$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa File: 35272512-77fe-37f7-a2ff-bd89d524ad28.roa (raw, json) Hash identifier: 4LpoSy6XvicIRtqkUfmRyPlsFNE5ZXfnUa5dKJT5Eds= Subject key identifier: 58:C3:AC:F7:AF:58:26:30:A3:F0:66:C7:4E:15:D8:46:CD:7E:10:26 Certificate issuer: /CN=643177f7-12a4-4138-aa72-1b5beaada59f Certificate serial: 010D0C9F4328584CF4221BFEF224796D9C797540 Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 46309 IP address blocks: 198.99.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:1b:fe:f2:24:79:6d:9c:79:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=b6af3e34-0e73-4cb9-8fa9-e470b422f8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:be:66:a9:bf:9f:8c:39:2a:dd:4f:0e:16: 99:9e:97:15:9d:f2:d0:f8:d2:bd:14:2b:54:c9:56: 80:7a:13:4b:f0:ae:e5:a8:06:ed:70:19:f2:26:7b: 88:a1:fe:a8:45:45:37:89:6d:ed:d7:08:ff:0a:9a: e2:bb:73:eb:63:63:12:fc:32:14:be:39:b0:a1:71: 1b:78:17:bc:af:d9:ec:cc:ae:59:b3:35:d3:51:38: 06:4e:e0:7c:9c:59:c1:90:c4:f3:73:b3:cb:3b:f6: 74:20:69:f4:1b:f6:a5:72:f1:b1:0d:7c:7e:1b:4c: f0:ce:53:8b:d9:f1:9a:91:ab:99:0e:1d:fa:6e:f6: d2:35:9a:32:23:5b:a8:c7:b6:d3:61:31:b3:6e:21: 30:26:20:97:70:3d:38:f1:6a:e9:28:db:6f:95:9d: 9a:66:09:0a:28:08:2a:38:8c:b0:00:0b:02:49:66: 28:9d:4b:13:cd:f0:38:be:cb:82:65:92:d7:ba:19: b7:1d:f3:8c:6f:c3:97:ab:61:fd:72:ff:a1:2e:09: b4:3b:af:1c:a4:9f:b6:61:3c:b0:45:aa:e0:a8:13: 23:40:d7:df:f2:0e:b7:f0:ca:1e:19:75:ba:e4:11: 40:f2:7a:9d:1e:3d:8f:8b:dd:44:6c:2d:73:a6:e2: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C3:AC:F7:AF:58:26:30:A3:F0:66:C7:4E:15:D8:46:CD:7E:10:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/35272512-77fe-37f7-a2ff-bd89d524ad28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl X509v3 Authority Key Identifier: keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer sbgp-ipAddrBlock: critical IPv4: 198.99.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:26:c7:ef:ea:24:d0:16:18:cc:0e:04:77:45:d7:e5:e5:57: 31:f2:cb:d3:cc:b4:82:e5:3e:fc:fb:8e:37:34:73:e9:a9:18: d3:c7:08:15:55:6e:91:f6:02:36:8f:00:6d:29:f9:5e:67:02: 21:58:73:ab:f6:d8:fe:ea:91:eb:0f:e2:f7:f5:d5:58:8e:c0: 42:15:4a:c9:d1:32:7c:79:b4:cf:96:db:52:55:ed:e7:fc:f8: b8:45:b9:07:31:fb:09:36:fd:0f:7c:e0:dc:05:61:ec:16:40: 08:10:f9:79:9b:b5:35:bf:6c:47:f6:8e:54:1e:83:83:ea:bf: fd:2d:0a:d7:eb:78:8e:0e:de:92:ba:8c:b4:c0:ce:2d:53:b2: 90:cc:30:0d:0c:8e:df:80:0e:54:ed:b3:44:54:75:cc:23:e5: 79:71:de:e8:ea:00:50:f5:f4:74:be:3f:d6:08:f8:38:4d:0c: 23:11:35:b4:d6:18:1c:b9:03:74:0c:0b:78:b2:ff:b6:db:60: 58:22:38:8c:11:e7:39:25:8b:05:ed:5c:0f:1f:30:7a:44:31: 26:09:f9:ba:c0:11:66:f2:02:89:68:da:c3:47:c3:4f:09:d8: e2:09:ae:cc:b0:ca:63:a2:40:f6:e3:c6:f0:76:bc:58:d8:e1: d7:e4:0f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0Ihv+8iR5bZx5dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh NTlmMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk YjZhZjNlMzQtMGU3My00Y2I5LThmYTktZTQ3MGI0MjJmOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnW+Zqm/n4w5Kt1PDhaZnpcVnfLQ+NK9FCtU yVaAehNL8K7lqAbtcBnyJnuIof6oRUU3iW3t1wj/Cpriu3PrY2MS/DIUvjmwoXEb eBe8r9nszK5ZszXTUTgGTuB8nFnBkMTzc7PLO/Z0IGn0G/alcvGxDXx+G0zwzlOL 2fGakauZDh36bvbSNZoyI1uox7bTYTGzbiEwJiCXcD048WrpKNtvlZ2aZgkKKAgq OIywAAsCSWYonUsTzfA4vsuCZZLXuhm3HfOMb8OXq2H9cv+hLgm0O68cpJ+2YTyw RargqBMjQNff8g638MoeGXW65BFA8nqdHj2Pi91EbC1zpuJMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjDrPevWCYwo/Bmx04V2EbNfhAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvMzUyNzI1MTItNzdmZS0z N2Y3LWEyZmYtYmQ4OWQ1MjRhZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi ZWFhZGE1OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxmOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAmx+/qJNAWGMwOBHdF1+XlVzHyy9PMtILlPvz7jjc0c+mpGNPHCBVV bpH2AjaPAG0p+V5nAiFYc6v22P7qkesP4vf11ViOwEIVSsnRMnx5tM+W21JV7ef8 +LhFuQcx+wk2/Q984NwFYewWQAgQ+XmbtTW/bEf2jlQeg4Pqv/0tCtfreI4O3pK6 jLTAzi1TspDMMA0Mjt+ADlTts0RUdcwj5Xlx3ujqAFD19HS+P9YI+DhNDCMRNbTW GBy5A3QMC3iy/7bbYFgiOIwR5zkliwXtXA8fMHpEMSYJ+brAEWbyAolo2sNHw08J 2OIJrsywymOiQPbjxvB2vFjY4dfkD+Q= -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:48 2026 by rpki-client