$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json) Hash identifier: hS3w3bFBPZC1AwkBJtW+1U4MvD9QHsQT3KMlZyEmbvs= Subject key identifier: EC:CE:52:3B:B1:64:5C:69:EF:92:7E:03:D6:24:CF:3B:81:EA:C9:BF Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2496C817948EE77EC40D5567 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 3754 IP address blocks: 199.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c8:17:94:8e:e7:7e:c4:0d:55:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=e61518bb-09d7-45e5-ae6a-985ac730573c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:bb:fe:af:83:fd:2f:c3:7e:94:9e:e5:bc: 15:da:7d:30:28:d1:1e:98:98:87:0d:90:3b:f4:ad: b7:7a:3f:d8:ad:8f:d4:ea:f0:51:ed:ce:85:ea:8b: 3c:44:12:89:60:f5:43:9f:4b:21:00:07:e9:bd:2c: ec:92:78:e4:4b:f1:92:30:69:fb:7e:28:13:f7:10: 8f:6c:62:0f:88:49:cf:e7:7a:71:67:2a:57:7b:f6: 96:f1:4a:a3:d3:2e:40:15:7c:dc:a6:d8:ae:5a:67: bb:21:29:b7:55:f3:8e:43:3e:f4:fd:7d:0a:f0:cd: 2f:08:fe:7a:8a:8d:64:f1:81:4c:ed:e7:eb:5b:80: 24:d0:db:dd:51:a7:87:21:4f:4c:37:3b:9b:e1:66: f8:75:73:70:e4:97:05:68:e2:61:be:37:34:55:5d: b3:46:2c:0b:42:23:c1:e5:af:94:ad:29:62:8e:39: 84:c4:48:0a:ed:f3:18:ee:64:92:89:ef:a6:17:40: 4d:03:22:c7:73:70:2e:1f:9a:af:b8:41:ab:6d:00: 93:bf:00:94:65:52:cf:af:71:61:07:e2:8b:52:f9: ce:49:f8:30:f4:49:69:d0:be:0a:81:a6:e8:47:a8: de:e4:fc:93:1c:89:14:8f:b1:06:7a:38:19:7b:65: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CE:52:3B:B1:64:5C:69:EF:92:7E:03:D6:24:CF:3B:81:EA:C9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:60:25:4b:8b:0b:2a:ad:38:9c:59:b9:64:a6:46:9f:36:8a: 62:30:d2:8d:ae:d8:01:63:d1:24:b2:17:54:dc:5e:4c:5f:88: 4c:82:5f:51:fd:57:17:ae:72:99:6d:59:5d:ba:ad:df:4c:86: 3a:f7:62:60:30:f9:70:cb:04:59:05:bf:2d:59:c3:50:77:6c: 0b:c7:9e:b9:68:97:d0:6a:e8:c9:95:e3:e5:ac:68:ce:8d:83: a4:d2:65:e1:6a:89:1d:1a:c6:25:b9:22:9b:d3:83:d5:0f:54: 3c:0f:a0:bd:ab:73:82:1f:43:9e:ce:ae:ba:58:85:aa:87:7f: ad:b4:74:78:30:57:82:3f:96:f8:02:47:64:a3:df:5e:29:17: 54:e9:38:d3:a3:6c:7a:d5:db:e4:06:dd:07:e0:28:73:fe:fd: 95:4b:e1:34:78:bb:ba:da:47:c5:9a:a2:95:1f:f2:6a:04:00: 37:e4:be:29:de:08:ec:49:4f:ca:3f:8c:4e:e6:c6:50:43:0c: c9:77:06:d6:95:5c:f8:b3:08:a9:ac:2d:a0:3c:2c:1f:1f:77: f5:bb:9d:11:17:d0:f5:df:08:23:c5:40:86:ae:7a:ac:74:b5: fc:d8:0d:b4:01:19:1f:47:91:5f:9e:f1:51:2c:af:cd:32:74: 24:fe:96:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsgXlI7nfsQNVWcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTYxNTE4YmItMDlkNy00NWU1LWFlNmEtOTg1YWM3MzA1NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT67/q+D/S/DfpSe5bwV2n0wKNEemJiHDZA7 9K23ej/YrY/U6vBR7c6F6os8RBKJYPVDn0shAAfpvSzsknjkS/GSMGn7figT9xCP bGIPiEnP53pxZypXe/aW8Uqj0y5AFXzcptiuWme7ISm3VfOOQz70/X0K8M0vCP56 io1k8YFM7efrW4Ak0NvdUaeHIU9MNzub4Wb4dXNw5JcFaOJhvjc0VV2zRiwLQiPB 5a+UrSlijjmExEgK7fMY7mSSie+mF0BNAyLHc3AuH5qvuEGrbQCTvwCUZVLPr3Fh B+KLUvnOSfgw9Elp0L4KgaboR6je5PyTHIkUj7EGejgZe2XxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzOUjuxZFxp75J+A9YkzzuB6sm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzRkN2Y1YmUtNzNjOC0z MDJhLTk5MWUtYTU5NTJhYzI2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNgJUuLCyqtOJxZuWSmRp82imIw0o2u2AFj0SSyF1TcXkxfiEyCX1H9 VxeucpltWV26rd9Mhjr3YmAw+XDLBFkFvy1Zw1B3bAvHnrlol9Bq6MmV4+WsaM6N g6TSZeFqiR0axiW5IpvTg9UPVDwPoL2rc4IfQ57OrrpYhaqHf620dHgwV4I/lvgC R2Sj314pF1TpONOjbHrV2+QG3QfgKHP+/ZVL4TR4u7raR8WaopUf8moEADfkvine COxJT8o/jE7mxlBDDMl3BtaVXPizCKmsLaA8LB8fd/W7nREX0PXfCCPFQIaueqx0 tfzYDbQBGR9HkV+e8VEsr80ydCT+liQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:36:00 2025 by rpki-client