$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa File: 007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa (raw, json) Hash identifier: w8ImOm4fAo/1wXu8K5XBxN0tVywQLz7AjfURcfrbKyM= Subject key identifier: 62:68:F0:A3:09:74:35:41:00:DB:D7:DE:2B:CD:03:BB:81:BD:ED:B8 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2496D00AA0D1990CEF2E07BC Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 3629 IP address blocks: 199.109.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d0:0a:a0:d1:99:0c:ef:2e:07:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=b571b425-7bca-46bb-9f62-7537ee654d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:53:93:9f:79:81:cd:aa:eb:68:71:1c:d3: 59:ac:b2:c7:3c:ae:5e:cb:37:e0:b5:1c:2b:c6:1e: 4c:11:b4:cb:14:83:d9:07:7f:38:0b:54:f8:93:af: 64:52:65:8e:d0:c0:43:0b:01:1b:67:c0:50:98:36: f5:f9:00:0a:5b:43:03:eb:30:d1:55:13:fd:3c:5f: 56:e5:56:e3:62:a1:07:be:48:09:77:aa:de:76:c4: 79:a7:cd:5e:14:10:6d:83:4b:57:4e:d0:c7:3a:27: 34:1a:05:ab:61:5c:d8:86:26:d3:cc:36:58:60:7f: 3f:aa:ac:30:68:31:1a:db:df:5e:a1:cc:ec:bd:97: a7:00:ee:30:71:d5:1a:51:ac:aa:f9:bf:c3:8e:c2: f5:87:53:6d:ba:f1:22:3f:be:01:c9:e8:33:4b:1e: 1b:bb:db:35:61:0e:21:62:92:d0:48:da:28:18:40: d5:9c:92:18:18:4f:33:80:57:af:0c:32:47:2f:12: 6f:f9:0e:50:2f:77:6f:97:4e:7d:f8:a4:90:64:34: 03:66:01:bf:41:86:ab:45:9b:3a:7c:b0:bf:a2:4c: 79:dc:84:d3:69:c2:2a:23:0d:4d:a4:b0:cf:4d:52: 7a:07:9f:b3:da:2d:b7:08:85:3c:b9:08:b2:05:63: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:F0:A3:09:74:35:41:00:DB:D7:DE:2B:CD:03:BB:81:BD:ED:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:19:af:30:1d:7d:14:31:74:03:44:c2:ce:06:c5:22:d0:4b: 10:cf:5d:f6:90:10:1a:55:57:78:81:a3:09:2f:1b:17:36:9f: 46:7b:47:d2:97:ba:d6:d5:ec:06:78:19:98:c2:7c:6a:9c:92: 99:7c:ac:9b:b9:10:75:90:d8:49:01:f9:36:fe:dd:65:09:a1: b8:4e:36:df:46:be:ed:ac:34:02:4e:09:72:6f:88:10:22:69: 5e:97:f5:af:0b:f4:9a:61:2e:75:e8:36:1b:32:b7:58:e2:d5: 9e:be:05:b9:7f:16:7d:80:bf:ea:5c:c4:d8:4d:af:4c:f7:e0: 2e:5b:68:5f:7c:cf:3d:26:3d:22:96:5d:cb:08:20:97:42:6f: 77:ca:92:bd:83:a1:aa:17:6f:5d:c1:c0:80:eb:da:ad:76:11: b4:7b:6e:68:17:b3:4c:a2:42:88:d9:06:ea:3d:97:f5:1b:90: 65:e3:46:2f:3e:b6:2b:6d:4d:cf:f1:30:24:bc:77:25:16:a9: 10:5e:64:97:0a:72:9a:e8:18:9a:d5:1a:fc:51:50:a8:46:29: 4b:f6:b0:3b:b6:73:10:0a:8d:07:9a:4c:25:da:c9:3e:eb:6a: 7f:a3:23:a0:5c:7b:00:cb:13:b4:60:d7:35:e8:5e:23:b8:3e: c9:ae:0e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltAKoNGZDO8uB7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YjU3MWI0MjUtN2JjYS00NmJiLTlmNjItNzUzN2VlNjU0ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi35Tk595gc2q62hxHNNZrLLHPK5eyzfgtRwr xh5MEbTLFIPZB384C1T4k69kUmWO0MBDCwEbZ8BQmDb1+QAKW0MD6zDRVRP9PF9W 5VbjYqEHvkgJd6redsR5p81eFBBtg0tXTtDHOic0GgWrYVzYhibTzDZYYH8/qqww aDEa299eoczsvZenAO4wcdUaUayq+b/DjsL1h1NtuvEiP74ByegzSx4bu9s1YQ4h YpLQSNooGEDVnJIYGE8zgFevDDJHLxJv+Q5QL3dvl059+KSQZDQDZgG/QYarRZs6 fLC/okx53ITTacIqIw1NpLDPTVJ6B5+z2i23CIU8uQiyBWPmMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJo8KMJdDVBANvX3ivNA7uBve24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMDA3ZGM5ZjMtNDU3NS0z YTRmLTk3ODUtOWU3YTg3MDgyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx21QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMZrzAdfRQxdANEws4GxSLQSxDPXfaQEBpVV3iBowkvGxc2n0Z7R9KX utbV7AZ4GZjCfGqckpl8rJu5EHWQ2EkB+Tb+3WUJobhONt9Gvu2sNAJOCXJviBAi aV6X9a8L9JphLnXoNhsyt1ji1Z6+Bbl/Fn2Av+pcxNhNr0z34C5baF98zz0mPSKW XcsIIJdCb3fKkr2DoaoXb13BwIDr2q12EbR7bmgXs0yiQojZBuo9l/UbkGXjRi8+ tittTc/xMCS8dyUWqRBeZJcKcproGJrVGvxRUKhGKUv2sDu2cxAKjQeaTCXayT7r an+jI6BcewDLE7Rg1zXoXiO4PsmuDsc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:36:01 2025 by rpki-client