$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa File: 8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa (raw, json) Hash identifier: 0yjJSc6v2Aknhg5lZ1X9rJull6BGLJZV4I5dK78dZNw= Subject key identifier: 01:9F:13:65:99:8B:48:9D:75:7C:EE:F4:CB:DA:0F:F9:C4:1D:F0:CE Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584AD23BCF8DB475A504C0997F00 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3630 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:cf:8d:b4:75:a5:04:c0:99:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1adf7a0f-1ba2-4fb5-bb46-e01e46503ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:fc:03:bd:fa:cd:a6:44:02:7d:93:02:1d: bd:c1:7a:97:8e:e3:67:1e:5f:75:3c:14:d8:99:23: 8e:02:0c:58:a0:b9:a5:e4:a0:c8:3c:bb:6a:9f:36: 82:74:71:da:94:dc:ee:e0:f4:c8:79:c4:e4:cd:4a: 21:fe:2b:55:60:80:83:3d:9b:af:f2:fd:bb:26:74: 30:8e:50:96:2e:58:d5:d4:38:37:ed:1b:7d:11:77: 55:39:12:79:e1:e4:bf:ce:ec:73:54:44:d1:d3:9f: 22:15:a9:02:88:02:42:05:5c:e6:65:0f:48:11:d9: 67:23:c3:89:54:85:4e:54:d3:30:e3:d2:cf:d4:9a: e8:b2:c5:fd:80:bb:32:86:05:b1:9c:29:3a:8b:6d: 81:98:42:32:b5:39:f7:65:69:b7:2d:22:48:2e:04: 9c:75:8b:00:56:d8:30:9f:2b:4d:3c:32:e0:66:13: d4:aa:47:d7:8c:ab:05:cd:f1:72:8a:c3:47:9a:02: 64:46:4f:d9:72:ef:6c:6d:04:3a:a3:72:76:a0:ec: 78:3d:fb:5c:8c:b2:d6:d7:17:32:61:5e:3d:7a:32: 2b:cd:03:0d:54:ae:e9:39:00:a6:dd:8e:f0:65:09: 54:d0:ed:25:c0:12:77:a1:b7:54:4b:60:70:19:d8: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9F:13:65:99:8B:48:9D:75:7C:EE:F4:CB:DA:0F:F9:C4:1D:F0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d9:0d:0e:f4:f0:51:93:93:72:84:c8:d3:75:cb:32:b4:ae: 5b:b5:7b:36:25:9a:d0:f5:af:21:56:98:e1:b9:b2:90:2e:14: c7:0c:dc:b2:b3:2c:bb:59:34:28:89:9b:b0:a4:29:81:5d:2b: 42:22:03:76:68:99:af:f3:6f:72:2b:f0:20:10:a0:8b:1c:ac: b0:7f:17:bb:14:ed:3e:a5:33:70:55:07:1f:ac:bb:81:60:5f: db:ba:17:cc:44:01:22:b2:55:36:18:59:d9:77:b9:e7:84:9d: 7b:03:e3:5c:ef:1c:58:ab:07:51:95:63:85:c8:77:d1:ca:b4: 99:c9:9b:ad:3e:42:8c:80:cf:6d:98:de:75:8e:4d:e0:66:fd: 5e:b0:3e:4a:fa:6b:ac:20:5d:79:f1:89:c4:22:88:c9:1d:b7: 7e:60:68:44:2a:9c:dd:af:e4:d3:aa:ee:30:01:97:16:9b:9d: 24:19:7e:94:6c:05:05:fd:91:eb:0a:92:4e:82:35:01:a8:86: 23:d7:0e:95:c4:d8:72:1f:94:cd:15:d8:a7:e4:56:5a:aa:07: 4e:15:f3:07:d9:38:13:ec:4a:27:fb:2d:6e:ff:44:db:65:ef: 84:49:c1:ff:33:0c:4b:b8:6d:7c:cd:91:73:28:24:74:17:27: 9c:36:57:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8+NtHWlBMCZfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MWFkZjdhMGYtMWJhMi00ZmI1LWJiNDYtZTAxZTQ2NTAzZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdv8A736zaZEAn2TAh29wXqXjuNnHl91PBTY mSOOAgxYoLml5KDIPLtqnzaCdHHalNzu4PTIecTkzUoh/itVYICDPZuv8v27JnQw jlCWLljV1Dg37Rt9EXdVORJ54eS/zuxzVETR058iFakCiAJCBVzmZQ9IEdlnI8OJ VIVOVNMw49LP1JrossX9gLsyhgWxnCk6i22BmEIytTn3ZWm3LSJILgScdYsAVtgw nytNPDLgZhPUqkfXjKsFzfFyisNHmgJkRk/Zcu9sbQQ6o3J2oOx4PftcjLLW1xcy YV49ejIrzQMNVK7pOQCm3Y7wZQlU0O0lwBJ3obdUS2BwGdgfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGfE2WZi0iddXzu9MvaD/nEHfDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvOGFjMDM1MjktZmU3YS0z MGE4LWFhODgtYjM4MDlmMTNkNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALZDQ708FGTk3KEyNN1yzK0rlu1ezYlmtD1ryFWmOG5spAuFMcM3LKz LLtZNCiJm7CkKYFdK0IiA3Zoma/zb3Ir8CAQoIscrLB/F7sU7T6lM3BVBx+su4Fg X9u6F8xEASKyVTYYWdl3ueeEnXsD41zvHFirB1GVY4XId9HKtJnJm60+QoyAz22Y 3nWOTeBm/V6wPkr6a6wgXXnxicQiiMkdt35gaEQqnN2v5NOq7jABlxabnSQZfpRs BQX9kesKkk6CNQGohiPXDpXE2HIflM0V2KfkVlqqB04V8wfZOBPsSif7LW7/RNtl 74RJwf8zDEu4bXzNkXMoJHQXJ5w2V7c= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:31 2025 by rpki-client