$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa File: cc87da93-3255-3602-b613-e525c61d041b.roa (raw, json) Hash identifier: 7dLLYu3rl9FqUkUJ/A2r6WCw+0diWpFEaUUVBTFnet8= Subject key identifier: BB:98:F0:A7:52:50:B9:07:C0:44:AE:B2:26:A9:E2:AE:EF:83:62:C0 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584DC56592CE7B0FC4A081C15D80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 3756 IP address blocks: 199.109.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:92:ce:7b:0f:c4:a0:81:c1:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=8bd5ad84-50f6-49e3-b429-2ab0599d3fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:40:25:7e:d9:4b:74:bd:56:e2:57:5b:89: ea:d8:4d:ec:1a:1b:5f:17:f7:f8:9f:2c:1e:a7:ef: 51:f6:9c:bf:8b:ed:d7:60:05:55:fb:7c:05:ef:b1: 00:82:cb:56:91:4b:42:ff:8a:2d:a6:4d:9a:c8:b2: 3f:c6:bf:2b:48:d3:a6:dc:2d:76:94:9e:5b:ab:90: ea:62:e7:b9:c8:2c:7b:d2:75:0f:92:57:d8:2d:13: d9:da:83:1a:d8:5f:bb:78:75:85:20:68:c0:70:05: e4:39:70:82:44:a1:22:9b:75:7a:5b:f6:4f:38:91: d4:83:4f:8f:d5:40:04:ca:86:5e:25:93:02:1b:92: ae:e9:78:52:20:92:b6:eb:0e:09:96:e6:60:cf:36: b0:62:07:f0:cf:55:ae:6f:59:98:23:09:3c:18:44: 21:c3:b3:3e:79:ef:bb:4d:e5:77:37:86:40:aa:3a: fa:44:89:1f:81:c9:fc:ed:6f:9e:56:b5:d5:fa:cb: d0:4d:a1:b7:e6:c2:c4:e1:31:d7:81:2c:e9:78:7b: c6:97:c6:6a:d7:b1:ea:80:b8:b5:95:0d:a0:ef:3c: ed:32:d1:6a:e8:3b:f6:6c:d3:1d:cd:aa:2f:ac:b5: d4:1d:af:60:05:ae:f1:92:f0:db:e2:84:cf:2a:01: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:98:F0:A7:52:50:B9:07:C0:44:AE:B2:26:A9:E2:AE:EF:83:62:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cc87da93-3255-3602-b613-e525c61d041b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:30:6e:1c:bb:5b:eb:91:89:ee:36:d3:de:2a:4a:f9:94:a1: 71:52:be:59:c9:35:33:8b:64:df:36:04:5d:d2:d9:44:e7:cf: 4e:92:46:7c:05:01:ff:25:41:8b:bc:8d:86:8d:09:8b:cf:54: 77:1a:e7:b6:4f:b4:4d:96:33:5d:f6:4b:e5:f2:07:12:02:4e: 5f:8d:78:cb:0d:d9:9c:a0:fe:89:64:df:59:2d:6c:29:df:52: 8d:6b:51:2c:25:2b:20:73:7c:59:1d:22:e3:95:78:60:33:1a: 92:e3:31:4a:e7:7c:be:51:1f:0d:7e:1a:23:d5:99:60:87:46: 10:2b:23:b3:17:4d:3d:a2:03:41:af:36:a5:09:77:58:cb:bf: 49:f9:c5:dc:1f:28:73:9d:de:ed:b0:51:f0:44:8c:a5:98:c8: 9b:df:c5:7a:5f:ad:54:19:86:46:4c:40:0a:f1:84:27:86:27: f1:2b:9c:b8:97:73:9c:af:28:c1:fa:83:73:fc:68:3d:ab:09: c5:e4:b3:d5:cd:bd:57:2f:a6:53:af:58:d4:23:c2:0b:c3:42: 18:99:32:8e:cb:c6:86:a1:0b:a2:40:e0:62:ea:a4:a3:cc:85: 1c:c8:88:a9:73:15:fe:e5:38:88:a2:09:0e:de:8e:ad:4b:19: 13:80:f3:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZLOew/EoIHBXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk OGJkNWFkODQtNTBmNi00OWUzLWI0MjktMmFiMDU5OWQzZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopVAJX7ZS3S9VuJXW4nq2E3sGhtfF/f4nywe p+9R9py/i+3XYAVV+3wF77EAgstWkUtC/4otpk2ayLI/xr8rSNOm3C12lJ5bq5Dq Yue5yCx70nUPklfYLRPZ2oMa2F+7eHWFIGjAcAXkOXCCRKEim3V6W/ZPOJHUg0+P 1UAEyoZeJZMCG5Ku6XhSIJK26w4JluZgzzawYgfwz1Wub1mYIwk8GEQhw7M+ee+7 TeV3N4ZAqjr6RIkfgcn87W+eVrXV+svQTaG35sLE4THXgSzpeHvGl8Zq17HqgLi1 lQ2g7zztMtFq6Dv2bNMdzaovrLXUHa9gBa7xkvDb4oTPKgG5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuY8KdSULkHwESusiap4q7vg2LAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2M4N2RhOTMtMzI1NS0z NjAyLWI2MTMtZTUyNWM2MWQwNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx20TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4wbhy7W+uRie42094qSvmUoXFSvlnJNTOLZN82BF3S2UTnz06SRnwF Af8lQYu8jYaNCYvPVHca57ZPtE2WM132S+XyBxICTl+NeMsN2Zyg/olk31ktbCnf Uo1rUSwlKyBzfFkdIuOVeGAzGpLjMUrnfL5RHw1+GiPVmWCHRhArI7MXTT2iA0Gv NqUJd1jLv0n5xdwfKHOd3u2wUfBEjKWYyJvfxXpfrVQZhkZMQArxhCeGJ/ErnLiX c5yvKMH6g3P8aD2rCcXks9XNvVcvplOvWNQjwgvDQhiZMo7LxoahC6JA4GLqpKPM hRzIiKlzFf7lOIiiCQ7ejq1LGROA88w= -----END CERTIFICATE-----Generated at Wed May 13 07:04:46 2026 by rpki-client