$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa File: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (raw, json) Hash identifier: 4kcXpUvwopWoVnUjw0wqfKU6DHfLI3Xt122ZX02xZSc= Subject key identifier: 2D:E6:44:B7:D2:B0:01:24:31:22:40:CB:1B:EF:F1:68:B2:24:1D:ED Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584F4972A023BF874D695E11DC00 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46309 IP address blocks: 198.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a0:23:bf:87:4d:69:5e:11:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08133fc7-daca-483e-8ee0-8cb2eb2c8ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1d:37:e2:99:2a:c5:13:8a:39:b5:12:0f:86: a3:05:cd:b9:2d:c1:9c:e3:d8:d7:be:60:ca:21:f8: f1:d3:90:a8:1d:17:4f:f9:d4:48:cd:31:6d:02:d7: 0b:10:57:fb:e3:ab:18:55:ae:b1:c7:47:c5:b7:fe: bb:56:5e:49:a6:5b:7c:0f:60:59:5f:db:df:b4:9c: 34:9e:9e:f2:1f:76:1b:37:ee:f4:9e:c3:6a:ed:f6: f6:e2:cf:b8:f8:8c:c9:06:b5:20:4e:af:97:6d:19: ba:b6:01:7c:4b:00:a4:35:61:dd:4c:33:4b:40:7f: e2:b3:80:82:9f:bb:83:92:ee:d8:51:74:48:a3:d4: 4b:3b:e2:02:4d:f1:c5:8b:91:b6:99:23:88:e7:5b: f3:c8:32:56:fc:c5:22:dc:33:22:85:89:22:a7:7c: a3:98:15:a0:48:14:e3:40:b0:de:b9:ec:f1:96:ca: ef:c1:84:21:65:1c:40:9f:a7:b6:33:45:92:e3:ac: 27:8f:43:05:c2:1c:e9:89:cc:8c:11:be:5b:f3:39: 82:b2:a6:a1:fd:29:a3:b5:04:39:28:43:9e:d6:c3: 03:92:5f:54:75:e3:3f:aa:58:cb:a9:ba:cb:82:40: c5:db:a8:35:6b:65:0d:69:18:81:10:16:44:0b:74: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:44:B7:D2:B0:01:24:31:22:40:CB:1B:EF:F1:68:B2:24:1D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: 198.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ef:16:24:3a:df:5c:c7:3c:aa:d7:7a:9d:e5:88:16:f0:96: ed:f3:28:7d:a3:91:6b:06:7e:cd:3e:bf:65:36:b7:14:f7:7b: 8b:1b:01:d5:ec:54:80:a9:07:6d:6b:6e:73:b3:48:11:6f:3a: 16:9a:d9:27:88:a6:e4:d3:15:06:57:b9:79:3a:da:d3:86:01: 1a:5c:6a:7f:17:2d:3b:cb:70:60:0e:ea:e5:2b:d9:6d:a3:2f: 97:74:1a:4b:d3:b4:a2:6d:60:0c:68:ac:80:e7:18:ac:db:ca: 50:c7:41:ff:80:65:ba:00:ad:0e:7b:b6:d3:1c:a2:a2:79:a2: 85:7b:83:0b:0f:42:0c:ac:54:47:5b:e2:f0:0e:97:1d:c1:12: dc:c6:f9:fa:60:60:da:d6:0c:96:8c:79:49:ca:94:4c:1a:9e: 13:b7:d6:48:a0:ed:f6:aa:24:b0:35:db:60:8a:a2:dc:28:cf: 24:26:8f:83:2c:51:a4:24:7b:77:0c:5a:4a:15:c2:e1:3d:c6: e7:59:d8:9c:39:e7:52:34:32:5f:30:f3:44:8c:0f:1c:73:c1: 6b:b7:2d:b5:35:39:d3:75:43:c7:09:de:c1:97:ea:f6:42:2c: 3c:56:f2:fb:ea:0c:44:63:53:96:3c:c9:54:63:97:f0:dd:d2: 27:5e:ca:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqAjv4dNaV4R3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDgxMzNmYzctZGFjYS00ODNlLThlZTAtOGNiMmViMmM4YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R034pkqxROKObUSD4ajBc25LcGc49jXvmDK Ifjx05CoHRdP+dRIzTFtAtcLEFf746sYVa6xx0fFt/67Vl5Jplt8D2BZX9vftJw0 np7yH3YbN+70nsNq7fb24s+4+IzJBrUgTq+XbRm6tgF8SwCkNWHdTDNLQH/is4CC n7uDku7YUXRIo9RLO+ICTfHFi5G2mSOI51vzyDJW/MUi3DMihYkip3yjmBWgSBTj QLDeuezxlsrvwYQhZRxAn6e2M0WS46wnj0MFwhzpicyMEb5b8zmCsqah/SmjtQQ5 KEOe1sMDkl9UdeM/qljLqbrLgkDF26g1a2UNaRiBEBZEC3RpUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3mRLfSsAEkMSJAyxvv8WiyJB3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvMzUyNzI1MTItNzdmZS0z N2Y3LWEyZmYtYmQ4OWQ1MjRhZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrvFiQ631zHPKrXep3liBbwlu3zKH2jkWsGfs0+v2U2txT3e4sbAdXs VICpB21rbnOzSBFvOhaa2SeIpuTTFQZXuXk62tOGARpcan8XLTvLcGAO6uUr2W2j L5d0GkvTtKJtYAxorIDnGKzbylDHQf+AZboArQ57ttMcoqJ5ooV7gwsPQgysVEdb 4vAOlx3BEtzG+fpgYNrWDJaMeUnKlEwanhO31kig7faqJLA122CKotwozyQmj4Ms UaQke3cMWkoVwuE9xudZ2Jw551I0Ml8w80SMDxxzwWu3LbU1OdN1Q8cJ3sGX6vZC LDxW8vvqDERjU5Y8yVRjl/Dd0ideykE= -----END CERTIFICATE-----Generated at Sat Sep 26 06:42:42 2026 by rpki-client