$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa File: 8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa (raw, json) Hash identifier: BOdfCdmsj1C8jvrERU4MOcLW9He4rn8izw4rFMW1iK8= Subject key identifier: 55:98:2C:96:B0:4A:E4:63:42:79:1E:9D:31:93:E1:39:18:96:67:9D Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EF71776813CA24969A1893700 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3630 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:76:81:3c:a2:49:69:a1:89:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ae1bcb1b-88a2-48b3-a8b2-a8700e2bee5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:8c:47:82:44:b2:1a:4c:37:74:e9:69:56: 28:42:d6:5c:10:85:87:4b:62:47:e0:21:6a:7d:a4: e0:72:b8:ff:ce:d1:be:83:56:f4:f8:9a:18:72:02: b0:72:22:09:a3:a8:23:50:e1:c5:f6:b6:6f:45:95: e9:ed:99:1b:bf:29:00:d9:46:8c:95:29:71:08:10: 3b:d1:64:8d:a9:dd:5d:72:46:1d:dc:73:ae:5a:9c: d4:7b:40:2e:1e:25:d6:be:79:43:24:52:75:7d:9d: 38:bb:81:56:ff:59:91:9e:ff:0d:e1:e9:be:73:7d: 74:88:4b:85:ad:a5:d5:65:80:ab:7f:78:86:d9:51: e5:94:a6:cc:74:85:f3:df:83:cd:81:c6:ca:79:c2: 2e:3f:92:42:4e:3f:e2:9b:66:13:ed:6d:55:ce:a4: af:e0:ef:51:c9:d0:b1:84:06:92:78:d7:df:9a:ac: de:6f:64:eb:b0:5f:d9:31:3b:f3:b2:eb:20:e7:b5: ad:cf:d1:a2:99:e1:45:42:4e:66:8d:d2:03:39:98: 5e:80:8e:fd:65:35:a9:a4:60:6e:ef:f8:8d:c8:98: d9:e7:13:92:1c:69:c4:7b:96:e0:65:b1:eb:dc:98: 39:d4:ed:bd:3d:b2:43:c8:99:b5:4e:91:21:87:0b: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:98:2C:96:B0:4A:E4:63:42:79:1E:9D:31:93:E1:39:18:96:67:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:19:fe:45:55:1c:c6:19:3f:3c:7f:93:b1:41:15:66:a1:70: a5:f0:14:32:48:fc:d3:5d:7b:18:a7:e4:56:96:25:96:05:0d: 36:7e:53:52:d6:39:12:a2:7d:e7:56:be:1d:b9:f9:ef:63:9f: b5:34:8e:da:83:5e:15:98:62:ce:c3:56:4f:23:be:7c:d4:a2: e6:10:94:6e:13:06:f1:9a:f4:dc:e0:29:b8:5a:b5:9c:59:7a: 0e:b9:8a:9f:75:21:0e:78:88:82:8c:f0:2e:3e:c6:ce:6a:60: f5:00:35:54:20:e2:ed:88:c5:f9:58:e4:dd:7a:9e:f7:32:a6: 6e:fd:54:06:a9:54:ee:fe:3d:0c:df:6f:02:4c:f7:30:ee:d8: 62:68:30:f1:15:39:84:da:97:20:82:bf:0c:a4:e3:5e:8e:50: 07:74:e0:64:1d:b3:17:d1:84:c2:0a:6e:1c:b2:f1:bd:8c:27: 94:80:9a:e5:e6:30:e4:00:e1:7a:43:3f:ac:0f:74:a3:fa:c5: db:c1:1c:1a:2a:a3:15:77:06:1f:81:68:24:de:29:08:0b:6e: fc:c7:fd:15:57:3f:b6:aa:90:ae:64:c2:63:11:f6:73:95:1d: 7e:1e:65:b9:7f:ed:f2:80:e4:ed:c5:2b:7d:9c:e6:d0:6b:7e: d6:35:7a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3aBPKJJaaGJNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YWUxYmNiMWItODhhMi00OGIzLWE4YjItYTg3MDBlMmJlZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmWMR4JEshpMN3TpaVYoQtZcEIWHS2JH4CFq faTgcrj/ztG+g1b0+JoYcgKwciIJo6gjUOHF9rZvRZXp7ZkbvykA2UaMlSlxCBA7 0WSNqd1dckYd3HOuWpzUe0AuHiXWvnlDJFJ1fZ04u4FW/1mRnv8N4em+c310iEuF raXVZYCrf3iG2VHllKbMdIXz34PNgcbKecIuP5JCTj/im2YT7W1VzqSv4O9RydCx hAaSeNffmqzeb2TrsF/ZMTvzsusg57Wtz9GimeFFQk5mjdIDOZhegI79ZTWppGBu 7/iNyJjZ5xOSHGnEe5bgZbHr3Jg51O29PbJDyJm1TpEhhwtgDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWYLJawSuRjQnkenTGT4TkYlmedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvOGFjMDM1MjktZmU3YS0z MGE4LWFhODgtYjM4MDlmMTNkNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwZ/kVVHMYZPzx/k7FBFWahcKXwFDJI/NNdexin5FaWJZYFDTZ+U1LW ORKifedWvh25+e9jn7U0jtqDXhWYYs7DVk8jvnzUouYQlG4TBvGa9NzgKbhatZxZ eg65ip91IQ54iIKM8C4+xs5qYPUANVQg4u2IxflY5N16nvcypm79VAapVO7+PQzf bwJM9zDu2GJoMPEVOYTalyCCvwyk416OUAd04GQdsxfRhMIKbhyy8b2MJ5SAmuXm MOQA4XpDP6wPdKP6xdvBHBoqoxV3Bh+BaCTeKQgLbvzH/RVXP7aqkK5kwmMR9nOV HX4eZbl/7fKA5O3FK32c5tBrftY1enk= -----END CERTIFICATE-----Generated at Sat Sep 26 18:35:55 2026 by rpki-client