$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa File: 256f5a60-acd7-370b-a839-372a2dc4749d.roa (raw, json) Hash identifier: v8bmGflmLIX5S4quVcOMPa+at219qccE43TUL6eCIlc= Subject key identifier: A7:05:4A:8B:38:B2:E3:0D:F3:55:0B:E2:16:14:BC:47:51:55:85:21 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B7F526093149F05CC3EE142B0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 3756 IP address blocks: 199.109.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:60:93:14:9f:05:cc:3e:e1:42:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3a31a3dd-60d3-44f9-ab34-3c86682f24e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:ed:1c:33:f6:eb:fb:5d:d2:98:a5:49:a8: 03:4b:d9:83:ca:e1:61:f3:00:cd:a1:5b:1c:ad:6e: 9a:e2:6d:f7:f3:af:97:93:da:ae:bd:34:ea:1d:82: 2a:27:02:84:3f:64:97:0c:74:a1:89:ba:e2:d9:1e: e8:a1:10:aa:0b:54:a4:3f:a4:01:3b:79:3e:ee:60: 35:01:61:53:d8:ce:d4:a7:f5:b6:17:a7:13:a5:6e: 01:64:0d:27:ca:b6:a5:a8:0f:89:cd:39:12:51:98: 2f:4c:13:9a:a3:df:f7:d2:a0:b9:97:77:a8:14:18: ba:ab:49:2b:12:70:b8:b7:95:57:6d:47:b4:04:bd: 5f:06:66:0f:11:42:31:85:83:b3:c2:d7:62:a7:f0: 4b:de:96:a7:46:41:09:7b:8c:f0:2d:6c:3e:9c:9a: 0c:45:84:ab:b1:8f:26:ee:f2:c2:a6:99:f0:03:e4: 2a:e6:2d:69:0f:79:b1:6f:c8:ed:e8:4e:25:c6:7a: f7:30:d8:3c:8c:1f:45:32:9e:de:70:2e:29:8f:ab: 14:72:49:55:bd:aa:57:7e:9f:9f:44:7d:b8:22:42: 39:9b:14:32:14:31:43:0d:7e:19:93:7b:a9:49:01: 78:eb:75:06:b1:61:f5:2f:62:3c:93:7c:aa:d9:09: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:05:4A:8B:38:B2:E3:0D:F3:55:0B:E2:16:14:BC:47:51:55:85:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/256f5a60-acd7-370b-a839-372a2dc4749d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:07:a9:b4:b5:5a:cc:85:70:16:66:fe:8a:8d:13:ed:e1:85: a8:d3:ec:71:b0:b2:2b:7f:87:15:f9:ee:e5:8b:cd:36:65:8a: 40:35:48:03:89:e5:77:d3:53:5c:81:46:05:a9:14:26:ad:f0: c1:8d:74:eb:eb:4d:6a:21:39:84:d1:1e:c8:41:d1:72:2e:58: 76:2b:d1:3e:2b:e5:e7:6d:c8:64:df:41:a5:2c:37:68:27:24: 7c:97:44:13:e1:ce:c0:a5:d3:ef:b2:06:9b:80:f9:03:2e:5d: 4f:c1:5d:7f:bb:db:4c:7a:34:fe:f0:94:13:e4:d9:66:bc:07: b0:4c:a3:e4:26:a0:2a:29:28:7c:23:ff:9d:4d:32:20:90:7c: 96:85:48:2b:42:37:53:72:47:8e:d0:1c:ba:68:23:ee:07:f4: 5c:c3:fb:b3:ad:bc:3d:5d:67:fa:b0:9b:58:d3:90:bf:e4:fe: 7d:3d:6a:37:83:18:9d:88:54:88:a4:3c:4c:17:75:62:bc:7f: 62:9b:9f:f5:49:74:b1:4c:47:30:06:5b:06:ed:b3:f0:3f:79: 90:4a:e3:d2:ba:88:60:36:a0:8e:f0:5a:0b:58:90:15:37:48: c2:9d:e9:3b:d8:17:13:dd:ce:28:80:d1:be:c9:f4:bf:89:28: 10:39:c4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmCTFJ8FzD7hQrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2EzMWEzZGQtNjBkMy00NGY5LWFiMzQtM2M4NjY4MmYyNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQvtHDP26/td0pilSagDS9mDyuFh8wDNoVsc rW6a4m3386+Xk9quvTTqHYIqJwKEP2SXDHShibri2R7ooRCqC1SkP6QBO3k+7mA1 AWFT2M7Up/W2F6cTpW4BZA0nyralqA+JzTkSUZgvTBOao9/30qC5l3eoFBi6q0kr EnC4t5VXbUe0BL1fBmYPEUIxhYOzwtdip/BL3panRkEJe4zwLWw+nJoMRYSrsY8m 7vLCppnwA+Qq5i1pD3mxb8jt6E4lxnr3MNg8jB9FMp7ecC4pj6sUcklVvapXfp+f RH24IkI5mxQyFDFDDX4Zk3upSQF463UGsWH1L2I8k3yq2Ql2iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcFSos4suMN81UL4hYUvEdRVYUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjU2ZjVhNjAtYWNkNy0z NzBiLWE4MzktMzcyYTJkYzQ3NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx23gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAHqbS1WsyFcBZm/oqNE+3hhajT7HGwsit/hxX57uWLzTZlikA1SAOJ 5XfTU1yBRgWpFCat8MGNdOvrTWohOYTRHshB0XIuWHYr0T4r5edtyGTfQaUsN2gn JHyXRBPhzsCl0++yBpuA+QMuXU/BXX+720x6NP7wlBPk2Wa8B7BMo+QmoCopKHwj /51NMiCQfJaFSCtCN1NyR47QHLpoI+4H9FzD+7OtvD1dZ/qwm1jTkL/k/n09ajeD GJ2IVIikPEwXdWK8f2Kbn/VJdLFMRzAGWwbts/A/eZBK49K6iGA2oI7wWgtYkBU3 SMKd6TvYFxPdziiA0b7J9L+JKBA5xJs= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:02 2025 by rpki-client