$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa File: c51db7b0-d443-3350-bd1d-cc0d3d232304.roa (raw, json) Hash identifier: poO+YiC83nSVpfNk6eLejx+azRwMiDWGJ4TyiKYbm5g= Subject key identifier: 00:6E:6B:3C:0D:E6:82:9F:1E:B7:E1:22:45:BC:31:A3:90:BE:C0:10 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A411054A296AF2CC95D1850C0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 3756 IP address blocks: 199.109.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:54:a2:96:af:2c:c9:5d:18:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=b7474c9f-54ac-40b2-9021-36dd65ff37cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:07:73:9d:ec:35:ad:3f:2a:fa:f4:b3:2b: 66:c8:26:44:36:16:7e:19:6b:40:8e:14:08:66:57: 76:4c:5a:75:ab:ce:38:d0:77:d9:d3:59:e3:ea:f7: 11:34:06:8e:85:59:6f:36:ee:cc:02:1f:7c:7f:0b: 0e:44:ac:48:db:80:3c:c4:41:4b:8f:40:26:5b:ec: a2:e6:4e:be:97:0f:6d:92:63:30:31:70:dc:2e:1b: 0c:79:d8:61:4c:31:b7:d7:b5:d8:1f:ff:24:5d:c5: 93:52:83:61:32:19:a6:80:2e:7c:a9:f8:1d:4d:51: d2:99:52:06:38:dd:8f:e6:b1:22:bd:e1:a8:6d:ac: 89:b3:97:aa:63:68:ff:29:99:bf:5a:cd:a7:0c:ce: ae:fb:de:37:0b:d8:ab:3e:4e:20:32:f7:53:51:cc: 47:8e:06:55:07:39:85:3a:19:e3:6d:3f:70:a5:29: 9d:1e:09:b7:ad:19:e7:a3:ab:21:a4:56:3a:a1:64: 25:f8:c4:92:ec:b3:e4:b2:bc:ec:d5:52:e8:5e:1d: 46:a3:76:4a:eb:95:a4:50:cc:de:c2:25:a9:a7:a7: 50:46:c3:50:11:60:84:75:10:e8:d0:0e:45:c2:f9: 34:93:da:71:f9:5c:c5:70:d8:a1:05:9a:94:4b:81: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6E:6B:3C:0D:E6:82:9F:1E:B7:E1:22:45:BC:31:A3:90:BE:C0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c51db7b0-d443-3350-bd1d-cc0d3d232304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fc:ce:b9:7e:f0:04:9e:c7:98:01:e3:d6:62:d8:2f:0b:3c: 28:4c:7f:76:60:07:6d:f6:b5:37:34:fc:f5:0a:9e:40:d3:ad: 26:ca:1b:ee:52:f6:77:1d:48:ba:26:e7:ea:28:7a:58:5d:1b: 85:ae:c3:07:ab:95:b4:1f:c2:b8:fb:ee:4d:6a:a2:17:d4:a6: ef:5a:13:b4:57:c9:77:17:88:66:79:16:85:39:f3:a6:b9:e9: 66:de:6b:ff:78:2e:4f:3d:9c:72:2c:43:13:95:c9:b6:6d:74: 26:89:a8:50:45:a2:00:56:2d:45:3c:40:ad:e3:87:55:9d:fb: a6:21:e6:cf:74:c1:d3:64:fb:f3:f1:c4:95:3d:d8:6e:09:c2: e6:26:d8:8a:98:36:91:a1:7d:4d:71:16:39:89:90:77:34:cd: 82:74:5b:cd:f3:7d:7c:20:66:89:e0:e6:f0:6d:7a:3d:1e:4a: 49:7b:5f:24:15:a6:24:5e:16:66:c6:11:c4:d4:51:a9:d3:b0: 2e:5d:f0:a5:70:66:4d:68:ff:60:e9:f0:47:7d:58:b9:21:60: 70:2e:9f:ff:56:09:6c:fd:d2:36:ff:02:76:85:f6:31:b8:19: cb:9d:ca:76:af:c9:d0:d4:7f:ad:5c:b2:6d:46:d6:27:d2:2e: 49:56:d6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFSilq8syV0YUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk Yjc0NzRjOWYtNTRhYy00MGIyLTkwMjEtMzZkZDY1ZmYzN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcAHc53sNa0/Kvr0sytmyCZENhZ+GWtAjhQI Zld2TFp1q8440HfZ01nj6vcRNAaOhVlvNu7MAh98fwsORKxI24A8xEFLj0AmW+yi 5k6+lw9tkmMwMXDcLhsMedhhTDG317XYH/8kXcWTUoNhMhmmgC58qfgdTVHSmVIG ON2P5rEiveGobayJs5eqY2j/KZm/Ws2nDM6u+943C9irPk4gMvdTUcxHjgZVBzmF OhnjbT9wpSmdHgm3rRnno6shpFY6oWQl+MSS7LPksrzs1VLoXh1Go3ZK65WkUMze wiWpp6dQRsNQEWCEdRDo0A5Fwvk0k9px+VzFcNihBZqUS4FBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABuazwN5oKfHrfhIkW8MaOQvsAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzUxZGI3YjAtZDQ0My0z MzUwLWJkMWQtY2MwZDNkMjMyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL8zrl+8ASex5gB49Zi2C8LPChMf3ZgB232tTc0/PUKnkDTrSbKG+5S 9ncdSLom5+ooelhdG4WuwwerlbQfwrj77k1qohfUpu9aE7RXyXcXiGZ5FoU586a5 6Wbea/94Lk89nHIsQxOVybZtdCaJqFBFogBWLUU8QK3jh1Wd+6Yh5s90wdNk+/Px xJU92G4JwuYm2IqYNpGhfU1xFjmJkHc0zYJ0W83zfXwgZong5vBtej0eSkl7XyQV piReFmbGEcTUUanTsC5d8KVwZk1o/2Dp8Ed9WLkhYHAun/9WCWz90jb/AnaF9jG4 GcudynavydDUf61csm1G1ifSLklW1o8= -----END CERTIFICATE-----Generated at Mon Jun 30 16:04:53 2025 by rpki-client