$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json) Hash identifier: ZlFKn/IxfcT0GLOYUvRSTRQTmtJUoaNvl6oARJjKYbM= Subject key identifier: BB:00:5A:5D:8D:44:13:6D:15:0D:2A:DF:9E:0A:9D:D5:0D:AB:DE:FA Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F480D37FC5C7BF09D96DD1D40 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 3754 IP address blocks: 199.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:37:fc:5c:7b:f0:9d:96:dd:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=38237ace-915d-4b17-8393-9ded1a4a6472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:28:db:1b:34:a2:ee:6a:d7:96:f0:58:bc: 49:6f:cf:39:95:99:95:48:ec:cc:fa:5d:e9:19:dc: 4e:74:94:15:10:a8:e8:f1:d1:39:3f:3b:56:09:91: dd:ea:85:fa:20:c2:28:6d:b6:8d:be:77:86:ec:d5: a9:cd:a1:49:79:ac:19:3f:63:64:9d:3a:8c:2c:36: 7d:45:d7:f5:2c:d6:46:51:72:15:3a:e0:1f:d8:f4: fa:73:09:b4:f9:51:70:97:15:7d:ec:c2:48:04:b0: 37:39:ae:5c:53:13:7c:2e:42:71:d0:1f:6b:34:dc: 89:74:1e:62:9d:e5:91:21:97:c0:f9:42:e9:84:c3: c0:77:b3:c5:52:89:40:9a:0e:95:3f:61:4c:b1:01: 7c:b2:31:58:6f:5d:1b:3d:f4:10:7b:25:3b:e8:2c: c4:09:f8:ec:a9:35:b0:52:7c:10:74:16:2a:26:5d: 84:ac:33:7b:03:eb:71:96:4a:43:21:12:4b:d0:49: 35:d7:5b:a5:0f:7f:ce:47:a8:4c:5e:b8:95:fc:f0: f5:73:6a:71:b4:1d:51:7a:c7:a9:d1:3b:48:88:ca: ad:1d:13:1f:69:18:5a:f8:86:15:01:13:87:e0:1f: 23:96:db:9f:7d:e3:a3:52:93:77:09:d7:4c:cc:6c: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:00:5A:5D:8D:44:13:6D:15:0D:2A:DF:9E:0A:9D:D5:0D:AB:DE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:19:ca:74:ee:e8:97:2b:2e:db:89:f8:95:58:d7:b4:3a:a5: ee:41:95:3e:b3:5e:fd:30:ed:38:ea:ba:65:f6:4a:5e:7d:64: eb:93:cc:c8:a7:8f:c5:91:6d:2b:98:33:8c:26:5f:f5:d7:14: b1:8f:c4:2c:0b:35:e5:80:01:1a:92:be:2f:bf:b9:55:57:e9: f7:09:6d:cc:de:84:df:ac:94:3b:86:0f:d7:b0:75:d0:1f:6a: f1:a6:fe:7f:ac:aa:04:50:41:bf:d8:27:da:c6:07:2a:3e:57: 9b:71:ed:43:9e:1e:d6:07:2b:9d:49:58:b9:4c:3b:60:b8:3a: 98:d7:c0:19:e0:d5:cc:6e:f1:57:82:88:ba:a4:a0:b6:eb:b3: 63:14:0c:88:8e:c2:bd:35:3f:52:d5:6b:09:9d:05:da:17:c8: ef:b7:1f:c8:28:0b:8e:f1:fb:db:69:9f:8c:05:84:38:a6:33: eb:93:c9:bd:ff:4a:40:cc:5c:23:95:58:f2:1a:28:8b:81:53: 00:3c:34:44:97:6f:9d:4d:5c:6d:26:f6:10:ef:ec:5a:fa:12: 63:71:5b:e2:74:01:17:21:dd:1f:15:bc:1e:c2:cb:11:52:dc: 77:e0:0c:6f:6c:42:2c:60:2b:bb:7f:85:0b:07:02:f9:38:d7: 89:59:01:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTf8XHvwnZbdHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MzgyMzdhY2UtOTE1ZC00YjE3LTgzOTMtOWRlZDFhNGE2NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMEo2xs0ou5q15bwWLxJb885lZmVSOzM+l3p GdxOdJQVEKjo8dE5PztWCZHd6oX6IMIobbaNvneG7NWpzaFJeawZP2NknTqMLDZ9 Rdf1LNZGUXIVOuAf2PT6cwm0+VFwlxV97MJIBLA3Oa5cUxN8LkJx0B9rNNyJdB5i neWRIZfA+ULphMPAd7PFUolAmg6VP2FMsQF8sjFYb10bPfQQeyU76CzECfjsqTWw UnwQdBYqJl2ErDN7A+txlkpDIRJL0Ek111ulD3/OR6hMXriV/PD1c2pxtB1Resep 0TtIiMqtHRMfaRha+IYVAROH4B8jltuffeOjUpN3CddMzGz/RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsAWl2NRBNtFQ0q354KndUNq976MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzRkN2Y1YmUtNzNjOC0z MDJhLTk5MWUtYTU5NTJhYzI2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoZynTu6JcrLtuJ+JVY17Q6pe5BlT6zXv0w7TjqumX2Sl59ZOuTzMin j8WRbSuYM4wmX/XXFLGPxCwLNeWAARqSvi+/uVVX6fcJbczehN+slDuGD9ewddAf avGm/n+sqgRQQb/YJ9rGByo+V5tx7UOeHtYHK51JWLlMO2C4OpjXwBng1cxu8VeC iLqkoLbrs2MUDIiOwr01P1LVawmdBdoXyO+3H8goC47x+9tpn4wFhDimM+uTyb3/ SkDMXCOVWPIaKIuBUwA8NESXb51NXG0m9hDv7Fr6EmNxW+J0ARch3R8VvB7CyxFS 3HfgDG9sQixgK7t/hQsHAvk414lZAcA= -----END CERTIFICATE-----Generated at Sat Sep 26 14:25:58 2026 by rpki-client