$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa File: f1c559fd-c240-3620-885a-002951ebf9d3.roa (raw, json) Hash identifier: M3YrYMVUMRbpCkFhpxOCXVw0nHp5S/IODEvpwUSKLtQ= Subject key identifier: 6A:E3:C8:84:2D:6B:30:C1:31:E5:1C:83:24:78:EF:C3:DE:5C:E7:73 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2A2C27C9E49413663ADE0E80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 3754 IP address blocks: 199.109.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:27:c9:e4:94:13:66:3a:de:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=294ae654-91a8-41a0-8e70-784a4f667877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:cc:a8:4a:88:33:ac:88:c1:85:e2:60:cc: 37:16:a5:1f:43:88:e1:1b:c4:4d:3e:f9:61:62:4a: e3:fc:2f:db:58:61:34:8b:c5:d3:bd:1a:9b:21:b6: 24:71:20:be:ae:1c:d4:47:90:60:21:77:de:c1:52: 6c:42:60:92:b4:ac:70:d1:b2:50:da:0c:86:f7:4a: c7:af:a1:8c:c3:99:ae:ed:40:08:56:dc:79:c9:3a: c6:2b:9a:9a:28:28:9e:36:8c:94:dc:20:52:ed:f4: 5e:62:99:f6:57:24:06:5b:a1:b1:81:46:1d:7c:ca: d4:31:cf:cb:d0:b7:61:5b:72:12:8c:a1:77:6a:9f: f3:f2:31:d1:dd:fc:92:c8:80:3a:cb:f2:cb:28:9c: be:46:0d:cf:1d:f8:83:af:95:2d:65:8c:39:72:84: 40:c7:4a:76:03:af:9b:97:c3:ff:68:d2:d1:d7:05: c1:c9:ca:45:1e:7d:94:b8:5f:a0:04:ad:e5:b3:9b: 62:f8:18:72:09:2c:58:21:ff:d4:3d:6a:76:46:99: 6c:a1:89:0a:a8:8e:20:be:e9:28:08:9f:a8:5a:d0: 41:cb:58:75:16:fe:0a:48:19:f0:3d:db:46:45:3d: 43:d9:b9:bf:4d:80:b5:af:b7:0c:9d:9a:4f:71:91: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:C8:84:2D:6B:30:C1:31:E5:1C:83:24:78:EF:C3:DE:5C:E7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a2:c5:2f:cc:a5:95:b9:05:cf:94:ae:30:ee:6a:bb:0d:43: 80:13:42:bf:79:2e:2b:b1:09:f9:25:7c:24:41:dc:79:ca:e6: a9:fb:61:c2:7d:50:b4:88:52:0e:6f:8c:0e:49:28:22:63:a7: a6:bb:75:8e:d3:0a:cb:6a:34:45:cc:93:54:a3:8a:74:3a:d5: 76:11:8d:d5:44:2b:7d:37:8a:c0:69:c3:00:47:93:75:61:0a: c8:ba:0d:c0:2f:a8:1a:9a:65:72:a1:db:b2:a4:cb:3b:bf:a2: 2f:c2:97:69:57:3f:05:c6:e1:59:ce:bc:7b:99:4b:b0:6f:79: a3:6a:e9:5b:1c:8e:c7:7f:f5:3c:53:79:3c:d9:30:6f:27:9d: 82:76:20:48:7b:58:1c:b7:28:9a:71:af:ae:d5:a2:8e:bb:0a: dd:f4:a0:a0:3f:a1:d6:96:85:ac:00:95:a6:46:89:ae:97:ef: 2e:4d:e9:40:2b:f4:f2:f5:62:89:53:a3:ee:f6:d6:78:90:02: 45:d3:a4:3a:a9:af:fb:de:8e:26:d2:15:85:aa:5d:60:a1:b7: e8:f6:11:50:92:30:83:14:a0:2c:71:2c:57:6d:81:17:1f:19: 22:80:9b:b9:23:fa:1f:99:5e:8b:b6:77:38:4d:6d:d9:4d:4c: 65:dc:bc:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCfJ5JQTZjreDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Mjk0YWU2NTQtOTFhOC00MWEwLThlNzAtNzg0YTRmNjY3ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAPMqEqIM6yIwYXiYMw3FqUfQ4jhG8RNPvlh Ykrj/C/bWGE0i8XTvRqbIbYkcSC+rhzUR5BgIXfewVJsQmCStKxw0bJQ2gyG90rH r6GMw5mu7UAIVtx5yTrGK5qaKCieNoyU3CBS7fReYpn2VyQGW6GxgUYdfMrUMc/L 0LdhW3ISjKF3ap/z8jHR3fySyIA6y/LLKJy+Rg3PHfiDr5UtZYw5coRAx0p2A6+b l8P/aNLR1wXBycpFHn2UuF+gBK3ls5ti+BhyCSxYIf/UPWp2RplsoYkKqI4gvuko CJ+oWtBBy1h1Fv4KSBnwPdtGRT1D2bm/TYC1r7cMnZpPcZHnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrjyIQtazDBMeUcgyR478PeXOdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZjFjNTU5ZmQtYzI0MC0z NjIwLTg4NWEtMDAyOTUxZWJmOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaixS/MpZW5Bc+UrjDuarsNQ4ATQr95LiuxCfklfCRB3HnK5qn7YcJ9 ULSIUg5vjA5JKCJjp6a7dY7TCstqNEXMk1SjinQ61XYRjdVEK303isBpwwBHk3Vh Csi6DcAvqBqaZXKh27Kkyzu/oi/Cl2lXPwXG4VnOvHuZS7BveaNq6Vscjsd/9TxT eTzZMG8nnYJ2IEh7WBy3KJpxr67Voo67Ct30oKA/odaWhawAlaZGia6X7y5N6UAr 9PL1YolTo+721niQAkXTpDqpr/vejibSFYWqXWCht+j2EVCSMIMUoCxxLFdtgRcf GSKAm7kj+h+ZXou2dzhNbdlNTGXcvEs= -----END CERTIFICATE-----Generated at Wed Oct 8 17:28:09 2025 by rpki-client