$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa File: 2817e773-8303-342f-9a40-2e654502699d.roa (raw, json) Hash identifier: +D+ifn+hYSS1rLL43Q2UJuGhQcBZ2U76cvjJeUSJOWo= Subject key identifier: D3:73:A6:81:18:40:ED:F5:35:95:92:9F:52:9E:81:41:61:B4:EC:49 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EA5AA6AD381715AFF4B16D5C0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 3630 IP address blocks: 199.109.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:6a:d3:81:71:5a:ff:4b:16:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=3312162e-f50d-4a7b-b1c1-41c130ba1e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ff:8c:9c:0e:85:df:81:0b:af:39:66:0d:11: 1f:33:ca:9c:d7:9a:1c:a4:9a:c0:b2:5f:de:83:7b: 0c:2f:35:e9:79:91:df:b0:78:d2:cb:3c:6f:2f:d6: 9f:74:f0:25:f9:3a:e5:96:0f:cf:81:84:b2:02:19: 8c:91:f0:2d:ee:b2:c7:13:00:2c:0a:37:4e:b7:56: 9e:42:59:40:e2:8d:e7:49:44:ea:e8:8a:98:c2:37: 82:99:a9:83:52:4a:6a:ce:15:4b:db:47:01:5e:66: 65:ad:11:4b:79:b5:3b:fc:c0:a5:18:24:17:46:5b: 95:e7:9c:66:95:60:35:80:91:d6:bf:7c:68:18:15: c8:34:0f:33:2d:03:a6:2d:e7:dd:2f:32:58:31:6a: 95:5b:da:9d:aa:73:d5:b0:ee:1e:c6:ca:d7:b3:a3: 59:41:95:88:ad:c7:b0:da:cb:ea:10:af:09:a4:9b: 49:26:8e:8f:ac:11:55:1f:8c:d7:f5:b7:1c:04:43: ca:ff:de:d5:3e:12:17:ea:3e:22:b9:a4:fd:aa:11: 99:a9:d0:4e:11:81:d8:6d:80:fb:2c:da:aa:da:17: d0:fe:50:61:8c:55:ec:e3:24:2f:9e:c6:96:7c:d2: 84:1e:93:fe:92:9e:91:2d:7b:9c:31:16:c2:c1:04: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:73:A6:81:18:40:ED:F5:35:95:92:9F:52:9E:81:41:61:B4:EC:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:27:fb:b5:f4:c7:9e:5a:a9:39:ff:9f:82:70:ed:a5:cc:4b: 17:de:11:97:9e:0d:d0:8f:5a:07:b3:df:fa:c9:df:f9:45:65: d1:ed:1f:eb:17:9a:25:14:fa:f5:9a:df:a9:0c:e6:bd:72:0b: c5:6c:ce:59:97:2c:38:b3:1d:68:f1:e0:79:8c:2d:93:ac:c4: f3:c7:81:cc:4f:d7:6c:41:b5:ba:cd:cf:34:b1:4b:56:a4:c7: 69:ca:b1:03:01:57:b3:b3:dd:d0:64:00:a5:00:53:af:a8:b6: e9:ad:47:8c:3a:c6:fa:ca:7c:96:68:1f:7c:ad:e3:32:eb:4d: 2e:29:19:b7:4b:cb:64:46:17:76:f4:67:6b:d4:5d:d9:57:49: f0:9f:8a:5a:1c:39:91:b3:6e:be:dc:e8:3e:44:66:19:fb:32: 52:f0:68:01:03:09:49:73:4e:89:9c:aa:dc:c0:85:65:bd:23: 2e:3f:21:e7:70:d7:17:06:c6:e5:a2:f0:a0:2b:99:b7:0c:2b: 82:61:a5:3e:6e:7a:d0:89:f3:c7:22:d0:b4:c9:12:7f:f0:d5: 1d:1b:ea:46:fd:25:15:e7:58:2a:e3:1b:8c:cc:4e:a3:25:74: ee:21:33:f4:7a:cb:c2:0d:70:c9:44:42:0d:66:3d:7b:fc:52: 4e:e5:25:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmrTgXFa/0sW1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MzMxMjE2MmUtZjUwZC00YTdiLWIxYzEtNDFjMTMwYmExZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v+MnA6F34ELrzlmDREfM8qc15ocpJrAsl/e g3sMLzXpeZHfsHjSyzxvL9afdPAl+Trllg/PgYSyAhmMkfAt7rLHEwAsCjdOt1ae QllA4o3nSUTq6IqYwjeCmamDUkpqzhVL20cBXmZlrRFLebU7/MClGCQXRluV55xm lWA1gJHWv3xoGBXINA8zLQOmLefdLzJYMWqVW9qdqnPVsO4exsrXs6NZQZWIrcew 2svqEK8JpJtJJo6PrBFVH4zX9bccBEPK/97VPhIX6j4iuaT9qhGZqdBOEYHYbYD7 LNqq2hfQ/lBhjFXs4yQvnsaWfNKEHpP+kp6RLXucMRbCwQQt0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNzpoEYQO31NZWSn1KegUFhtOxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjgxN2U3NzMtODMwMy0z NDJmLTlhNDAtMmU2NTQ1MDI2OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0n+7X0x55aqTn/n4Jw7aXMSxfeEZeeDdCPWgez3/rJ3/lFZdHtH+sX miUU+vWa36kM5r1yC8VszlmXLDizHWjx4HmMLZOsxPPHgcxP12xBtbrNzzSxS1ak x2nKsQMBV7Oz3dBkAKUAU6+otumtR4w6xvrKfJZoH3yt4zLrTS4pGbdLy2RGF3b0 Z2vUXdlXSfCfilocOZGzbr7c6D5EZhn7MlLwaAEDCUlzTomcqtzAhWW9Iy4/Iedw 1xcGxuWi8KArmbcMK4JhpT5uetCJ88ci0LTJEn/w1R0b6kb9JRXnWCrjG4zMTqMl dO4hM/R6y8INcMlEQg1mPXv8Uk7lJYg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:58:47 2026 by rpki-client