$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa File: cd6f640d-6126-3532-82b5-d912ca3486c0.roa (raw, json) Hash identifier: AL2CshnPGo/tFbrO5NlcFbDYcE84bPY8hv9Dv0NrxXs= Subject key identifier: 45:9F:FD:74:D2:3F:4C:E2:B6:C5:65:63:13:5A:0F:30:F7:17:87:03 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B21CC1A0DB2CB849CC4929600 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 3756 IP address blocks: 199.109.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1a:0d:b2:cb:84:9c:c4:92:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=2b197aa9-1046-41fe-b5f5-b030fb3c613b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:ec:9a:56:d1:d8:5b:90:1f:ca:25:c6:b7: 85:40:85:8a:5b:f0:37:18:4b:ed:8a:9b:37:1f:f5: 8a:83:85:1c:e1:6f:50:69:f8:d4:39:15:b2:1a:31: ea:27:b2:df:bb:49:f4:5f:85:c3:ea:e0:01:c3:4f: ad:0c:0a:21:a8:c8:54:b0:69:b9:64:80:59:e4:a2: 1e:6a:4d:85:aa:0f:09:20:53:1d:19:4c:3c:a0:05: 73:c2:5c:e3:51:8d:c7:f4:f5:25:5a:8d:94:40:c9: ae:36:15:4f:f6:de:bc:20:31:1c:02:03:a4:d9:54: eb:67:56:6e:ce:02:16:5f:5d:7f:49:54:a0:b9:9b: a0:09:e8:78:bc:8e:7f:b7:50:35:04:06:6e:b1:61: 00:a1:04:e4:a6:d6:94:be:72:ac:3d:4a:ed:b4:ec: ee:e4:a0:d6:98:18:b7:19:58:e8:01:7d:b2:33:e7: be:d2:5d:a9:e7:69:fb:d0:2f:e0:fc:79:fe:19:8c: 29:cf:cf:f5:bf:a3:13:67:39:e3:59:85:c8:8a:dc: 95:47:34:d9:6e:68:99:43:ef:b3:a2:20:77:56:3c: 2b:54:a5:4d:3f:eb:e5:6a:54:2e:2f:2e:b8:87:51: 47:3d:52:46:a8:fc:c7:3b:90:4b:38:4e:e6:a8:35: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9F:FD:74:D2:3F:4C:E2:B6:C5:65:63:13:5A:0F:30:F7:17:87:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7e:61:eb:7f:e4:3f:5c:73:5f:4f:32:3f:fb:05:de:b4:44: 79:38:76:87:fc:4c:9c:99:50:65:96:7e:5c:af:3a:92:01:0d: c0:c4:01:32:bc:00:f8:6b:f9:db:74:3e:12:a9:36:90:72:44: d8:02:76:f2:dc:af:56:6e:b9:91:0a:88:3e:9d:bf:ca:6c:28: 88:ab:aa:48:bd:94:9e:49:9d:cc:5b:0e:b7:ba:a2:a9:a7:68: bf:80:55:72:68:6c:02:47:65:00:a8:e9:93:67:a3:e7:4c:56: 41:30:8e:3e:4f:89:83:38:c8:ba:c7:7e:39:73:12:60:e9:aa: 54:da:2f:af:88:ea:40:08:cd:aa:ed:e8:f7:60:3f:07:91:02: d3:80:bb:70:41:de:18:66:30:e2:a8:08:41:9e:45:85:28:6f: dc:ed:e5:2b:4e:ea:ef:c5:7b:bc:56:6f:f2:db:9b:44:65:ce: d2:57:27:ed:7e:86:07:1d:0d:cd:49:13:df:0e:88:4f:1c:97: 47:c9:31:ab:f9:07:dd:72:9c:92:a8:aa:56:10:02:a7:4b:11: be:14:f1:80:17:fc:fb:1b:75:07:2e:10:44:69:d4:45:ad:b0: 33:df:2d:c1:4f:6c:aa:09:f8:e9:c0:2a:d7:b4:87:8f:13:59: 4e:93:9f:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBoNssuEnMSSlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MmIxOTdhYTktMTA0Ni00MWZlLWI1ZjUtYjAzMGZiM2M2MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj/smlbR2FuQH8olxreFQIWKW/A3GEvtips3 H/WKg4Uc4W9QafjUORWyGjHqJ7Lfu0n0X4XD6uABw0+tDAohqMhUsGm5ZIBZ5KIe ak2Fqg8JIFMdGUw8oAVzwlzjUY3H9PUlWo2UQMmuNhVP9t68IDEcAgOk2VTrZ1Zu zgIWX11/SVSguZugCeh4vI5/t1A1BAZusWEAoQTkptaUvnKsPUrttOzu5KDWmBi3 GVjoAX2yM+e+0l2p52n70C/g/Hn+GYwpz8/1v6MTZznjWYXIityVRzTZbmiZQ++z oiB3VjwrVKVNP+vlalQuLy64h1FHPVJGqPzHO5BLOE7mqDX6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWf/XTSP0zitsVlYxNaDzD3F4cDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2Q2ZjY0MGQtNjEyNi0z NTMyLTgyYjUtZDkxMmNhMzQ4NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl+Yet/5D9cc19PMj/7Bd60RHk4dof8TJyZUGWWflyvOpIBDcDEATK8 APhr+dt0PhKpNpByRNgCdvLcr1ZuuZEKiD6dv8psKIirqki9lJ5JncxbDre6oqmn aL+AVXJobAJHZQCo6ZNno+dMVkEwjj5PiYM4yLrHfjlzEmDpqlTaL6+I6kAIzart 6PdgPweRAtOAu3BB3hhmMOKoCEGeRYUob9zt5StO6u/Fe7xWb/Lbm0RlztJXJ+1+ hgcdDc1JE98OiE8cl0fJMav5B91ynJKoqlYQAqdLEb4U8YAX/PsbdQcuEERp1EWt sDPfLcFPbKoJ+OnAKte0h48TWU6Tn9Q= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:18 2025 by rpki-client