$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa File: cd6f640d-6126-3532-82b5-d912ca3486c0.roa (raw, json) Hash identifier: fdCtk1yUlVHbgG1bmkWLK8hyFo+HbgqB8wk3Yiyxxkg= Subject key identifier: A8:08:E6:AC:0C:57:70:4C:66:96:45:7D:44:51:CB:56:88:B5:0E:7A Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584A41104F3BB72C380625B8C580 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 3756 IP address blocks: 199.109.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4f:3b:b7:2c:38:06:25:b8:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=8562e24e-6c10-4286-9b92-8de8c9c59506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:03:fa:fa:f6:76:59:a9:d0:c9:60:1e:25: 04:20:98:ee:2c:a5:a9:9d:ad:b5:d1:58:b3:52:dd: 9e:cd:0e:1a:a3:e8:f2:d5:3b:9b:6a:3b:25:95:b6: 52:3f:c2:b0:46:e9:f4:31:f0:b2:7b:8e:63:5f:20: 7c:55:1a:c5:78:56:61:4e:34:e0:ed:8a:4b:9d:83: 3b:a1:a3:c1:3b:95:01:4f:85:aa:3c:bd:6b:bb:3b: f3:f0:a5:8a:09:d1:0f:4f:d6:f3:2b:b7:87:3c:6b: b1:55:53:bf:da:6a:75:89:ed:70:3e:cc:85:44:37: 31:1c:1c:92:b6:1a:68:f8:62:53:94:ed:96:fd:97: 87:89:07:9e:6b:38:c6:23:b6:d2:df:cd:8a:90:81: d4:46:70:e5:8b:5a:18:85:5f:7f:9f:be:36:dc:fb: cf:00:ab:20:78:2c:39:08:8f:19:f2:99:1c:b8:16: 2c:a8:ee:88:02:e6:8e:6e:96:b0:52:34:27:28:1d: 15:fe:e4:09:df:cc:bb:8b:dc:10:2f:5b:a6:e1:72: d1:f8:4e:ae:db:1a:b8:6e:52:a0:68:06:f4:3c:95: 9a:c6:da:fa:2b:ca:af:7a:c6:76:77:87:bb:94:c9: 25:0b:d7:ee:c9:1e:6e:fd:99:1e:51:f5:90:28:48: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:08:E6:AC:0C:57:70:4C:66:96:45:7D:44:51:CB:56:88:B5:0E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ea:95:21:d1:5e:b0:02:32:4d:b4:e5:3c:db:3b:ca:23:d3: b4:1e:82:c1:d0:e1:fe:44:fe:eb:92:06:89:4e:52:4e:51:95: 6e:77:ea:21:12:3e:92:55:24:f0:05:4e:88:ce:df:96:e2:30: 51:8e:9e:4e:05:d3:2c:d8:bf:a7:eb:04:6d:0d:66:8c:4a:c1: a6:4b:02:17:53:f7:97:6a:01:11:f4:8c:2e:31:06:37:37:ef: ea:6e:99:87:58:6f:22:9b:37:34:3c:82:6c:ce:52:b1:af:fd: f7:29:57:fd:a8:48:84:6f:9c:ef:e7:98:0b:fe:7b:3a:df:79: 70:c9:ec:5d:6a:0a:1f:b6:42:4d:95:40:7d:77:a9:30:d1:0d: 7f:a3:c3:2c:08:91:3e:e6:d9:f6:1f:bf:9d:5c:97:38:6a:28: 6d:9c:97:de:c6:02:86:81:36:0b:25:ab:2c:bf:e2:a7:35:42: ae:6a:a0:c1:9f:40:e0:3e:49:67:52:07:20:10:a9:5d:a3:04: 47:33:06:81:30:bc:4d:6e:f3:7e:7c:5e:2a:33:78:7b:e4:b6: 8c:90:c9:3e:4f:5d:39:b0:3d:16:1f:54:3d:23:02:1f:66:cd: df:79:8f:32:fe:b5:28:16:30:82:fb:7f:fb:84:23:a2:af:09: 82:00:10:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE87tyw4BiW4xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ODU2MmUyNGUtNmMxMC00Mjg2LTliOTItOGRlOGM5YzU5NTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKAD+vr2dlmp0MlgHiUEIJjuLKWpna210Viz Ut2ezQ4ao+jy1TubajsllbZSP8KwRun0MfCye45jXyB8VRrFeFZhTjTg7YpLnYM7 oaPBO5UBT4WqPL1ruzvz8KWKCdEPT9bzK7eHPGuxVVO/2mp1ie1wPsyFRDcxHByS thpo+GJTlO2W/ZeHiQeeazjGI7bS382KkIHURnDli1oYhV9/n7423PvPAKsgeCw5 CI8Z8pkcuBYsqO6IAuaObpawUjQnKB0V/uQJ38y7i9wQL1um4XLR+E6u2xq4blKg aAb0PJWaxtr6K8qvesZ2d4e7lMklC9fuyR5u/ZkeUfWQKEjT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgI5qwMV3BMZpZFfURRy1aItQ56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2Q2ZjY0MGQtNjEyNi0z NTMyLTgyYjUtZDkxMmNhMzQ4NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjqlSHRXrACMk205TzbO8oj07QegsHQ4f5E/uuSBolOUk5RlW536iES PpJVJPAFTojO35biMFGOnk4F0yzYv6frBG0NZoxKwaZLAhdT95dqARH0jC4xBjc3 7+pumYdYbyKbNzQ8gmzOUrGv/fcpV/2oSIRvnO/nmAv+ezrfeXDJ7F1qCh+2Qk2V QH13qTDRDX+jwywIkT7m2fYfv51clzhqKG2cl97GAoaBNgslqyy/4qc1Qq5qoMGf QOA+SWdSByAQqV2jBEczBoEwvE1u8358XiozeHvktoyQyT5PXTmwPRYfVD0jAh9m zd95jzL+tSgWMIL7f/uEI6KvCYIAEAY= -----END CERTIFICATE-----Generated at Mon Jun 30 14:32:40 2025 by rpki-client