:00:0A:D3:EF:2E:0E:19:B8:D4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.148.0/23 149.143.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d1:e6:69:4d:fa:00:8a:c3:88:18:c9:35:6b:7c:17:b3:55: 08:a0:21:c6:7b:1e:89:3a:99:55:7c:f4:ec:76:69:f3:13:93: a3:e5:09:c4:0b:4a:d2:ae:47:e4:a0:29:ca:39:43:9b:dc:e3: f7:5a:8c:59:cf:f2:c3:88:39:ad:2b:39:2d:be:47:ff:f4:f7: f2:a0:51:b6:cc:f4:42:55:a6:97:e3:79:b9:93:27:a8:26:64: 25:78:36:c4:df:c8:9d:8a:7a:e5:23:20:0c:dc:7d:16:49:26: 20:e8:34:f9:1a:68:94:b2:c2:a2:0b:7f:94:6a:35:ff:8a:33: 5e:8e:24:2d:3e:87:0e:17:68:59:56:35:c1:79:1b:01:d3:39: 2c:4f:5b:50:a5:c5:54:db:5d:54:53:59:4d:66:36:64:03:01: 91:09:e3:92:f7:b4:cf:33:8d:3f:4b:69:97:50:a6:e2:03:a4: 8a:ed:96:e4:52:2d:aa:27:0f:f5:4a:03:63:46:80:95:79:6e: dc:4b:89:5f:18:87:12:67:9b:0b:fe:5e:bd:1f:fd:ff:0e:dc: 30:df:a3:62:6c:3d:d6:e7:0f:cc:0c:64:1c:d4:a9:f4:36:7b: 18:06:06:48:eb:52:84:94:70:46:c6:eb:5c:5d:8f:1a:7a:00: 76:66:91:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt/6en2IHYLC5vknSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAxMjE4MDY0MFoXDTI2MDExMDE5MDY0MFowLzEtMCsGA1UEAxMk Y2U4ZDRiN2UtYzQ2Zi00MzgxLTg2YmQtM2ZjNjEwOWVhNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyMGxFu/0c5Q1vfDxIDRiayLGVqIZ/cSZv2y IdlvfaGKswsBn5VRQmSEnsX3qYPgoBGKlHwm0fT5xP064LlbjgmeUbsb4RQLwghr 7T1vUFJwyByvOAoMGANP4ceE7hmj0K7uxNiA3L4NNu3gEsR7EelQehiZRD2FVq73 sF6t2hs93jMc+0KJaVOy+dJJKxc9M/LMbseLoe2QaUDD1ZZGmu2kaszD0d/0jYvS DRRtdjN5bt/Zomp5QzBKdO90J6GdkhqENKogYmkw0M+IIF46Vgf/2bSLmg34FUko 9fgF45yyJc/zALdqmwjvy+TTPEkRBTHE3vShNMTvBkB4qMtfwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDnzLKvQrywwK5UACtPvLg4ZuNTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDlhMDJkZDItZmZlOC0z N2I5LTliMzgtZmU5ZmQxZmVmZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+UAwQA lY+XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACDR5mlN+gCKw4gYyTVrfBezVQigIcZ7Hok6mVV89Ox2afMT k6PlCcQLStKuR+SgKco5Q5vc4/dajFnP8sOIOa0rOS2+R//09/KgUbbM9EJVppfj ebmTJ6gmZCV4NsTfyJ2KeuUjIAzcfRZJJiDoNPkaaJSywqILf5RqNf+KM16OJC0+ hw4XaFlWNcF5GwHTOSxPW1ClxVTbXVRTWU1mNmQDAZEJ45L3tM8zjT9LaZdQpuID pIrtluRSLaonD/VKA2NGgJV5btxLiV8YhxJnmwv+Xr0f/f8O3DDfo2JsPdbnD8wM ZBzUqfQ2exgGBkjrUoSUcEbG61xdjxp6AHZmkTE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:29 2025 by rpki-client