$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa File: 3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa (raw, json) Hash identifier: QhyKaBJhbRPnp116LPviV5xzW390C1bYWzeMBGW3H9U= Subject key identifier: ED:C4:DC:C0:64:4B:95:4E:3E:07:37:8E:E9:CB:EE:97:D3:13:D1:C3 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2496D034EAF1E6F901B0F6B0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 3630 IP address blocks: 199.109.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d0:34:ea:f1:e6:f9:01:b0:f6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=f0c248da-169c-4f02-8a5c-af91ee4799e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:3c:c1:0a:08:7f:38:21:b3:ca:1b:d4:39: 6d:84:c3:61:63:58:ec:5c:3f:e3:27:11:0a:b6:8e: 85:94:eb:1a:bc:f2:8e:1c:a9:73:e4:cc:ff:a8:58: 8a:a5:db:06:f3:1a:76:46:9b:86:30:07:6e:e1:ec: 1f:d6:c0:68:d2:14:81:6f:79:de:15:91:7c:90:0b: 24:f0:f5:75:82:a2:42:e9:a7:31:48:4b:13:af:f3: 8c:37:e1:42:71:de:99:c3:3d:09:55:4f:8c:ff:41: eb:5d:a3:5f:63:b2:2f:4b:72:4e:87:21:33:c9:80: f6:d9:f5:cc:56:d8:1a:55:b8:38:5c:f3:9c:c3:53: e9:47:be:1b:fc:d1:65:99:f1:d8:a2:03:af:7f:83: 35:24:20:88:ef:59:f9:86:ed:09:0e:8c:af:b4:09: b8:d8:62:02:d4:47:d6:a6:cc:ac:04:12:f1:d0:a0: 20:53:95:b5:3d:2e:b3:04:2b:ca:bd:f7:b4:85:33: 82:e4:93:3c:9a:53:1e:71:da:38:d9:df:89:0f:8c: 49:08:6e:f5:10:90:d3:57:47:11:79:ec:73:90:f7: 8a:7f:0e:99:fe:6d:86:03:36:d4:8c:d6:76:52:fb: 35:27:86:80:3b:95:30:0a:96:8f:aa:b3:4a:28:07: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C4:DC:C0:64:4B:95:4E:3E:07:37:8E:E9:CB:EE:97:D3:13:D1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:03:7c:90:28:16:ce:7f:26:43:2d:7c:ad:58:e4:ac:5d:91: 87:8d:e7:54:b4:cb:03:3c:d6:93:38:c2:ce:22:09:b7:a3:25: 1d:df:79:71:cc:c4:e3:a9:1f:f7:b6:42:3a:60:eb:cc:03:c4: ae:d3:50:f8:11:cd:a5:08:de:27:aa:e5:1f:c7:9e:a3:b0:2c: 4b:c6:bb:3a:68:ae:e0:2c:67:e2:cd:8c:1b:02:ca:64:4d:5b: e1:a1:5e:5a:b3:69:bd:0f:af:25:1e:2c:83:c4:24:20:fe:4a: 35:ad:66:b8:10:15:5f:e4:12:f1:c5:2a:e0:a0:df:c1:ef:b4: d2:7f:08:c8:a1:d2:5d:89:8a:f8:73:7a:07:b7:28:5e:bf:5a: b2:2d:0f:0d:56:a8:9d:3f:ba:16:d4:6d:8c:13:60:d2:86:ab: 66:98:fd:1a:dd:58:29:3b:13:29:a4:84:14:f4:0f:53:43:8a: 8a:45:95:8a:35:e9:f2:25:49:66:14:a2:d0:a9:d1:31:f7:c5: ea:e9:72:58:a7:88:66:8d:93:3b:2f:98:89:91:a5:c5:2e:d4: 24:32:4a:2e:1a:e6:9c:30:88:dd:3b:35:af:39:90:af:c9:b6: 96:45:c8:ab:c8:7b:9b:ee:19:43:31:09:86:4d:2f:d8:ba:97: f8:c1:e9:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltA06vHm+QGw9rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjBjMjQ4ZGEtMTY5Yy00ZjAyLThhNWMtYWY5MWVlNDc5OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Y8wQoIfzghs8ob1DlthMNhY1jsXD/jJxEK to6FlOsavPKOHKlz5Mz/qFiKpdsG8xp2RpuGMAdu4ewf1sBo0hSBb3neFZF8kAsk 8PV1gqJC6acxSEsTr/OMN+FCcd6Zwz0JVU+M/0HrXaNfY7IvS3JOhyEzyYD22fXM VtgaVbg4XPOcw1PpR74b/NFlmfHYogOvf4M1JCCI71n5hu0JDoyvtAm42GIC1EfW psysBBLx0KAgU5W1PS6zBCvKvfe0hTOC5JM8mlMecdo42d+JD4xJCG71EJDTV0cR eexzkPeKfw6Z/m2GAzbUjNZ2Uvs1J4aAO5UwCpaPqrNKKAeGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3E3MBkS5VOPgc3junL7pfTE9HDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvM2FhZWRmMDktN2QyZS0z ZTNiLThiYWEtMWE2ZmM0MGRmMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoDfJAoFs5/JkMtfK1Y5KxdkYeN51S0ywM81pM4ws4iCbejJR3feXHM xOOpH/e2Qjpg68wDxK7TUPgRzaUI3ieq5R/HnqOwLEvGuzporuAsZ+LNjBsCymRN W+GhXlqzab0PryUeLIPEJCD+SjWtZrgQFV/kEvHFKuCg38HvtNJ/CMih0l2Jivhz ege3KF6/WrItDw1WqJ0/uhbUbYwTYNKGq2aY/RrdWCk7EymkhBT0D1NDiopFlYo1 6fIlSWYUotCp0TH3xerpcliniGaNkzsvmImRpcUu1CQySi4a5pwwiN07Na85kK/J tpZFyKvIe5vuGUMxCYZNL9i6l/jB6Rk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:36:02 2025 by rpki-client