$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa File: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (raw, json) Hash identifier: 8qZp2o3sjMeXqeO1vpGOVj8gJzuo2yCC/8cZd8sX/ZA= Subject key identifier: 2A:6E:11:09:4F:D6:5B:15:52:F6:77:A1:40:F7:FB:D9:7C:ED:7D:C6 Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584DD4C05DE7D93F80D130542100 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 46309 IP address blocks: 198.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:5d:e7:d9:3f:80:d1:30:54:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=d980c2a4-77a6-4e32-9f74-bc88b2e85dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cd:63:ee:5a:c7:5e:75:c0:6d:79:dc:1a:8a: a9:fc:47:d9:45:a2:40:ff:a4:f3:bf:f2:5b:9b:74: 42:e9:8d:a0:40:ef:63:9c:1f:6a:be:75:59:77:37: 5a:f8:4a:56:09:4c:2d:3e:23:c9:1a:9d:b3:5d:cb: 85:0c:b4:dd:1a:20:3f:b6:57:93:d2:fd:9a:27:fe: d1:f2:c4:6d:86:54:1a:2b:17:3b:d3:07:23:41:55: 3c:d4:ac:43:d8:58:4b:72:25:b2:79:d9:3e:d4:67: d8:d7:36:52:bf:c1:2d:59:1a:88:88:5b:f9:1e:f9: 91:00:10:55:0d:66:92:b7:7e:13:69:e3:26:1a:24: 8c:c1:a9:4f:1a:c2:c1:98:de:8c:45:db:fb:65:6a: 19:27:c3:12:14:7a:0c:f3:32:9b:56:4e:e5:6e:9a: e6:7f:12:f1:9c:0d:65:4a:c6:f7:10:13:49:29:d5: 3e:14:fc:1b:22:9a:6a:39:f2:62:fe:1f:7c:53:21: 3b:ac:cc:f6:71:f0:bc:6a:92:f2:b8:2e:fc:f3:2b: 8b:20:0d:9c:3f:d8:1e:a7:31:3e:97:ea:6a:88:85: 50:8e:1b:d7:27:6a:dc:70:4e:bc:3d:b2:54:f4:74: 53:dd:6e:cc:1b:93:ca:48:64:a3:e4:a4:c5:74:60: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6E:11:09:4F:D6:5B:15:52:F6:77:A1:40:F7:FB:D9:7C:ED:7D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: 198.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3b:db:9f:9e:78:28:90:95:1c:9b:80:80:0d:a3:a2:5f:0a: e1:7a:80:26:a4:67:63:c9:8e:54:31:95:d3:63:9e:4d:b4:a3: 9f:f7:50:6d:39:62:3a:4a:e0:c1:6a:76:21:ec:01:35:51:ae: 5a:72:9c:29:16:b2:db:d9:68:e4:22:c3:aa:78:f5:1b:70:3f: 6f:e0:4d:73:56:90:4c:2f:cc:5e:cc:2a:87:be:b6:5a:77:25: 4c:39:bb:0f:b9:9e:51:38:d8:2e:ed:62:56:2f:32:c3:49:1e: 2c:87:3c:13:58:60:65:2d:20:0a:4a:63:e8:d9:25:a3:51:84: 86:0e:d6:5f:f0:d1:27:65:c1:13:85:af:09:ed:7f:69:b0:9b: b3:6a:52:80:99:b1:98:08:53:58:67:f9:ac:24:b1:de:80:4c: f4:38:cc:ef:74:b8:2e:03:0e:6d:f8:e5:cc:8c:07:45:67:a1: ae:22:11:9c:f6:8b:39:7d:11:dc:7f:9a:38:6b:b8:c1:e7:ba: 97:e4:71:c7:75:41:38:b9:9e:db:94:66:1d:83:45:8e:eb:c9: 79:d0:90:88:ef:a7:aa:4a:2a:02:7f:10:4d:1e:16:6c:d4:3c: 38:fa:c6:96:bc:9f:04:70:c2:34:c3:e7:5d:6c:64:e5:5c:e0: ab:02:8b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwF3n2T+A0TBUIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk ZDk4MGMyYTQtNzdhNi00ZTMyLTlmNzQtYmM4OGIyZTg1ZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s1j7lrHXnXAbXncGoqp/EfZRaJA/6Tzv/Jb m3RC6Y2gQO9jnB9qvnVZdzda+EpWCUwtPiPJGp2zXcuFDLTdGiA/tleT0v2aJ/7R 8sRthlQaKxc70wcjQVU81KxD2FhLciWyedk+1GfY1zZSv8EtWRqIiFv5HvmRABBV DWaSt34TaeMmGiSMwalPGsLBmN6MRdv7ZWoZJ8MSFHoM8zKbVk7lbprmfxLxnA1l Ssb3EBNJKdU+FPwbIppqOfJi/h98UyE7rMz2cfC8apLyuC788yuLIA2cP9gepzE+ l+pqiIVQjhvXJ2rccE68PbJU9HRT3W7MG5PKSGSj5KTFdGBD9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpuEQlP1lsVUvZ3oUD3+9l87X3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvMzUyNzI1MTItNzdmZS0z N2Y3LWEyZmYtYmQ4OWQ1MjRhZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4725+eeCiQlRybgIANo6JfCuF6gCakZ2PJjlQxldNjnk20o5/3UG05 YjpK4MFqdiHsATVRrlpynCkWstvZaOQiw6p49RtwP2/gTXNWkEwvzF7MKoe+tlp3 JUw5uw+5nlE42C7tYlYvMsNJHiyHPBNYYGUtIApKY+jZJaNRhIYO1l/w0SdlwROF rwntf2mwm7NqUoCZsZgIU1hn+awksd6ATPQ4zO90uC4DDm345cyMB0Vnoa4iEZz2 izl9Edx/mjhruMHnupfkccd1QTi5ntuUZh2DRY7ryXnQkIjvp6pKKgJ/EE0eFmzU PDj6xpa8nwRwwjTD511sZOVc4KsCi80= -----END CERTIFICATE-----Generated at Wed Jun 10 04:01:31 2026 by rpki-client