$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa File: 3cc8c09c-1655-353c-9029-9838f4886d8f.roa (raw, json) Hash identifier: 1kdSxT5LX+FzKYyAANQLoD+6CEmg1pkR8REFkQBez7s= Subject key identifier: B7:54:19:18:FB:44:62:CE:90:2D:6A:84:92:47:4D:CE:64:9E:4D:E7 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584DCAFAFE453D374D810F96F580 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 3756 IP address blocks: 199.110.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:fe:45:3d:37:4d:81:0f:96:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=747af480-08b9-42f4-8a48-453101208417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:57:d9:7b:e5:28:4c:47:45:b4:16:97:19: 13:11:e2:b4:2e:fa:a8:91:90:f3:ed:d9:31:30:b0: ab:1c:4f:8d:cc:cf:7d:44:a1:7c:5b:73:1d:7b:e7: 24:e1:38:9e:09:d7:b0:8e:e8:e8:f6:3c:8d:d3:0b: ff:44:6f:08:75:c1:de:d2:b2:72:00:63:a5:4c:5b: 33:1b:b5:c8:01:a0:8c:44:c5:5c:e3:2a:3a:d2:4d: 43:0d:2a:0d:8b:e0:24:14:74:0f:3c:d5:be:1f:ba: f0:b0:00:be:06:e9:27:90:73:b9:55:aa:3f:19:ca: b7:1c:9a:ea:a2:ce:5d:53:95:c6:1c:e4:44:e9:00: f7:50:0e:bb:a1:a3:b7:7f:20:17:51:4e:5e:b5:8f: 26:48:75:b1:3a:66:0d:37:ad:74:37:f7:9a:4d:0d: a9:3d:8c:8b:51:75:e9:01:ac:f2:bc:a1:00:27:df: ed:51:8b:b7:ef:96:37:b1:63:85:14:ab:19:46:35: c7:c0:f3:de:0a:2e:8c:6e:15:00:24:67:84:ed:37: 74:0e:b7:3b:e8:4b:68:b0:e0:0f:bf:7a:16:2f:8f: 8f:e2:09:c7:e0:88:8f:8b:ba:8c:a6:c2:d9:ef:c3: b5:a3:38:03:ef:11:79:57:ea:73:e1:83:12:29:94: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:54:19:18:FB:44:62:CE:90:2D:6A:84:92:47:4D:CE:64:9E:4D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.110.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ec:a9:fb:1f:db:47:7f:f6:2f:9c:47:9d:3a:be:fd:f8:4d: fb:69:0f:14:25:5d:9d:f0:55:93:8a:2e:05:8b:fa:c6:5a:d2: c4:f7:f1:5d:36:5b:3d:9f:32:b4:d6:1e:7c:b2:b6:3d:30:ac: b8:24:f2:2c:d4:36:0c:ab:f1:9c:b7:1f:e7:c9:c5:ed:51:ce: cb:59:ed:39:fe:77:d7:61:1a:e1:bd:e4:d7:e7:17:80:b7:51: 64:3e:05:6d:87:d8:6c:99:04:7f:cd:61:6a:14:74:e3:8f:e7: 32:21:c8:42:39:9f:ea:b5:c3:bc:01:e4:07:80:16:38:68:8b: e4:4e:f9:f1:e0:ee:8a:25:91:0c:0a:66:bf:0f:97:27:3a:ba: 92:05:af:2a:71:44:d3:65:36:f9:28:3c:13:1a:5b:7e:aa:08: ba:2a:74:97:72:69:4d:d6:12:b1:4f:32:d2:8d:92:65:a8:fe: 83:61:a0:6e:0d:70:52:66:3f:76:9f:a2:b4:aa:a5:53:aa:1f: a3:4d:95:e0:d0:ec:cc:8a:42:f3:6d:11:e7:bc:da:99:9d:2c: b0:5a:27:82:0f:53:39:74:a6:38:89:34:7a:d3:f5:ad:82:70: e5:fc:e2:c7:23:72:f0:93:96:ef:26:93:99:79:d0:45:2b:54: 01:8a:75:be -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3K+v5FPTdNgQ+W9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk NzQ3YWY0ODAtMDhiOS00MmY0LThhNDgtNDUzMTAxMjA4NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A5X2XvlKExHRbQWlxkTEeK0LvqokZDz7dkx MLCrHE+NzM99RKF8W3Mde+ck4TieCdewjujo9jyN0wv/RG8IdcHe0rJyAGOlTFsz G7XIAaCMRMVc4yo60k1DDSoNi+AkFHQPPNW+H7rwsAC+BuknkHO5Vao/Gcq3HJrq os5dU5XGHORE6QD3UA67oaO3fyAXUU5etY8mSHWxOmYNN610N/eaTQ2pPYyLUXXp AazyvKEAJ9/tUYu375Y3sWOFFKsZRjXHwPPeCi6MbhUAJGeE7Td0Drc76EtosOAP v3oWL4+P4gnH4IiPi7qMpsLZ78O1ozgD7xF5V+pz4YMSKZQoSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLdUGRj7RGLOkC1qhJJHTc5knk3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvM2NjOGMwOWMtMTY1NS0z NTNjLTkwMjktOTgzOGY0ODg2ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAx24wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAuyp+x/bR3/2L5xHnTq+/fhN+2kPFCVdnfBVk4ouBYv6xlrSxPfxXTZb PZ8ytNYefLK2PTCsuCTyLNQ2DKvxnLcf58nF7VHOy1ntOf5312Ea4b3k1+cXgLdR ZD4FbYfYbJkEf81hahR044/nMiHIQjmf6rXDvAHkB4AWOGiL5E758eDuiiWRDApm vw+XJzq6kgWvKnFE02U2+Sg8ExpbfqoIuip0l3JpTdYSsU8y0o2SZaj+g2Ggbg1w UmY/dp+itKqlU6ofo02V4NDszIpC820R57zamZ0ssFongg9TOXSmOIk0etP1rYJw 5fzixyNy8JOW7yaTmXnQRStUAYp1vg== -----END CERTIFICATE-----Generated at Wed May 13 11:29:57 2026 by rpki-client