$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json) Hash identifier: 2BG9Eb2Ic8ADBzidHB6M8SH/+KIPetRbmsnYP0GH0MU= Subject key identifier: F1:CD:A5:02:CE:27:C1:AD:28:22:BA:75:F8:4A:24:9E:D4:E9:AF:D7 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A43DAFB817D6321251D91ECC0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 3754 IP address blocks: 199.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:fb:81:7d:63:21:25:1d:91:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=27594a01-2c36-44e4-8d52-d42a007cb6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:28:65:db:c6:ee:10:5a:33:c5:84:98:1d: 7d:fd:50:a7:aa:54:ae:80:29:63:00:3c:d6:ee:2c: 49:95:6c:0d:6e:d2:d8:48:8e:96:08:58:47:02:04: 91:27:61:72:05:f4:c4:dc:9f:f1:ee:c3:5c:a1:f8: e4:48:83:1a:a4:3b:6e:40:5f:b1:40:ca:6a:23:ca: 70:dd:c1:4f:13:f0:a8:b2:46:84:25:24:09:76:05: 81:c3:5f:66:32:95:ab:2f:e3:30:01:0d:72:56:ba: 3b:05:f8:30:4f:37:ed:b9:23:30:e7:5a:bd:e6:9d: fc:6a:39:7a:dd:94:8a:63:db:57:3d:ee:af:28:ce: 1e:8f:19:15:1d:f0:6b:16:02:3e:3b:5e:7e:db:2f: ac:a1:e5:4d:3d:3f:d8:ec:5c:75:97:20:d3:6e:ba: 3e:85:b6:e1:db:24:23:17:47:26:89:9e:4e:9c:b4: 83:2b:24:ca:92:b5:c0:eb:34:c3:14:be:c4:79:3d: 4d:c2:98:f3:62:08:8c:33:d1:6d:94:ef:cd:fc:0d: 31:7e:b8:3e:ca:41:f9:d2:4f:f4:a6:ef:04:7b:96: ec:5a:67:f0:fc:fb:84:2f:4e:a5:9e:1b:99:b2:a1: 94:f6:06:28:1e:1c:3b:0d:8d:c9:dc:e9:63:29:4e: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CD:A5:02:CE:27:C1:AD:28:22:BA:75:F8:4A:24:9E:D4:E9:AF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ed:6b:5c:31:cc:d3:83:9e:97:bd:ef:a2:a8:f9:5d:61:bb: ef:10:4f:95:42:c9:52:d9:e5:19:d0:fb:92:60:53:14:3c:00: 0f:21:ed:2f:98:52:43:4e:5c:a6:af:a8:59:d4:3b:05:7b:6f: 4e:49:2e:94:28:6a:23:6e:1e:33:a7:45:6d:25:30:dd:fb:c7: f9:24:3b:c0:16:6b:fd:14:47:df:f7:da:7f:3f:d2:82:0f:7a: b3:e4:df:c3:e8:22:8c:78:82:43:31:88:77:cd:24:0b:0c:e4: 3b:0a:cc:88:1a:ea:41:a1:28:7b:ce:63:58:04:d8:02:53:0a: a9:5c:a7:1f:cd:fc:ec:fc:f6:57:df:78:44:e2:d2:07:5f:d9: 79:6a:75:f4:11:43:67:f9:01:99:54:d9:53:fb:6c:02:14:ad: 84:0c:e7:e9:73:ce:cd:00:ca:f5:9a:2f:09:42:bd:e1:44:03: 8a:99:ed:a9:38:0c:ce:fa:b2:f2:36:05:32:6b:eb:25:ed:f3: 97:ea:6b:3f:f9:aa:2e:04:16:1e:83:08:9a:0c:d9:28:aa:72: ff:7a:e2:7a:3d:71:9c:64:29:a5:79:91:99:f6:7e:bb:d1:99: fb:13:3c:98:cf:70:81:a5:d0:be:74:ab:ad:61:cf:52:6c:b2: 64:32:f6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2vuBfWMhJR2R7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk Mjc1OTRhMDEtMmMzNi00NGU0LThkNTItZDQyYTAwN2NiNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqYoZdvG7hBaM8WEmB19/VCnqlSugCljADzW 7ixJlWwNbtLYSI6WCFhHAgSRJ2FyBfTE3J/x7sNcofjkSIMapDtuQF+xQMpqI8pw 3cFPE/CoskaEJSQJdgWBw19mMpWrL+MwAQ1yVro7BfgwTzftuSMw51q95p38ajl6 3ZSKY9tXPe6vKM4ejxkVHfBrFgI+O15+2y+soeVNPT/Y7Fx1lyDTbro+hbbh2yQj F0cmiZ5OnLSDKyTKkrXA6zTDFL7EeT1NwpjzYgiMM9FtlO/N/A0xfrg+ykH50k/0 pu8Ee5bsWmfw/PuEL06lnhuZsqGU9gYoHhw7DY3J3OljKU5fAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHNpQLOJ8GtKCK6dfhKJJ7U6a/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzRkN2Y1YmUtNzNjOC0z MDJhLTk5MWUtYTU5NTJhYzI2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3ta1wxzNODnpe976Ko+V1hu+8QT5VCyVLZ5RnQ+5JgUxQ8AA8h7S+Y UkNOXKavqFnUOwV7b05JLpQoaiNuHjOnRW0lMN37x/kkO8AWa/0UR9/32n8/0oIP erPk38PoIox4gkMxiHfNJAsM5DsKzIga6kGhKHvOY1gE2AJTCqlcpx/N/Oz89lff eETi0gdf2XlqdfQRQ2f5AZlU2VP7bAIUrYQM5+lzzs0AyvWaLwlCveFEA4qZ7ak4 DM76svI2BTJr6yXt85fqaz/5qi4EFh6DCJoM2Siqcv964no9cZxkKaV5kZn2frvR mfsTPJjPcIGl0L50q61hz1JssmQy9o4= -----END CERTIFICATE-----Generated at Mon Jun 30 08:49:38 2025 by rpki-client