$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa File: 256f5a60-acd7-370b-a839-372a2dc4749d.roa (raw, json) Hash identifier: 8XEv9Tq6ghO9XdynvnJfDeyLPR6v4cEU3RL60ZtTA3Y= Subject key identifier: 96:97:37:19:78:BC:91:2F:7E:7A:E0:2F:3A:B6:0D:4A:00:3D:5C:D4 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EC0A762EA558E153F3A1F3660 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 3756 IP address blocks: 199.109.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:62:ea:55:8e:15:3f:3a:1f:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=7f04dddc-3465-4aa0-82a9-5afdbdd7e3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:49:03:58:a5:06:88:f1:5a:6f:13:83:43: 9c:2e:c6:78:37:43:9a:b2:20:1e:c0:6d:32:a5:d3: ce:f6:17:3a:80:62:57:c3:00:2b:f3:1c:24:3c:1c: 58:ca:62:ee:0c:ae:41:bc:cb:9e:a4:31:14:c4:d6: f6:d5:bd:cb:20:41:73:fc:9c:73:69:b9:fe:5f:08: 71:4e:93:05:c5:8b:57:de:12:2a:a0:8d:0b:55:ac: 6f:22:38:a4:3d:fa:5e:b9:1f:4d:b4:2a:62:c5:12: 65:90:a3:b2:b3:27:a8:e0:eb:0f:ab:81:76:f1:ed: 7b:3e:d0:12:cc:c0:06:96:f8:b8:37:a7:d8:0c:f4: c3:21:56:1d:0e:36:5d:19:40:86:84:8e:fd:23:03: 6f:d5:48:3f:7f:6a:40:77:2e:cc:19:82:6f:13:e6: 34:ad:c2:bf:3f:e9:02:43:e9:f2:65:dd:e1:2a:0c: a9:12:c9:fc:0c:09:27:69:f4:41:4a:bc:7a:6a:fc: e4:a9:e5:68:7a:66:69:12:76:88:54:34:26:3b:da: 42:3a:d0:f3:06:d5:1d:48:39:29:58:3d:2e:89:1a: ed:58:d7:30:51:d1:16:94:d5:b1:dd:66:57:27:d5: 53:b8:49:94:53:a4:87:c9:7c:9d:31:77:de:19:eb: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:97:37:19:78:BC:91:2F:7E:7A:E0:2F:3A:B6:0D:4A:00:3D:5C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c9:c4:c7:2b:f4:9d:23:15:dd:94:51:24:83:58:58:df:1d: d0:ec:b1:dd:08:24:d9:07:04:0f:97:c8:19:b0:4e:be:b5:79: 12:20:0a:23:c4:78:8c:5d:eb:fd:2a:15:ca:c0:a3:d7:85:ca: c8:03:cb:9f:89:3c:ab:3c:b2:33:92:1c:c9:9d:2d:f4:2c:72: ef:90:ae:0c:f7:d8:6c:f8:f5:89:df:d2:13:fe:27:c0:5f:64: bc:94:2f:43:90:b5:f3:58:40:79:35:a3:e1:f6:f1:3b:f1:e5: 91:5a:24:44:21:95:09:57:44:53:8f:0e:bb:6e:27:6d:71:95: 5e:2e:b4:1f:b1:0d:51:6f:22:32:75:6f:d6:f0:60:73:91:c6: e3:f2:50:65:1f:30:7b:4c:48:77:5d:23:25:6e:fd:80:7e:04: 0a:f3:89:cf:c5:b5:d0:10:56:8d:db:e7:b0:49:8b:3a:a9:b3: 3c:b5:c8:34:71:bf:ad:fa:b0:ab:79:87:fe:0f:b3:8d:cd:b3: 1a:c5:d6:cc:7f:dd:48:50:6d:03:d9:2b:8f:24:52:a4:0d:98: 33:21:74:06:0c:2f:3e:96:5a:47:f0:f0:e4:1f:8f:f7:62:05: 1c:90:66:06:72:9d:fd:ce:36:51:86:49:74:7e:e6:69:60:6d: 5b:01:b9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap2LqVY4VPzofNmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk N2YwNGRkZGMtMzQ2NS00YWEwLTgyYTktNWFmZGJkZDdlM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtBJA1ilBojxWm8Tg0OcLsZ4N0OasiAewG0y pdPO9hc6gGJXwwAr8xwkPBxYymLuDK5BvMuepDEUxNb21b3LIEFz/Jxzabn+Xwhx TpMFxYtX3hIqoI0LVaxvIjikPfpeuR9NtCpixRJlkKOysyeo4OsPq4F28e17PtAS zMAGlvi4N6fYDPTDIVYdDjZdGUCGhI79IwNv1Ug/f2pAdy7MGYJvE+Y0rcK/P+kC Q+nyZd3hKgypEsn8DAknafRBSrx6avzkqeVoemZpEnaIVDQmO9pCOtDzBtUdSDkp WD0uiRrtWNcwUdEWlNWx3WZXJ9VTuEmUU6SHyXydMXfeGesMNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaXNxl4vJEvfnrgLzq2DUoAPVzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjU2ZjVhNjAtYWNkNy0z NzBiLWE4MzktMzcyYTJkYzQ3NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx23gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPJxMcr9J0jFd2UUSSDWFjfHdDssd0IJNkHBA+XyBmwTr61eRIgCiPE eIxd6/0qFcrAo9eFysgDy5+JPKs8sjOSHMmdLfQscu+Qrgz32Gz49Ynf0hP+J8Bf ZLyUL0OQtfNYQHk1o+H28Tvx5ZFaJEQhlQlXRFOPDrtuJ21xlV4utB+xDVFvIjJ1 b9bwYHORxuPyUGUfMHtMSHddIyVu/YB+BArzic/FtdAQVo3b57BJizqpszy1yDRx v636sKt5h/4Ps43NsxrF1sx/3UhQbQPZK48kUqQNmDMhdAYMLz6WWkfw8OQfj/di BRyQZgZynf3ONlGGSXR+5mlgbVsBufk= -----END CERTIFICATE-----Generated at Mon Aug 10 09:57:02 2026 by rpki-client