$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa File: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (raw, json) Hash identifier: UbnHaDJYG1Nx+8egAe/nia4a/fB6+OU1PDK/3abyg4w= Subject key identifier: 9D:2F:8C:A2:17:EF:E7:25:C8:60:B3:62:43:D1:53:AE:6C:F8:59:6A Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584EA7881FF0091D6D1C805ECE00 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46309 IP address blocks: 198.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:1f:f0:09:1d:6d:1c:80:5e:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=837273a5-c4c2-41ab-b0fd-1ce347569e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:85:81:f0:ce:ff:be:25:66:8a:cc:7a:6c: 21:d4:1d:22:89:d6:83:41:ac:67:42:21:f1:62:0b: 6c:5c:56:30:7c:10:d2:e9:c1:5a:3a:ce:3a:94:8b: cc:a8:4a:e0:fe:16:69:d5:e7:50:f1:32:df:15:c8: cc:5c:4d:f2:7a:36:e3:06:10:2b:5e:cd:94:8a:0b: c5:b1:67:ce:d7:63:78:c9:55:e2:9b:4f:2b:14:02: 3d:3a:0e:20:6a:52:69:b6:83:ec:27:5e:a7:34:34: ce:7d:f0:4c:50:1b:de:80:0f:30:d7:3f:04:4b:48: dc:ae:20:eb:76:66:5c:2b:20:b3:2e:e2:29:11:a0: 79:33:54:08:e8:2c:c4:27:f9:9a:ad:b6:77:ce:fa: 56:7b:0f:ca:eb:ff:17:38:79:cb:e4:05:86:e3:92: b7:c4:bc:ce:0b:d9:18:1a:d2:bf:07:b1:ce:87:5d: e9:73:6d:46:36:f9:72:03:89:4e:65:74:1b:34:1c: 62:e4:20:f9:c1:4c:77:77:57:d1:8a:b0:e9:7c:0d: 0d:dc:4b:36:f7:f0:26:97:62:ed:7f:11:a4:6e:44: c5:66:76:95:e1:4d:51:5c:79:17:93:3b:72:49:80: b0:08:c6:21:4e:ce:8a:ea:d4:08:cc:09:a1:40:23: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:8C:A2:17:EF:E7:25:C8:60:B3:62:43:D1:53:AE:6C:F8:59:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: 198.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:29:0e:07:bc:7e:d2:88:2c:98:c2:d3:8b:7a:25:ad:d7:34: 64:1e:b1:5a:a1:cc:2f:96:4a:36:64:eb:83:91:66:fa:56:b3: 7a:fd:7d:b2:ed:47:8a:48:71:a2:cd:1f:7e:03:72:83:5e:cd: fe:9b:e1:0a:8b:7e:e6:db:a0:28:7a:a2:99:ab:86:62:74:b1: bf:0e:f0:e9:11:55:4c:2c:31:3a:4f:4b:2d:d2:34:be:f7:bf: b4:9e:e3:62:fd:23:5d:05:9c:6b:12:bf:16:61:b9:b3:e9:21: 4a:e3:e8:5c:27:b0:20:ed:1b:99:f4:2d:72:8f:0b:fb:34:27: e7:3c:34:64:5c:57:e5:08:f8:41:be:26:88:55:aa:1b:a6:4d: 74:4b:cf:dd:94:3e:ff:5c:70:17:15:0e:59:bd:17:d5:ce:ea: 68:ea:f4:ec:06:2a:07:94:70:20:83:ad:17:db:a8:2e:7c:5a: 19:f4:76:d0:ee:90:9e:93:96:34:44:38:a0:78:b2:71:09:10: b0:d8:73:d0:8c:ea:65:e3:e8:1c:2f:ee:29:20:a7:f7:44:8e: 53:51:4f:35:5e:70:fd:01:6b:b5:04:e0:d8:9c:c5:6c:a6:a9: da:e4:1a:65:1c:60:7e:6c:de:2b:17:aa:50:26:3a:93:a3:e7: 43:d9:f4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niB/wCR1tHIBezgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODM3MjczYTUtYzRjMi00MWFiLWIwZmQtMWNlMzQ3NTY5ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscSFgfDO/74lZorMemwh1B0iidaDQaxnQiHx YgtsXFYwfBDS6cFaOs46lIvMqErg/hZp1edQ8TLfFcjMXE3yejbjBhArXs2UigvF sWfO12N4yVXim08rFAI9Og4galJptoPsJ16nNDTOffBMUBvegA8w1z8ES0jcriDr dmZcKyCzLuIpEaB5M1QI6CzEJ/marbZ3zvpWew/K6/8XOHnL5AWG45K3xLzOC9kY GtK/B7HOh13pc21GNvlyA4lOZXQbNBxi5CD5wUx3d1fRirDpfA0N3Es29/Aml2Lt fxGkbkTFZnaV4U1RXHkXkztySYCwCMYhTs6K6tQIzAmhQCOZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0vjKIX7+clyGCzYkPRU65s+FlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvMzUyNzI1MTItNzdmZS0z N2Y3LWEyZmYtYmQ4OWQ1MjRhZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcpDge8ftKILJjC04t6Ja3XNGQesVqhzC+WSjZk64ORZvpWs3r9fbLt R4pIcaLNH34DcoNezf6b4QqLfubboCh6opmrhmJ0sb8O8OkRVUwsMTpPSy3SNL73 v7Se42L9I10FnGsSvxZhubPpIUrj6FwnsCDtG5n0LXKPC/s0J+c8NGRcV+UI+EG+ JohVqhumTXRLz92UPv9ccBcVDlm9F9XO6mjq9OwGKgeUcCCDrRfbqC58Whn0dtDu kJ6TljREOKB4snEJELDYc9CM6mXj6Bwv7ikgp/dEjlNRTzVecP0Ba7UE4NicxWym qdrkGmUcYH5s3isXqlAmOpOj50PZ9Hw= -----END CERTIFICATE-----Generated at Wed Jul 29 13:58:58 2026 by rpki-client