$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa File: 3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa (raw, json) Hash identifier: MhsJOJtFdn4oLCVFkINpiiuU7NOzWg3p8KHs3lvXBKI= Subject key identifier: DF:DE:9B:C7:9E:11:77:66:3C:D4:EA:72:DA:40:9D:70:F1:20:CE:1F Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F480D3C91FFC0A33615FC5C60 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 3630 IP address blocks: 199.109.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3c:91:ff:c0:a3:36:15:fc:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=f11de029-694e-4cbf-959a-32a55722f886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:bd:aa:f3:c4:da:d0:52:9a:c3:f6:6c:a8: 5a:46:93:70:c9:0d:2d:cb:57:56:7e:96:f1:66:50: 44:10:e2:e2:0d:a0:5a:49:5d:10:a7:4c:b7:cd:76: b3:0d:51:97:46:ab:06:a7:d0:d7:b5:a7:2f:22:e3: 7e:d3:0f:72:fa:db:b4:c6:28:f1:c3:ab:68:a9:cf: f2:55:18:d5:fb:94:e2:bc:6a:98:af:a9:cb:5a:62: a5:16:2f:39:a4:46:8c:6a:b0:79:17:94:ff:2f:71: 37:bd:8a:f2:76:7d:cd:fc:60:1e:55:73:a4:5b:6f: 2c:44:85:9e:4f:e4:d9:c0:15:2c:76:75:8c:bf:b1: 50:68:86:d3:c6:bd:03:51:72:c5:d2:27:ea:fc:63: 1a:16:e1:d1:87:45:7a:c8:81:aa:3b:29:ff:00:6d: c5:ae:3c:d2:48:ee:1e:e6:18:af:fe:91:49:fd:8b: ad:87:80:5a:a0:d1:1f:8f:ac:e4:1e:53:1c:36:11: 9d:86:05:04:15:2f:3f:c9:66:14:a2:3b:ce:b9:62: 13:1c:10:97:f6:a7:a7:9d:62:f9:97:6f:9a:24:3f: 35:78:33:63:e6:91:70:ca:0b:31:8c:5a:ce:ce:31: db:2a:df:3e:31:a2:91:51:60:71:58:37:e4:4d:4a: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DE:9B:C7:9E:11:77:66:3C:D4:EA:72:DA:40:9D:70:F1:20:CE:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7d:55:50:5a:dd:73:b1:52:45:71:8f:16:ff:87:9c:db:0f: 7b:ab:b4:a5:bd:80:c0:1f:25:35:59:c7:b3:2d:ee:a5:41:14: 43:93:46:90:1a:f8:82:f8:71:72:13:c2:ff:c0:db:c2:e7:2e: 10:dc:3e:f5:f6:b0:5c:b4:87:14:e1:7b:73:ab:4c:07:cf:b5: 89:c9:79:f4:01:35:99:18:3f:d6:e8:5d:4e:00:c2:00:e4:68: 07:65:2e:9d:ca:76:7c:b5:e6:e6:13:9a:2a:53:67:57:30:b8: 4b:3a:b2:34:5c:03:9e:55:cd:4a:5f:8b:c6:36:94:12:33:58: a0:97:e1:a4:fb:38:f9:86:a1:6c:63:58:ea:aa:6a:65:56:5e: fa:cb:d1:eb:91:65:3e:bb:fb:dd:d6:a7:f5:cd:48:71:82:fe: bf:11:10:6e:1a:b7:38:7f:4e:d5:4b:57:17:4e:78:38:3d:ac: 2d:e3:bc:7a:5a:93:06:b4:46:7d:47:0f:22:62:2a:35:39:89: 07:ea:ec:a2:05:47:55:39:27:1d:5c:62:38:93:d1:64:79:63: 1b:8d:45:98:93:34:ea:19:a2:73:81:59:de:4e:6a:75:5e:30: da:e0:9c:de:74:03:e2:18:1e:e6:09:b7:a4:68:2e:fe:ca:d4: 42:b6:1d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTyR/8CjNhX8XGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjExZGUwMjktNjk0ZS00Y2JmLTk1OWEtMzJhNTU3MjJmODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7m9qvPE2tBSmsP2bKhaRpNwyQ0ty1dWfpbx ZlBEEOLiDaBaSV0Qp0y3zXazDVGXRqsGp9DXtacvIuN+0w9y+tu0xijxw6toqc/y VRjV+5TivGqYr6nLWmKlFi85pEaMarB5F5T/L3E3vYrydn3N/GAeVXOkW28sRIWe T+TZwBUsdnWMv7FQaIbTxr0DUXLF0ifq/GMaFuHRh0V6yIGqOyn/AG3FrjzSSO4e 5hiv/pFJ/Yuth4BaoNEfj6zkHlMcNhGdhgUEFS8/yWYUojvOuWITHBCX9qennWL5 l2+aJD81eDNj5pFwygsxjFrOzjHbKt8+MaKRUWBxWDfkTUpHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/em8eeEXdmPNTqctpAnXDxIM4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvM2FhZWRmMDktN2QyZS0z ZTNiLThiYWEtMWE2ZmM0MGRmMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx9VVBa3XOxUkVxjxb/h5zbD3urtKW9gMAfJTVZx7Mt7qVBFEOTRpAa +IL4cXITwv/A28LnLhDcPvX2sFy0hxThe3OrTAfPtYnJefQBNZkYP9boXU4AwgDk aAdlLp3Kdny15uYTmipTZ1cwuEs6sjRcA55VzUpfi8Y2lBIzWKCX4aT7OPmGoWxj WOqqamVWXvrL0euRZT67+93Wp/XNSHGC/r8REG4atzh/TtVLVxdOeDg9rC3jvHpa kwa0Rn1HDyJiKjU5iQfq7KIFR1U5Jx1cYjiT0WR5YxuNRZiTNOoZonOBWd5OanVe MNrgnN50A+IYHuYJt6RoLv7K1EK2HSY= -----END CERTIFICATE-----Generated at Sat Sep 26 16:40:22 2026 by rpki-client