$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa File: cd6f640d-6126-3532-82b5-d912ca3486c0.roa (raw, json) Hash identifier: Eno5LaOrPnmBWWxaUmWAVXjwQE4YONBhrVS8C5V46hc= Subject key identifier: AF:63:AC:44:45:09:1F:C8:EF:EA:06:0F:93:72:33:12:12:6E:9D:00 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F454284A8453806AB5BA7A000 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 3756 IP address blocks: 199.109.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:84:a8:45:38:06:ab:5b:a7:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=a3587712-5c72-4ffe-b978-595f73c2c503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:37:90:cd:bd:b3:f6:11:c6:1e:aa:26:e3:71: 30:60:38:0f:ff:c6:97:c4:da:e8:1d:33:00:e4:c3: 82:b5:9f:29:8d:6e:8a:fe:30:3b:1d:19:b6:cb:1c: 70:4e:c5:c8:70:50:06:9b:ca:8f:41:a4:e9:5f:04: 74:74:71:c5:83:da:c1:7e:f6:93:ec:0e:35:b2:ec: b0:f5:f3:2c:ed:ad:59:6f:8d:c3:a4:4e:f9:80:7d: 1c:cd:fb:46:55:c0:93:62:59:28:bf:65:33:03:32: c9:12:79:ca:38:64:6c:a1:29:88:af:91:f1:c1:ba: 75:a7:3e:97:8e:08:12:16:0e:9e:15:af:e1:e9:65: f1:c0:e5:4e:f4:aa:40:0a:96:0f:d6:f1:b8:6e:dd: 72:3f:cf:87:10:af:0a:82:6a:7e:28:7f:30:2f:3f: 1b:aa:a0:db:59:ae:44:70:bb:22:79:47:e0:58:57: 03:ed:3c:f4:62:04:d6:9e:c2:77:28:ea:44:8c:cd: ac:90:48:f9:e8:47:41:22:a9:2e:08:92:3f:7f:e5: a4:93:31:20:d1:5c:95:95:d4:8c:c8:74:24:30:0d: 9a:e5:e3:7e:b6:b2:ee:02:d2:d8:20:82:31:47:06: 7a:d8:64:df:2f:46:ec:70:8b:76:8f:38:79:06:12: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:AC:44:45:09:1F:C8:EF:EA:06:0F:93:72:33:12:12:6E:9D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d6:1d:dc:77:4e:56:3c:ea:c7:4d:38:6f:62:87:be:25:66: e1:b6:62:fb:9e:d7:50:fa:70:8b:d6:82:b3:d2:50:55:44:49: 2a:25:9f:d3:f6:40:b0:83:a1:ac:3e:3e:6f:4b:6f:e0:7c:9c: 14:f6:59:9f:5e:2f:91:63:b9:e7:c0:b4:af:ea:42:6a:68:f9: 3e:35:57:cf:70:64:28:d4:34:1f:19:e5:d7:80:d5:3c:7e:f0: 6e:e3:a9:aa:bd:3b:9e:bd:81:dd:5c:43:0f:4e:d3:f8:08:24: 73:f6:b2:e3:14:ec:4d:51:e5:1c:bb:c6:0f:ea:be:68:dc:b3: fd:f5:c5:c0:a6:a2:c2:94:01:7f:8a:e0:35:31:10:31:2d:d6: c9:c9:a4:92:88:c1:e2:42:14:30:46:60:e1:aa:11:2b:95:43: 45:a2:73:8e:d7:90:25:ea:52:22:35:b8:38:06:e3:98:81:df: 86:92:be:6a:8a:8b:99:35:dd:7d:e9:d6:cc:f9:0c:be:55:17: 57:26:a1:be:94:9f:30:0e:67:44:c9:6a:28:42:49:0f:ad:f8: 3b:52:c7:95:55:9c:df:8e:c7:48:75:c7:3a:c6:a7:98:df:55: 08:18:49:2e:cd:78:3a:5a:6f:38:5d:2b:5a:27:28:91:a3:d7: 96:01:82:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoSoRTgGq1unoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YTM1ODc3MTItNWM3Mi00ZmZlLWI5NzgtNTk1ZjczYzJjNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TeQzb2z9hHGHqom43EwYDgP/8aXxNroHTMA 5MOCtZ8pjW6K/jA7HRm2yxxwTsXIcFAGm8qPQaTpXwR0dHHFg9rBfvaT7A41suyw 9fMs7a1Zb43DpE75gH0czftGVcCTYlkov2UzAzLJEnnKOGRsoSmIr5Hxwbp1pz6X jggSFg6eFa/h6WXxwOVO9KpACpYP1vG4bt1yP8+HEK8Kgmp+KH8wLz8bqqDbWa5E cLsieUfgWFcD7Tz0YgTWnsJ3KOpEjM2skEj56EdBIqkuCJI/f+WkkzEg0VyVldSM yHQkMA2a5eN+trLuAtLYIIIxRwZ62GTfL0bscIt2jzh5BhK6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9jrERFCR/I7+oGD5NyMxISbp0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2Q2ZjY0MGQtNjEyNi0z NTMyLTgyYjUtZDkxMmNhMzQ4NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbWHdx3TlY86sdNOG9ih74lZuG2Yvue11D6cIvWgrPSUFVESSoln9P2 QLCDoaw+Pm9Lb+B8nBT2WZ9eL5FjuefAtK/qQmpo+T41V89wZCjUNB8Z5deA1Tx+ 8G7jqaq9O569gd1cQw9O0/gIJHP2suMU7E1R5Ry7xg/qvmjcs/31xcCmosKUAX+K 4DUxEDEt1snJpJKIweJCFDBGYOGqESuVQ0Wic47XkCXqUiI1uDgG45iB34aSvmqK i5k13X3p1sz5DL5VF1cmob6UnzAOZ0TJaihCSQ+t+DtSx5VVnN+Ox0h1xzrGp5jf VQgYSS7NeDpabzhdK1onKJGj15YBgr0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:00:00 2026 by rpki-client