$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa File: da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa (raw, json) Hash identifier: N6hQt7n75zYYxBaB5aP/JlFz1wytlgfHSbucB899LbA= Subject key identifier: D1:A8:0E:9C:7C:61:CE:55:37:7B:50:DF:71:5B:3B:06:00:17:F1:D3 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584AD23BCE745E2BE2061BB96400 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3754 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ce:74:5e:2b:e2:06:1b:b9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=a3246ffe-26b4-4cb2-a8c0-f528d3329411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:35:15:e6:06:20:c8:e4:56:6f:fe:58:6e:e8: 2b:49:44:d9:f8:88:94:81:fe:7d:58:9a:d3:01:fa: 66:39:e2:f6:01:e5:1b:ad:5f:08:4b:92:f6:3d:e2: 8d:95:9e:d1:6c:c8:7f:75:11:1f:88:ea:ac:93:fd: d8:b7:5e:67:83:0f:f1:1e:8a:f8:b4:8c:c0:af:5d: 69:5b:47:8d:59:e2:20:f9:e5:20:c9:3b:f2:bd:d8: d3:2f:1f:b5:13:0c:1f:82:72:50:06:b8:76:6a:2c: 27:8d:36:8b:16:71:13:28:3d:42:b7:32:5a:f3:16: a5:15:53:ad:29:ae:db:c0:65:68:66:77:19:a8:20: a5:bb:6f:c7:bd:19:89:fe:9d:42:96:a5:d0:8a:ec: 7b:bf:c7:c8:89:47:2a:0b:4d:57:6c:2a:62:59:70: 06:7d:92:c3:df:07:f8:ed:78:22:d1:3d:72:35:21: c9:94:1a:27:8b:a8:81:a6:85:68:b6:8b:46:19:3a: 2a:e0:f7:dd:7e:74:af:48:9e:98:95:ed:0d:fe:4e: 42:1a:2b:95:47:05:9f:b8:8f:d1:0a:b4:ac:fd:5a: 47:c6:c0:87:17:db:7a:3f:ed:a9:a6:49:26:ac:30: 3c:39:39:7b:e9:a4:57:be:de:3e:af:a9:b1:63:88: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A8:0E:9C:7C:61:CE:55:37:7B:50:DF:71:5B:3B:06:00:17:F1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:27:2a:9f:57:3f:2c:67:e3:6e:22:5e:80:16:92:66:ae:33: 0e:8c:6a:ce:30:df:f9:7e:83:88:90:a9:c9:d9:5c:e5:72:53: c0:d0:5c:00:92:8f:83:0a:f9:56:28:b4:02:41:c1:7d:17:95: 5a:26:39:70:01:20:d5:a6:ae:88:4c:1f:b5:96:fc:16:60:cc: 07:c4:c8:7b:dd:c2:57:88:56:b4:53:52:9e:e6:2d:b3:a4:e8: d7:db:c1:73:b9:dd:5c:dd:68:a9:da:07:5a:5c:e6:ef:e4:3b: 48:8f:0e:69:bb:17:2c:8d:6f:46:27:28:c5:84:66:d7:8e:53: c0:c3:be:59:26:85:00:ca:82:cb:69:b5:50:df:99:d3:60:a9: 86:64:b4:48:bd:c9:06:ae:ef:5d:ec:b0:de:67:43:a3:3b:60: 13:4c:cb:98:37:36:af:3b:a6:02:57:d9:70:b6:c7:33:c2:3f: 91:b9:ed:bc:7a:ee:e2:e6:90:39:9b:8c:a2:95:a1:83:0b:ee: fc:2e:34:90:6e:cc:31:9b:c8:db:55:d9:20:8f:bb:43:4b:85: 84:93:7b:ff:c5:bb:55:56:7a:df:10:68:27:e6:4f:89:c9:9e: 07:1b:60:fc:03:fb:7c:1e:ce:4f:8d:74:a1:55:6d:8e:be:e4: 1e:90:90:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO850XiviBhu5ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YTMyNDZmZmUtMjZiNC00Y2IyLWE4YzAtZjUyOGQzMzI5NDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDUV5gYgyORWb/5YbugrSUTZ+IiUgf59WJrT AfpmOeL2AeUbrV8IS5L2PeKNlZ7RbMh/dREfiOqsk/3Yt15ngw/xHor4tIzAr11p W0eNWeIg+eUgyTvyvdjTLx+1EwwfgnJQBrh2aiwnjTaLFnETKD1CtzJa8xalFVOt Ka7bwGVoZncZqCClu2/HvRmJ/p1ClqXQiux7v8fIiUcqC01XbCpiWXAGfZLD3wf4 7Xgi0T1yNSHJlBoni6iBpoVototGGToq4PfdfnSvSJ6Yle0N/k5CGiuVRwWfuI/R CrSs/VpHxsCHF9t6P+2ppkkmrDA8OTl76aRXvt4+r6mxY4hDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGoDpx8Yc5VN3tQ33FbOwYAF/HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZGE4MGE4OGMtZTQxYy0z YjcyLWE4OGUtMTY5MmJjM2ZjOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQnKp9XPyxn424iXoAWkmauMw6Mas4w3/l+g4iQqcnZXOVyU8DQXACS j4MK+VYotAJBwX0XlVomOXABINWmrohMH7WW/BZgzAfEyHvdwleIVrRTUp7mLbOk 6NfbwXO53VzdaKnaB1pc5u/kO0iPDmm7FyyNb0YnKMWEZteOU8DDvlkmhQDKgstp tVDfmdNgqYZktEi9yQau713ssN5nQ6M7YBNMy5g3Nq87pgJX2XC2xzPCP5G57bx6 7uLmkDmbjKKVoYML7vwuNJBuzDGbyNtV2SCPu0NLhYSTe//Fu1VWet8QaCfmT4nJ ngcbYPwD+3wezk+NdKFVbY6+5B6QkH4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:52:23 2025 by rpki-client