$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa File: 6ba844c7-221b-3c70-9a2c-77d382deca20.roa (raw, json) Hash identifier: N9+dGDoya5/wCcUQYJRwm7UlwHT+ExNwNzv2HM5rsvo= Subject key identifier: 8C:5A:C8:82:4A:4E:97:2D:55:C6:74:1E:A6:AE:B8:C0:E7:FC:33:87 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EA7872B99B21BE134AABED980 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 0 IP address blocks: 199.109.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:2b:99:b2:1b:e1:34:aa:be:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7c365e3-9c08-49e2-ab26-ce1070a1279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:d2:21:6c:92:a3:ef:a4:59:a0:62:31:b1: 0e:dc:74:7c:97:f2:9d:e3:2a:15:cb:e2:30:56:8c: eb:e5:bc:1e:db:2e:4a:c8:33:c0:b6:d3:5e:fa:1d: df:f0:66:6c:0d:38:d4:9d:38:7b:e0:9c:e6:94:5f: ad:be:f6:7d:c1:4f:94:22:e0:eb:9f:5a:a6:61:c8: 20:e5:4a:d3:1d:c4:dc:e4:94:f0:bb:7a:04:d7:a2: c7:38:b7:8d:bf:49:e1:63:71:19:71:80:74:d4:c8: 03:cb:92:23:7f:71:cf:47:a3:64:41:f1:d8:0e:22: ee:99:e1:00:d1:3b:16:06:2a:4b:01:7a:50:5e:03: 02:f6:c9:7d:72:57:e2:8e:40:bb:62:67:c1:52:05: 6e:45:dd:ad:5a:9f:07:b2:d8:08:5b:84:94:71:1f: 6a:ef:0d:e6:43:23:55:64:e5:93:1e:cd:ae:61:33: de:63:a6:e5:ed:20:b0:3f:b7:09:76:d3:f1:6e:dd: 23:43:8b:a1:69:7e:45:ad:19:9e:68:3d:ee:3d:a4: 4b:45:5a:99:0d:6b:f4:e4:fc:2c:9b:34:22:d7:05: a3:9f:37:aa:43:dc:2d:b8:8e:18:a8:ed:f5:16:75: 34:0c:17:7b:d5:20:e4:d6:fe:41:87:ca:e7:c9:c4: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5A:C8:82:4A:4E:97:2D:55:C6:74:1E:A6:AE:B8:C0:E7:FC:33:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:27:fd:7f:46:10:6a:d1:c4:ea:64:e7:c8:c5:82:8c:8d:ac: 7b:bc:77:d8:3b:1c:79:84:0d:20:97:91:77:bc:18:7c:fa:6e: 0a:f3:25:37:99:d7:4a:48:09:4b:50:44:5d:68:f2:25:b5:41: d8:cb:db:f6:94:4d:82:5b:3b:dc:82:f6:de:2b:f3:d7:b2:ee: 30:c8:c6:3e:40:6c:6e:ae:ee:4b:f6:a7:5e:7b:4f:2b:83:0e: 51:36:4a:a8:43:71:7e:39:20:48:a8:85:62:1e:47:dc:e3:aa: c9:b2:8f:1d:eb:4b:fa:88:d4:80:df:eb:9c:11:3a:cc:57:ed: 7f:d4:ea:ec:e0:f5:9e:bd:7b:6f:f5:2b:85:c1:b0:60:1f:87: a1:53:6d:cd:cc:ce:ad:42:0e:ed:a3:c3:8e:8d:1e:39:83:e2: a6:c3:04:fa:7e:5b:b0:f2:82:d0:37:e4:d3:0f:f5:f5:06:be: 24:f6:7b:5c:26:dc:d4:a7:5a:36:b4:66:f9:24:a7:1b:4c:eb: 30:78:7e:4b:c4:f3:04:cf:31:1c:25:cf:5b:f4:c3:29:f8:a9: 74:d6:45:be:63:ec:d5:20:fa:12:b2:f4:d7:61:c8:a3:b0:af: a6:da:9b:03:47:78:02:4e:97:2e:52:e5:e3:db:9f:9b:1d:31: c1:45:fe:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhyuZshvhNKq+2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdjMzY1ZTMtOWMwOC00OWUyLWFiMjYtY2UxMDcwYTEyNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8PSIWySo++kWaBiMbEO3HR8l/Kd4yoVy+Iw Vozr5bwe2y5KyDPAttNe+h3f8GZsDTjUnTh74JzmlF+tvvZ9wU+UIuDrn1qmYcgg 5UrTHcTc5JTwu3oE16LHOLeNv0nhY3EZcYB01MgDy5Ijf3HPR6NkQfHYDiLumeEA 0TsWBipLAXpQXgMC9sl9clfijkC7YmfBUgVuRd2tWp8HstgIW4SUcR9q7w3mQyNV ZOWTHs2uYTPeY6bl7SCwP7cJdtPxbt0jQ4uhaX5FrRmeaD3uPaRLRVqZDWv05Pws mzQi1wWjnzeqQ9wtuI4YqO31FnU0DBd71SDk1v5Bh8rnycTK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxayIJKTpctVcZ0HqauuMDn/DOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvNmJhODQ0YzctMjIxYi0z YzcwLTlhMmMtNzdkMzgyZGVjYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx236MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMn/X9GEGrRxOpk58jFgoyNrHu8d9g7HHmEDSCXkXe8GHz6bgrzJTeZ 10pICUtQRF1o8iW1QdjL2/aUTYJbO9yC9t4r89ey7jDIxj5AbG6u7kv2p157TyuD DlE2SqhDcX45IEiohWIeR9zjqsmyjx3rS/qI1IDf65wROsxX7X/U6uzg9Z69e2/1 K4XBsGAfh6FTbc3Mzq1CDu2jw46NHjmD4qbDBPp+W7DygtA35NMP9fUGviT2e1wm 3NSnWja0ZvkkpxtM6zB4fkvE8wTPMRwlz1v0wyn4qXTWRb5j7NUg+hKy9NdhyKOw r6bamwNHeAJOly5S5ePbn5sdMcFF/rw= -----END CERTIFICATE-----Generated at Mon Aug 10 09:57:15 2026 by rpki-client