$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa File: c51db7b0-d443-3350-bd1d-cc0d3d232304.roa (raw, json) Hash identifier: BySQPwet30OAzUPHtRNYn8B4rh1KV1koh48VATuVgrE= Subject key identifier: 5F:12:EA:2E:A0:05:E4:82:5A:08:B5:66:31:03:86:6D:A8:1B:A5:C6 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B21CC206F92A3848F83EEA680 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 3756 IP address blocks: 199.109.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:20:6f:92:a3:84:8f:83:ee:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=f4813494-30de-4910-bcc3-761014b49377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0e:80:d5:71:72:46:95:5b:32:a7:28:2e:9b: 6e:bd:c5:a8:d5:b0:0e:dc:bd:9f:6a:8a:97:5f:fb: 2b:81:2a:2b:a8:41:cc:c7:c7:97:e3:b6:5a:2a:30: 4d:78:5b:7b:0c:39:41:ff:9f:6e:61:a4:31:5f:fd: e7:e0:d1:e2:a0:8d:b8:c0:0f:20:6c:a0:78:ae:ad: ea:cc:e6:9f:3e:45:67:da:39:71:66:97:b0:17:59: 6e:9c:51:c1:c6:f2:9f:60:4d:53:7b:9f:91:f5:53: 30:61:5d:10:2b:a6:fc:65:20:c3:5e:0b:73:15:e7: 45:63:21:41:21:b7:6e:56:57:06:7c:d3:37:f2:27: 37:b7:e7:9b:8b:10:f3:4c:b1:8b:d6:28:fb:8f:83: 1e:7a:b2:f2:05:7c:39:1b:7e:42:c4:bd:8f:a5:2f: b1:9a:89:2f:4a:d9:00:21:a3:0a:21:1e:8e:e3:f3: 7a:77:f4:cc:cf:bb:f9:2a:c2:79:5e:4c:b0:45:b2: a7:e3:a2:96:65:5b:54:63:e7:6c:24:0a:b0:9f:0f: 73:02:42:b0:10:ff:1f:12:b6:45:01:12:50:c6:a4: 11:e5:0c:6f:de:57:37:ac:85:e6:e2:fb:4b:01:5d: 36:bc:ee:49:77:04:3e:5f:1c:90:07:65:73:1a:b2: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:12:EA:2E:A0:05:E4:82:5A:08:B5:66:31:03:86:6D:A8:1B:A5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bd:96:89:01:79:ac:3a:37:07:49:67:e5:6f:f1:92:74:52: e8:81:36:0f:18:c2:90:cd:a1:d0:e6:5a:df:15:09:ce:a8:da: d6:d9:ba:ef:a0:56:b2:c7:a2:22:aa:78:7c:8d:6a:86:a4:d1: 40:e3:b2:f6:dc:98:79:76:99:8a:45:bb:04:c2:20:f3:12:60: f5:57:45:a8:f0:7e:02:55:52:c7:92:df:c9:0e:f5:a2:27:7c: 63:25:55:a7:f9:7c:04:df:df:ec:29:a4:c0:c2:d7:32:aa:05: f3:00:70:6a:8d:88:0a:ef:35:da:1d:73:68:6e:10:30:ee:47: 49:fe:99:31:68:fb:18:7b:1d:39:2f:d7:87:0d:0f:a8:01:d2: 3b:df:57:27:df:7d:df:98:b5:0e:55:1d:d9:c2:b1:7d:78:4c: ef:c7:84:5f:43:79:3c:d7:1d:4b:73:59:f5:85:95:f7:24:ff: 6b:a8:37:95:da:25:93:be:9f:1d:58:9c:e1:88:20:6e:98:d8: ce:1f:ec:06:e6:ac:67:4e:c8:3d:ee:47:69:c3:52:f4:71:1e: 72:73:ce:62:fa:87:83:9d:e5:22:1d:86:b5:c1:44:e9:44:26: 38:a2:c6:7c:b8:e1:da:71:a2:3b:e5:9a:e8:96:1c:4d:0e:3b: 43:62:15:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCBvkqOEj4PupoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZjQ4MTM0OTQtMzBkZS00OTEwLWJjYzMtNzYxMDE0YjQ5Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ6A1XFyRpVbMqcoLptuvcWo1bAO3L2faoqX X/srgSorqEHMx8eX47ZaKjBNeFt7DDlB/59uYaQxX/3n4NHioI24wA8gbKB4rq3q zOafPkVn2jlxZpewF1lunFHBxvKfYE1Te5+R9VMwYV0QK6b8ZSDDXgtzFedFYyFB IbduVlcGfNM38ic3t+ebixDzTLGL1ij7j4MeerLyBXw5G35CxL2PpS+xmokvStkA IaMKIR6O4/N6d/TMz7v5KsJ5XkywRbKn46KWZVtUY+dsJAqwnw9zAkKwEP8fErZF ARJQxqQR5Qxv3lc3rIXm4vtLAV02vO5JdwQ+XxyQB2VzGrLQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8S6i6gBeSCWgi1ZjEDhm2oG6XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzUxZGI3YjAtZDQ0My0z MzUwLWJkMWQtY2MwZDNkMjMyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC9lokBeaw6NwdJZ+Vv8ZJ0UuiBNg8YwpDNodDmWt8VCc6o2tbZuu+g VrLHoiKqeHyNaoak0UDjsvbcmHl2mYpFuwTCIPMSYPVXRajwfgJVUseS38kO9aIn fGMlVaf5fATf3+wppMDC1zKqBfMAcGqNiArvNdodc2huEDDuR0n+mTFo+xh7HTkv 14cND6gB0jvfVyfffd+YtQ5VHdnCsX14TO/HhF9DeTzXHUtzWfWFlfck/2uoN5Xa JZO+nx1YnOGIIG6Y2M4f7AbmrGdOyD3uR2nDUvRxHnJzzmL6h4Od5SIdhrXBROlE Jjiixny44dpxojvlmuiWHE0OO0NiFWQ= -----END CERTIFICATE-----Generated at Thu Oct 9 01:21:47 2025 by rpki-client