$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa File: cc87da93-3255-3602-b613-e525c61d041b.roa (raw, json) Hash identifier: lqU8bpNIoUllLaWI1+WDFMoeOoh0fOVoAEuGdoD/Ehw= Subject key identifier: BB:E1:1D:F2:6F:4C:24:04:83:90:AC:5E:C2:09:BC:B4:BF:D0:ED:37 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F480D37B785377FC98EFD8A80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 3756 IP address blocks: 199.109.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:37:b7:85:37:7f:c9:8e:fd:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=bf98e03b-d221-4b14-9c72-51080d77a16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:ff:af:3d:45:b6:be:a8:e4:f0:58:fa:88: 14:5c:0f:53:52:6c:78:c6:9f:6a:b9:1a:b4:7a:4d: f2:bc:95:57:35:65:86:29:b0:c2:39:d4:bd:33:70: d5:82:a7:da:09:81:d6:ab:d3:47:0e:d3:17:ca:8f: 8e:32:83:87:03:3a:7e:f0:b4:69:d8:91:5e:05:21: f6:3c:a3:d6:ce:3a:e0:dc:39:ae:62:3c:e3:4c:bb: 39:29:a6:60:c4:75:46:1e:23:71:fd:24:8a:4f:e0: b5:3d:14:c7:9b:69:61:27:f4:4f:34:fc:7c:bb:d1: 6f:b3:f1:32:3b:d0:b6:e7:f4:f6:77:33:5d:e5:57: 6e:92:f1:4a:b0:7f:60:fa:1a:98:42:64:e1:d6:0c: 71:a5:18:47:71:b8:77:3b:f1:16:55:02:22:a0:a8: 7c:b2:17:56:42:f4:66:b2:95:df:02:55:aa:c2:07: 04:db:da:02:c7:bb:eb:8f:e9:52:9e:9d:b2:15:be: 7d:c8:47:c3:44:19:84:8b:94:e7:6f:eb:17:f8:20: e6:47:74:ff:b3:62:b9:19:66:db:19:78:0d:96:cd: 6f:c5:71:c6:b1:0f:07:92:e9:4c:91:02:eb:5a:8f: ef:aa:17:d9:72:bd:5e:16:fc:47:ca:32:05:9d:96: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:1D:F2:6F:4C:24:04:83:90:AC:5E:C2:09:BC:B4:BF:D0:ED:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:de:43:9a:34:6d:c8:02:c8:70:13:24:0d:3d:78:b0:50:c2: c2:ea:d6:68:d1:79:56:6c:df:1f:46:1b:98:31:12:c0:57:e8: 3d:18:81:d1:2a:68:d3:9e:1d:03:ca:a2:7a:24:f2:e0:3c:3d: 08:94:8c:94:32:02:61:a8:83:a2:a2:e8:ac:78:3e:d6:7b:8b: 7b:68:b1:46:18:44:4e:39:ef:5c:62:d3:8c:5f:44:a6:d8:bd: 9d:ce:1f:e4:86:b4:eb:64:f1:a2:a5:2f:95:b7:cb:ab:ab:26: 26:56:53:33:ea:b3:dc:8f:d7:4b:80:92:1e:2a:7c:51:12:a8: 2a:63:96:99:3b:5b:00:df:14:bc:4b:bd:58:93:2a:c5:ab:ce: 7e:ac:d0:8a:eb:c2:c6:2d:fb:b7:b7:af:81:b2:47:70:76:23: 82:24:69:8d:22:2d:20:1d:33:c8:c0:f6:2b:7f:cc:47:2e:50: 7f:fa:13:9d:43:fb:6f:69:be:32:67:ef:87:44:e7:5e:36:92: 0b:cb:b8:22:99:e6:93:88:6e:fc:7a:b2:8a:87:63:f9:ad:96: 72:59:ac:d7:5c:a7:f0:21:26:54:f6:de:a3:94:97:b1:9d:4d: 24:87:d5:4a:6f:06:4c:42:e6:2f:59:3a:e9:99:e8:0f:85:2f: 28:93:e4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTe3hTd/yY79ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmY5OGUwM2ItZDIyMS00YjE0LTljNzItNTEwODBkNzdhMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNb/rz1Ftr6o5PBY+ogUXA9TUmx4xp9quRq0 ek3yvJVXNWWGKbDCOdS9M3DVgqfaCYHWq9NHDtMXyo+OMoOHAzp+8LRp2JFeBSH2 PKPWzjrg3DmuYjzjTLs5KaZgxHVGHiNx/SSKT+C1PRTHm2lhJ/RPNPx8u9Fvs/Ey O9C25/T2dzNd5VdukvFKsH9g+hqYQmTh1gxxpRhHcbh3O/EWVQIioKh8shdWQvRm spXfAlWqwgcE29oCx7vrj+lSnp2yFb59yEfDRBmEi5Tnb+sX+CDmR3T/s2K5GWbb GXgNls1vxXHGsQ8HkulMkQLrWo/vqhfZcr1eFvxHyjIFnZbrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvhHfJvTCQEg5CsXsIJvLS/0O03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2M4N2RhOTMtMzI1NS0z NjAyLWI2MTMtZTUyNWM2MWQwNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEreQ5o0bcgCyHATJA09eLBQwsLq1mjReVZs3x9GG5gxEsBX6D0YgdEq aNOeHQPKonok8uA8PQiUjJQyAmGog6Ki6Kx4PtZ7i3tosUYYRE4571xi04xfRKbY vZ3OH+SGtOtk8aKlL5W3y6urJiZWUzPqs9yP10uAkh4qfFESqCpjlpk7WwDfFLxL vViTKsWrzn6s0IrrwsYt+7e3r4GyR3B2I4IkaY0iLSAdM8jA9it/zEcuUH/6E51D +29pvjJn74dE5142kgvLuCKZ5pOIbvx6soqHY/mtlnJZrNdcp/AhJlT23qOUl7Gd TSSH1UpvBkxC5i9ZOumZ6A+FLyiT5LE= -----END CERTIFICATE-----Generated at Sat Sep 26 18:25:05 2026 by rpki-client