$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa File: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (raw, json) Hash identifier: JQsRayccb1yHf8/3aGJ4AN9dUyw7QBZmVZbpgQVQ3Po= Subject key identifier: 6E:89:81:2A:38:41:4D:3E:B4:99:B0:A4:1F:07:A8:65:C4:E4:47:1F Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584B34B17259B2F686213B4B2E00 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa Signing time: Mon 15 Sep 2025 19:27:16 +0000 ROA not before: Mon 15 Sep 2025 19:27:16 +0000 ROA not after: Sun 14 Dec 2025 20:27:16 +0000 asID: 46309 IP address blocks: 198.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:b1:72:59:b2:f6:86:21:3b:4b:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Sep 15 19:27:16 2025 GMT Not After : Dec 14 20:27:16 2025 GMT Subject: CN=2efd455c-8474-4a61-a6bc-c3bbaf5e76da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:5f:7f:6c:48:88:34:f3:fb:46:d5:52:f4: aa:08:8a:1e:08:7d:70:3c:b9:1b:8c:77:ba:80:b8: 60:d0:8e:57:ed:81:24:28:27:06:51:95:72:f3:db: a0:5b:b9:dc:3a:98:58:99:c0:bb:1a:5a:cc:3d:ff: e6:ee:ac:ed:23:f7:be:86:9a:e2:c9:db:4d:96:e0: e5:c7:e3:42:97:75:5d:64:ae:23:9f:ca:01:17:39: e8:12:29:3e:f4:18:fe:0d:46:28:da:e5:d5:d6:df: e9:9a:e3:26:11:01:1d:42:93:12:b0:2b:af:f8:2f: fc:d8:3d:b4:58:ea:e4:a2:89:32:06:4c:0b:e6:01: 39:09:e3:87:1d:d4:31:6f:27:5e:e5:a1:30:6f:61: 70:fc:72:97:cb:4e:a9:6f:65:71:76:80:8b:f5:10: 01:b2:c1:04:21:f9:5a:b9:2d:50:a0:57:fb:dc:29: 5f:8e:8a:b7:4f:c7:43:9a:89:1d:dd:b4:63:0b:f2: 44:8c:fd:32:10:e5:c8:13:71:1c:71:a3:21:ec:97: 56:6f:cf:e0:b4:f0:45:fd:ad:c7:dd:ec:1e:20:dd: b1:31:4b:b5:eb:cb:74:7d:e7:a7:8b:da:e4:07:00: 07:0e:39:4c:fe:44:0a:18:0d:b1:f9:57:d2:c5:b9: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:81:2A:38:41:4D:3E:B4:99:B0:A4:1F:07:A8:65:C4:E4:47:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: 198.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:60:60:34:84:4a:52:a6:8a:85:37:14:35:26:99:89:10: 8d:ae:4b:c2:e1:9e:1e:fa:18:fb:e4:8b:00:e5:97:4e:0c:90: a2:33:68:c7:f9:bb:eb:e5:23:b0:9d:05:83:bb:f8:d4:7c:c7: aa:f0:c9:a9:a7:b7:9d:80:ba:ed:1a:d3:69:1c:f7:d2:4b:46: 10:bd:bb:ca:74:78:b9:bd:3d:dc:ce:0b:7e:a5:55:72:1f:0e: 7b:ca:b0:ba:86:50:7b:a9:1c:df:96:e3:5a:ee:21:d9:01:67: 05:08:f6:35:56:77:c8:4c:39:e2:5f:d1:01:d7:b2:fa:36:c9: 5b:c2:ff:e0:02:cb:33:af:2c:a0:ec:51:37:44:df:07:5f:66: 4c:ee:a2:9f:e4:cf:8b:99:63:e5:a8:b3:77:fa:c9:b9:9c:73: c7:c3:e6:f1:4e:c0:76:4f:45:b7:fa:13:1b:fb:8f:0a:a9:74: d4:ad:f3:96:50:22:f0:e4:4c:74:32:19:83:a8:72:61:d3:7c: 23:22:43:84:93:d4:54:c2:eb:9d:15:6f:59:66:8b:bb:08:36: 6b:e0:6f:c9:ab:30:75:9b:11:9a:e2:d5:1b:54:66:5c:56:b7: 6d:70:ff:71:ed:7e:b2:d6:0f:57:c7:e9:1d:cb:a3:83:0c:cb: d7:79:92:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0sXJZsvaGITtLLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI1MDkxNTE5MjcxNloXDTI1MTIxNDIwMjcxNlowLzEtMCsGA1UEAxMk MmVmZDQ1NWMtODQ3NC00YTYxLWE2YmMtYzNiYmFmNWU3NmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Nff2xIiDTz+0bVUvSqCIoeCH1wPLkbjHe6 gLhg0I5X7YEkKCcGUZVy89ugW7ncOphYmcC7GlrMPf/m7qztI/e+hpriydtNluDl x+NCl3VdZK4jn8oBFznoEik+9Bj+DUYo2uXV1t/pmuMmEQEdQpMSsCuv+C/82D20 WOrkookyBkwL5gE5CeOHHdQxbyde5aEwb2Fw/HKXy06pb2VxdoCL9RABssEEIfla uS1QoFf73Clfjoq3T8dDmokd3bRjC/JEjP0yEOXIE3EccaMh7JdWb8/gtPBF/a3H 3eweIN2xMUu168t0feeni9rkBwAHDjlM/kQKGA2x+VfSxblt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6JgSo4QU0+tJmwpB8HqGXE5EcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvMzUyNzI1MTItNzdmZS0z N2Y3LWEyZmYtYmQ4OWQ1MjRhZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNHYGA0hEpSpoqFNxQ1JpmJEI2uS8Lhnh76GPvkiwDll04MkKIzaMf5 u+vlI7CdBYO7+NR8x6rwyamnt52Auu0a02kc99JLRhC9u8p0eLm9PdzOC36lVXIf DnvKsLqGUHupHN+W41ruIdkBZwUI9jVWd8hMOeJf0QHXsvo2yVvC/+ACyzOvLKDs UTdE3wdfZkzuop/kz4uZY+Wos3f6ybmcc8fD5vFOwHZPRbf6Exv7jwqpdNSt85ZQ IvDkTHQyGYOocmHTfCMiQ4ST1FTC650Vb1lmi7sINmvgb8mrMHWbEZri1RtUZlxW t21w/3HtfrLWD1fH6R3Lo4MMy9d5kvg= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:38 2025 by rpki-client