$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa File: 007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa (raw, json) Hash identifier: JTu50/4AZZncyf9mePw9zs7HN2ckcBEZl0Dw1oi3C78= Subject key identifier: E1:09:76:79:17:25:38:DB:04:C3:44:64:FA:DF:83:77:D7:3E:AE:47 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A43DB02CEA77884AB73B69000 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 3629 IP address blocks: 199.109.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:02:ce:a7:78:84:ab:73:b6:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=4a336d20-bb5a-4673-8bd8-1f186c01cd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:4d:b8:8b:8e:69:c9:3c:e3:de:68:92:49: 2a:ec:cd:68:b0:69:09:f8:7b:fb:74:0a:44:02:c5: 10:26:58:de:0f:fa:35:ff:6e:d0:11:fa:d1:80:b3: 62:a1:ec:2c:e9:33:d7:d5:64:ba:ba:28:26:69:47: b6:1a:69:73:26:5f:28:6e:9e:15:ab:62:64:b4:20: f9:c3:36:9c:41:d6:80:6e:40:0b:9b:c9:e3:15:51: 96:6d:30:8e:fd:6f:98:85:b6:5f:ac:6c:f9:d1:4f: 44:0f:2d:16:bc:c1:d1:51:00:6c:c4:3a:16:00:a6: 10:ed:74:37:66:a5:ee:ba:c6:1e:8a:d7:bb:ab:26: 73:78:4c:44:76:1c:fc:f7:4b:62:06:e8:63:0e:f1: 1c:7c:c2:1a:6d:68:2d:71:80:3c:cb:f6:30:69:76: 0a:55:d9:86:be:22:fb:65:65:2f:fc:11:28:fe:36: 05:9a:54:db:ea:d1:af:e9:d2:a8:ce:6e:4f:62:e4: 29:f1:8a:e2:18:fb:89:40:1c:24:8f:81:8f:b1:87: 28:46:86:43:8c:c8:18:15:f9:49:2f:90:0f:6a:1c: 1b:df:83:53:84:4a:91:7d:f6:76:84:ff:19:96:a4: 75:62:98:04:75:cc:66:fa:af:56:3a:d2:31:ca:ae: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:09:76:79:17:25:38:DB:04:C3:44:64:FA:DF:83:77:D7:3E:AE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/007dc9f3-4575-3a4f-9785-9e7a87082c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:16:5b:04:8a:0d:1a:fc:e9:57:d5:60:99:ea:f5:62:24:79: 35:70:7d:c1:19:07:55:d1:a5:96:9f:f1:95:e4:bd:31:70:2f: 2f:7a:b7:ed:3e:6a:05:9d:f4:9c:6c:ff:00:83:d5:8e:d8:b3: 60:75:54:0b:ac:f7:b3:4e:ac:82:13:d2:4e:3e:84:0e:d1:d2: 72:34:ad:00:29:b4:f0:40:04:09:5d:b4:38:63:94:43:e6:6e: fd:18:2e:37:97:30:8e:87:15:f6:d4:e9:3b:2f:d2:1a:76:a7: f3:7d:c3:e3:fd:9c:f5:34:c0:95:01:2f:f5:52:cf:40:88:ff: 34:c0:d0:d8:f1:59:d7:09:0f:60:68:d4:55:d5:3c:3d:10:bf: 98:8e:5c:17:08:57:89:31:ed:2b:9e:82:20:b2:07:72:48:f7: d1:7f:a3:7a:4a:f1:03:b3:38:33:1e:c3:f9:79:dd:6a:1e:fc: 0a:58:59:9c:83:20:47:f6:ac:cf:50:4f:87:37:2d:4e:7d:32: 7c:3e:37:17:d5:0b:10:9d:84:0f:13:74:35:71:eb:a9:b0:0f: e8:e2:b0:b6:ad:18:c6:57:77:ec:e9:91:e0:d6:9a:5d:ce:26: da:f4:2a:e9:fb:e5:8f:ce:a7:2c:e5:ef:7d:21:4d:ea:3f:12: 04:55:00:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wLOp3iEq3O2kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NGEzMzZkMjAtYmI1YS00NjczLThiZDgtMWYxODZjMDFjZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeNNuIuOack8495okkkq7M1osGkJ+Hv7dApE AsUQJljeD/o1/27QEfrRgLNioews6TPX1WS6uigmaUe2GmlzJl8obp4Vq2JktCD5 wzacQdaAbkALm8njFVGWbTCO/W+YhbZfrGz50U9EDy0WvMHRUQBsxDoWAKYQ7XQ3 ZqXuusYeite7qyZzeExEdhz890tiBuhjDvEcfMIabWgtcYA8y/YwaXYKVdmGviL7 ZWUv/BEo/jYFmlTb6tGv6dKozm5PYuQp8YriGPuJQBwkj4GPsYcoRoZDjMgYFflJ L5APahwb34NThEqRffZ2hP8ZlqR1YpgEdcxm+q9WOtIxyq73TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEJdnkXJTjbBMNEZPrfg3fXPq5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMDA3ZGM5ZjMtNDU3NS0z YTRmLTk3ODUtOWU3YTg3MDgyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx21QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4WWwSKDRr86VfVYJnq9WIkeTVwfcEZB1XRpZaf8ZXkvTFwLy96t+0+ agWd9Jxs/wCD1Y7Ys2B1VAus97NOrIIT0k4+hA7R0nI0rQAptPBABAldtDhjlEPm bv0YLjeXMI6HFfbU6Tsv0hp2p/N9w+P9nPU0wJUBL/VSz0CI/zTA0NjxWdcJD2Bo 1FXVPD0Qv5iOXBcIV4kx7SuegiCyB3JI99F/o3pK8QOzODMew/l53Woe/ApYWZyD IEf2rM9QT4c3LU59Mnw+NxfVCxCdhA8TdDVx66mwD+jisLatGMZXd+zpkeDWml3O Jtr0Kun75Y/Opyzl730hTeo/EgRVAOU= -----END CERTIFICATE-----Generated at Mon Jun 30 08:43:02 2025 by rpki-client