$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json) Hash identifier: pRqONu814wieYJyfurTWtwVrHFb/8GiNI7qu65T49r8= Subject key identifier: 84:C6:F8:65:57:6C:2E:81:C7:16:BA:C1:1A:40:6B:9B:F0:88:83:BB Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584DC5659380D168F5580B28C740 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 3754 IP address blocks: 199.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:93:80:d1:68:f5:58:0b:28:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=e5f9fbf5-c5bc-4bf7-be74-7642a0df2476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:68:c2:f0:23:ff:67:c9:81:6b:d0:b8:5f: 92:da:05:bb:d4:0b:e0:e6:bc:5b:bd:ff:00:a3:be: 44:c7:f3:fa:60:7d:3e:be:8b:02:48:fd:f4:2d:3d: c7:2f:57:79:61:75:33:20:4a:84:7b:1d:ec:15:37: d5:c2:c5:11:ca:94:29:63:e5:14:d1:74:15:45:09: 4e:6c:5f:81:79:6c:7e:52:7e:20:f6:14:4b:40:d8: 74:87:f6:96:fd:18:a3:b5:3a:dd:9b:5f:85:37:37: cd:ef:6d:42:3d:4c:fe:50:6c:16:93:73:5d:3f:ac: 1b:c7:96:e7:87:65:92:b1:87:b7:3b:73:9f:d8:58: a5:d1:81:f5:ec:10:8b:91:22:81:f1:d7:e5:57:6b: 19:ba:5e:34:fd:09:fc:65:95:d9:64:0c:60:cc:8d: c6:8b:8c:07:53:27:22:b8:bf:ec:3e:55:36:12:9e: da:eb:a9:90:19:a1:f8:7a:b6:36:33:49:dd:79:1d: 1e:82:5a:b8:69:fc:20:ff:0a:cb:8a:5e:62:cd:f6: 07:d6:d5:52:5b:e4:6b:12:b7:0b:54:fe:0e:dc:04: 4e:7d:3b:93:be:e6:83:f1:07:e7:33:a9:10:38:dc: fd:f1:a7:6a:42:42:1a:d5:97:39:8f:72:73:33:51: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:F8:65:57:6C:2E:81:C7:16:BA:C1:1A:40:6B:9B:F0:88:83:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c1:10:9f:e5:24:24:dd:07:f5:dc:10:ab:1e:c5:c7:1e:18: 9a:ac:1c:e0:76:b1:66:74:bc:0b:58:98:7d:58:e1:98:09:cf: 59:8a:44:c3:32:2a:46:b5:8a:ea:84:e3:2e:12:57:81:28:e4: 4c:24:d6:e4:a6:88:db:c0:0c:21:72:e3:8b:9b:c9:a0:79:ba: 07:4e:5b:72:9e:a9:f1:88:df:0b:a6:7b:ca:b7:47:7d:38:d2: 22:2b:1e:0c:b5:e3:66:bd:aa:fa:59:17:d8:0d:7e:5f:3a:be: 2b:eb:0d:c6:a0:30:97:d4:11:0e:24:09:8a:7c:8e:99:8c:c6: 5f:85:99:45:32:2c:09:3a:58:9c:de:dd:14:db:d6:67:b9:30: 9d:67:3f:71:0c:45:25:92:23:be:c2:9d:64:5a:87:9b:32:7d: 66:5d:31:fe:1e:92:c8:87:32:2a:a7:a6:9b:f3:4d:32:e3:2d: ed:56:f9:f7:0d:24:6c:cd:23:9e:d4:1b:54:61:11:01:09:ba: 00:01:82:d2:40:08:09:89:d1:00:71:ff:33:aa:96:bf:58:b0: 20:a4:a3:0b:aa:ec:cc:b5:d9:dd:71:bc:fd:46:c2:ae:7d:aa: c3:0a:b1:96:1f:aa:48:5e:64:11:d2:ef:d6:0a:57:8e:7f:5e: 8a:0b:c1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZOA0Wj1WAsox0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk ZTVmOWZiZjUtYzViYy00YmY3LWJlNzQtNzY0MmEwZGYyNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip5owvAj/2fJgWvQuF+S2gW71Avg5rxbvf8A o75Ex/P6YH0+vosCSP30LT3HL1d5YXUzIEqEex3sFTfVwsURypQpY+UU0XQVRQlO bF+BeWx+Un4g9hRLQNh0h/aW/RijtTrdm1+FNzfN721CPUz+UGwWk3NdP6wbx5bn h2WSsYe3O3Of2Fil0YH17BCLkSKB8dflV2sZul40/Qn8ZZXZZAxgzI3Gi4wHUyci uL/sPlU2Ep7a66mQGaH4erY2M0ndeR0eglq4afwg/wrLil5izfYH1tVSW+RrErcL VP4O3AROfTuTvuaD8QfnM6kQONz98adqQkIa1Zc5j3JzM1GERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITG+GVXbC6Bxxa6wRpAa5vwiIO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzRkN2Y1YmUtNzNjOC0z MDJhLTk5MWUtYTU5NTJhYzI2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzBEJ/lJCTdB/XcEKsexcceGJqsHOB2sWZ0vAtYmH1Y4ZgJz1mKRMMy Kka1iuqE4y4SV4Eo5Ewk1uSmiNvADCFy44ubyaB5ugdOW3KeqfGI3wume8q3R304 0iIrHgy142a9qvpZF9gNfl86vivrDcagMJfUEQ4kCYp8jpmMxl+FmUUyLAk6WJze 3RTb1me5MJ1nP3EMRSWSI77CnWRah5syfWZdMf4eksiHMiqnppvzTTLjLe1W+fcN JGzNI57UG1RhEQEJugABgtJACAmJ0QBx/zOqlr9YsCCkowuq7My12d1xvP1Gwq59 qsMKsZYfqkheZBHS79YKV45/XooLwQA= -----END CERTIFICATE-----Generated at Wed May 13 07:04:44 2026 by rpki-client