$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa File: 2817e773-8303-342f-9a40-2e654502699d.roa (raw, json) Hash identifier: w7tB9q5g6N3k82jYHIbTiDL+B2/q8d5j/mGnAgYTqAc= Subject key identifier: FA:B0:B4:08:27:59:56:13:CB:AD:04:65:6D:90:72:97:8F:6C:16:C2 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2496C82D4C7D42B80D129A80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 3630 IP address blocks: 199.109.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c8:2d:4c:7d:42:b8:0d:12:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=f664aec7-5b91-4005-9108-3e1e09ad2757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:84:02:28:d0:11:78:9b:76:f1:77:e6:c9: 92:36:41:c8:f3:df:96:a8:0f:59:45:e9:29:5b:fb: 36:d8:98:25:01:05:ea:7f:fd:aa:ed:be:b6:c1:33: ce:09:e5:27:45:1e:79:f8:26:9a:8e:95:65:98:d6: ff:be:4b:21:d7:06:c2:ea:74:15:30:11:38:10:4d: 2f:61:ac:c2:7b:09:49:47:a6:23:f5:f8:71:ff:4f: fe:48:a3:26:05:2c:a4:ff:c5:6b:58:aa:4f:d2:31: c4:a3:ff:a8:25:93:db:b7:f2:e3:cf:95:7a:9f:f0: 5d:52:48:8a:3f:44:52:66:67:bf:1d:77:9f:7c:8c: d3:1a:1e:78:24:72:b0:c8:fe:82:8f:a9:1e:10:91: 46:40:75:98:25:d3:45:a8:94:cc:74:7b:d4:f5:71: e2:79:7e:e3:28:44:c3:ed:96:8e:4b:89:27:60:e6: 29:7b:66:ca:17:c1:76:3e:3c:c8:f0:12:f0:4f:d8: c6:f1:57:7b:04:64:1e:d7:9c:c1:18:a7:ee:81:b5: be:eb:cf:e5:cf:ce:a6:d2:72:aa:99:80:68:dd:a1: 0e:46:a6:bc:03:6d:64:8b:c5:13:05:53:85:9f:c5: 7e:a4:a9:1f:a3:2a:e1:0a:cb:2d:5b:d9:8a:a0:31: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B0:B4:08:27:59:56:13:CB:AD:04:65:6D:90:72:97:8F:6C:16:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f4:76:d8:5a:fb:b5:2e:73:79:ca:e7:13:43:2d:78:51:c3: 23:72:78:26:6a:cb:a4:fb:77:fd:1c:b3:31:54:47:b6:40:a5: bb:e4:46:04:fa:35:cb:01:70:9f:1d:2c:2a:b7:23:d3:f1:d9: 75:66:cb:a8:23:e8:75:a6:d8:94:91:48:83:26:90:c3:4d:d5: f5:53:aa:62:23:a2:29:07:06:24:6d:14:4b:28:0f:95:b4:91: e9:2b:d1:fc:96:84:d6:f2:98:31:b2:de:5b:61:6e:82:e9:31: 10:9c:30:bd:2c:d5:1d:8f:86:33:e5:1d:6f:4e:47:4a:39:d2: 3a:98:0d:90:5d:0b:5d:80:43:8b:84:81:97:f5:59:3d:5f:fd: cd:6f:e3:20:62:6c:aa:68:65:cd:63:f5:d1:ea:a1:76:4b:e6: af:f2:33:c4:74:0d:22:6f:97:3a:39:5f:93:e9:c9:57:0b:97: fb:be:35:80:74:1d:20:ea:1c:11:48:0b:fb:bc:c2:9c:0a:fa: 7b:ce:27:d7:78:78:ae:17:2d:ab:de:ca:4d:0d:95:20:2f:9a: 9b:82:72:2a:09:6a:c2:da:af:6c:7c:43:40:a8:e0:38:90:52: cb:c1:35:0e:0c:76:8c:f2:b9:d9:07:73:55:15:25:aa:d2:e2: 32:dc:64:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsgtTH1CuA0SmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjY2NGFlYzctNWI5MS00MDA1LTkxMDgtM2UxZTA5YWQyNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1eEAijQEXibdvF35smSNkHI89+WqA9ZRekp W/s22JglAQXqf/2q7b62wTPOCeUnRR55+CaajpVlmNb/vksh1wbC6nQVMBE4EE0v YazCewlJR6Yj9fhx/0/+SKMmBSyk/8VrWKpP0jHEo/+oJZPbt/Ljz5V6n/BdUkiK P0RSZme/HXeffIzTGh54JHKwyP6Cj6keEJFGQHWYJdNFqJTMdHvU9XHieX7jKETD 7ZaOS4knYOYpe2bKF8F2PjzI8BLwT9jG8Vd7BGQe15zBGKfugbW+68/lz86m0nKq mYBo3aEORqa8A21ki8UTBVOFn8V+pKkfoyrhCsstW9mKoDE32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqwtAgnWVYTy60EZW2QcpePbBbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjgxN2U3NzMtODMwMy0z NDJmLTlhNDAtMmU2NTQ1MDI2OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG30dtha+7Uuc3nK5xNDLXhRwyNyeCZqy6T7d/0cszFUR7ZApbvkRgT6 NcsBcJ8dLCq3I9Px2XVmy6gj6HWm2JSRSIMmkMNN1fVTqmIjoikHBiRtFEsoD5W0 kekr0fyWhNbymDGy3lthboLpMRCcML0s1R2PhjPlHW9OR0o50jqYDZBdC12AQ4uE gZf1WT1f/c1v4yBibKpoZc1j9dHqoXZL5q/yM8R0DSJvlzo5X5PpyVcLl/u+NYB0 HSDqHBFIC/u8wpwK+nvOJ9d4eK4XLaveyk0NlSAvmpuCcioJasLar2x8Q0Co4DiQ UsvBNQ4MdozyudkHc1UVJarS4jLcZLM= -----END CERTIFICATE-----Generated at Wed Oct 8 17:28:10 2025 by rpki-client