$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa File: f1c559fd-c240-3620-885a-002951ebf9d3.roa (raw, json) Hash identifier: ciXGkH7eHlVdWcYWAAWPAD6aL0aG1LXaWKhx1KXsZx4= Subject key identifier: 3E:20:F9:8F:AA:2E:94:7B:AB:05:96:5D:8B:63:10:13:B6:99:97:19 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F4973A3D92AA627ACE83F7180 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3754 IP address blocks: 199.109.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a3:d9:2a:a6:27:ac:e8:3f:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd9fc587-1ebb-4753-b5a6-74780017a7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:9a:a5:32:7e:6e:f8:ff:8a:ed:15:0e:14: 41:39:84:30:33:13:cd:da:97:d4:63:37:72:2c:ce: 89:85:03:cd:cf:9f:42:c8:94:d7:fb:d9:e3:bc:35: b9:e1:20:00:f3:06:a2:c4:19:0a:19:e5:58:e4:2e: 37:0e:7f:61:b9:29:29:d2:3e:e3:91:32:c9:58:8c: fa:33:04:c7:66:b7:b5:2f:b1:b9:73:70:2e:7a:71: 12:4d:63:62:5a:4a:a0:17:16:c4:7d:dd:90:e9:3c: ea:71:37:83:b8:5b:66:a0:f1:42:11:42:ac:fd:d2: e3:58:03:be:3d:e4:1e:c1:41:8b:c2:b7:80:09:b7: f4:13:2c:bc:9d:86:ac:66:c4:e5:83:29:20:c1:b6: 82:95:b1:c1:6c:80:8a:01:f8:74:b0:bf:b0:a6:b0: 62:dd:22:38:38:3e:fe:b8:75:e4:35:76:cb:22:c8: 14:8d:9a:17:e9:7b:3d:06:f5:96:93:55:66:5f:6c: bd:11:48:8b:37:e0:a1:f3:f8:d1:63:07:cf:53:1c: c0:77:b1:31:b9:6f:74:8f:bc:86:75:60:b9:f1:ec: 3f:6d:64:3d:e3:d1:0d:99:08:d2:c5:fd:9d:34:ab: ce:2b:7d:96:6e:03:31:2d:32:8d:5b:2f:1f:7c:e1: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:F9:8F:AA:2E:94:7B:AB:05:96:5D:8B:63:10:13:B6:99:97:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:73:d6:8f:a3:aa:67:ec:73:d0:1f:a5:98:9d:d4:d6:5c:ed: bb:21:90:96:dd:42:2c:db:ef:f7:93:31:47:98:11:01:c5:d8: 52:b7:f4:99:fd:c4:d1:45:61:98:f9:24:fc:2a:35:4f:fe:97: 7d:1b:20:7d:c1:c2:54:e1:4b:01:ad:02:1a:a6:ef:79:1b:a8: b0:17:a8:fb:19:85:39:37:d8:74:cc:e1:70:bf:65:63:38:33: f1:1d:f0:56:97:ab:0b:5e:30:cf:16:56:cd:a0:b6:9d:74:36: 76:f8:e0:fd:3c:4d:f6:9d:fd:fc:bf:e8:6c:2c:5c:22:0c:1d: 7e:80:d4:16:37:8f:3a:88:7d:58:6a:89:1a:2a:d4:16:7b:e6: 3a:af:c7:96:27:cd:01:9b:5d:1f:81:a3:67:8d:e8:81:ce:de: 3a:2b:9f:5e:8c:b2:46:e7:a5:29:99:60:e2:cc:18:08:e3:54: 5d:cb:5a:7c:c9:a3:bc:99:ff:8c:8f:7e:9b:f0:13:32:22:52: d7:60:46:75:e4:af:cc:67:f4:89:97:80:66:f5:c0:0a:cc:5d: 28:e2:ab:8a:ec:c0:c0:9f:31:4a:a8:e3:4b:78:21:d7:32:9e: 53:9e:d4:0a:07:0c:03:f4:0a:f8:b9:79:69:d3:75:0a:63:6a: a2:ee:ba:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6PZKqYnrOg/cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ5ZmM1ODctMWViYi00NzUzLWI1YTYtNzQ3ODAwMTdhN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8KapTJ+bvj/iu0VDhRBOYQwMxPN2pfUYzdy LM6JhQPNz59CyJTX+9njvDW54SAA8waixBkKGeVY5C43Dn9huSkp0j7jkTLJWIz6 MwTHZre1L7G5c3AuenESTWNiWkqgFxbEfd2Q6TzqcTeDuFtmoPFCEUKs/dLjWAO+ PeQewUGLwreACbf0Eyy8nYasZsTlgykgwbaClbHBbICKAfh0sL+wprBi3SI4OD7+ uHXkNXbLIsgUjZoX6Xs9BvWWk1VmX2y9EUiLN+Ch8/jRYwfPUxzAd7ExuW90j7yG dWC58ew/bWQ949ENmQjSxf2dNKvOK32WbgMxLTKNWy8ffOEE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4g+Y+qLpR7qwWWXYtjEBO2mZcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZjFjNTU5ZmQtYzI0MC0z NjIwLTg4NWEtMDAyOTUxZWJmOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhz1o+jqmfsc9AfpZid1NZc7bshkJbdQizb7/eTMUeYEQHF2FK39Jn9 xNFFYZj5JPwqNU/+l30bIH3BwlThSwGtAhqm73kbqLAXqPsZhTk32HTM4XC/ZWM4 M/Ed8FaXqwteMM8WVs2gtp10Nnb44P08Tfad/fy/6GwsXCIMHX6A1BY3jzqIfVhq iRoq1BZ75jqvx5YnzQGbXR+Bo2eN6IHO3jorn16MskbnpSmZYOLMGAjjVF3LWnzJ o7yZ/4yPfpvwEzIiUtdgRnXkr8xn9ImXgGb1wArMXSjiq4rswMCfMUqo40t4Idcy nlOe1AoHDAP0Cvi5eWnTdQpjaqLuuuU= -----END CERTIFICATE-----Generated at Sat Sep 26 13:21:25 2026 by rpki-client