$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa File: cc87da93-3255-3602-b613-e525c61d041b.roa (raw, json) Hash identifier: ot416iWbT4T89MRZfTzFkBHV69njXQLfL10tqeCQZlA= Subject key identifier: 53:8D:20:FD:8E:4A:3E:95:1D:1C:91:AB:F3:3F:5D:00:60:F8:5D:4F Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2496C7A42A6B32268BFCC780 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 3756 IP address blocks: 199.109.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c7:a4:2a:6b:32:26:8b:fc:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=bf506af1-f131-4adc-9870-aa383a4ebc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:0e:89:b6:57:6c:e2:19:ac:5e:3c:d3:18: 2e:77:91:d1:09:68:47:e0:ad:3e:4b:77:11:0c:a8: 99:0d:7e:e7:a6:5d:e7:3e:e5:37:c8:72:53:82:27: 49:c3:c0:d1:1d:07:69:cc:2e:3c:c6:8f:03:15:3e: fb:cf:dd:dd:41:8e:39:9c:53:66:cd:7c:5a:a8:e9: a8:f9:e3:33:e6:9e:cb:71:0b:07:0b:53:57:de:c6: df:91:8f:6a:2a:25:1d:46:d5:25:56:ae:a9:fa:91: 77:18:9f:b1:87:80:7b:4a:d9:9e:ab:a8:e6:ac:8b: b1:3d:f1:c1:5b:68:3c:9c:44:19:8a:93:10:09:ed: dd:e5:fc:45:46:4b:02:8f:bc:63:19:ea:11:f3:fe: c3:6c:64:f4:ab:7a:1c:ec:51:47:a1:aa:1a:f8:d8: f7:c1:f5:68:3a:b5:af:01:80:be:21:db:88:c8:42: 96:5c:68:52:85:33:24:94:e1:a4:9a:06:55:04:8d: 95:7a:0e:f3:1d:cc:3b:be:50:ee:c8:30:a3:28:76: 98:cb:33:16:fe:5a:5a:1c:6d:ba:75:f7:eb:19:28: a8:8a:c4:63:45:9e:89:cd:1a:19:d5:0a:9e:2b:70: 01:97:e0:25:18:3c:ad:05:27:ef:56:37:1e:39:c3: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8D:20:FD:8E:4A:3E:95:1D:1C:91:AB:F3:3F:5D:00:60:F8:5D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d6:99:0b:97:81:9f:34:9b:7d:6b:e2:73:8f:c7:dc:68:64: af:8b:ae:3d:ab:9b:1a:89:5a:3c:1f:87:d6:fe:88:a0:d7:1d: cb:22:d7:71:12:a4:ca:37:09:4f:9a:eb:16:fe:6d:e2:be:43: dc:7b:82:52:d1:74:30:55:49:08:6f:ef:46:03:b5:c6:1f:0d: 7c:73:85:0f:9f:27:a7:46:40:40:70:0d:68:98:9c:e8:12:a9: 7e:e9:59:9b:0d:77:a5:49:bc:f2:a4:22:ec:81:72:ab:99:c9: 7d:b5:4a:7e:68:c2:8b:03:df:01:63:4e:fa:d7:72:1b:be:24: 12:c9:fc:4c:c8:96:08:69:03:35:98:eb:cf:69:2a:9e:80:b3: de:3b:fe:8c:cf:94:af:ff:82:7c:99:06:ad:c8:26:96:6d:80: de:4a:5c:06:a2:44:cc:e9:f5:16:4d:78:2f:9b:8f:0e:34:35: e8:46:5a:2c:df:a0:de:7a:aa:f1:95:4e:dd:5f:4b:ee:02:82: 44:c6:22:6b:37:b8:37:cc:35:4f:aa:f2:f7:78:47:c5:4e:d3: 8c:45:af:3b:de:64:cc:27:ef:21:f7:1b:b6:bd:00:7e:3d:2c: da:a5:fe:fe:e1:2d:d1:78:0c:f6:bd:75:af:60:9a:98:c4:b9: d3:79:93:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsekKmsyJov8x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YmY1MDZhZjEtZjEzMS00YWRjLTk4NzAtYWEzODNhNGViYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8IOibZXbOIZrF480xgud5HRCWhH4K0+S3cR DKiZDX7npl3nPuU3yHJTgidJw8DRHQdpzC48xo8DFT77z93dQY45nFNmzXxaqOmo +eMz5p7LcQsHC1NX3sbfkY9qKiUdRtUlVq6p+pF3GJ+xh4B7Stmeq6jmrIuxPfHB W2g8nEQZipMQCe3d5fxFRksCj7xjGeoR8/7DbGT0q3oc7FFHoaoa+Nj3wfVoOrWv AYC+IduIyEKWXGhShTMklOGkmgZVBI2Veg7zHcw7vlDuyDCjKHaYyzMW/lpaHG26 dffrGSioisRjRZ6JzRoZ1QqeK3ABl+AlGDytBSfvVjceOcMnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFONIP2OSj6VHRyRq/M/XQBg+F1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2M4N2RhOTMtMzI1NS0z NjAyLWI2MTMtZTUyNWM2MWQwNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILWmQuXgZ80m31r4nOPx9xoZK+Lrj2rmxqJWjwfh9b+iKDXHcsi13ES pMo3CU+a6xb+beK+Q9x7glLRdDBVSQhv70YDtcYfDXxzhQ+fJ6dGQEBwDWiYnOgS qX7pWZsNd6VJvPKkIuyBcquZyX21Sn5owosD3wFjTvrXchu+JBLJ/EzIlghpAzWY 689pKp6As947/ozPlK//gnyZBq3IJpZtgN5KXAaiRMzp9RZNeC+bjw40NehGWizf oN56qvGVTt1fS+4CgkTGIms3uDfMNU+q8vd4R8VO04xFrzveZMwn7yH3G7a9AH49 LNql/v7hLdF4DPa9da9gmpjEudN5k+E= -----END CERTIFICATE-----Generated at Thu Oct 9 01:25:33 2025 by rpki-client