$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa File: 2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa (raw, json) Hash identifier: Mexb8t4Fm0WvIbZ3cowT8sEgnd2uRqAp2jkH3kDDnVs= Subject key identifier: B6:FA:4E:EE:D3:43:08:AD:47:1A:52:17:A1:66:FA:03:DE:A6:53:5A Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584F480D3C8505F970E89DB74200 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 3755 IP address blocks: 199.110.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3c:85:05:f9:70:e8:9d:b7:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=a8c819a2-a19c-4e3b-b694-b0c7c64fcc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c6:a1:b0:b6:07:97:58:44:6b:37:9a:8b:90: 1c:cd:83:70:97:6b:06:a5:e3:b0:dc:c7:d5:63:f5: 34:80:f7:f7:62:df:53:0f:f6:15:c0:7e:bb:b5:61: 50:c7:0a:b8:6e:c0:4d:ae:17:6f:ce:97:95:a9:b1: 1f:9e:c4:8e:e7:a3:7d:4d:cd:66:e2:02:3d:f3:a7: ed:f1:0a:1a:a3:0f:cb:99:37:a2:c9:cf:bd:cc:c7: 6b:15:92:20:ab:eb:e8:cc:24:a5:85:7b:78:e5:79: 9e:23:ad:a8:ff:17:73:59:ef:42:db:28:46:6d:2b: 05:17:29:7d:42:b8:94:27:b2:9c:e8:a2:51:4a:60: 10:bd:55:fe:58:6d:00:50:39:23:6f:8d:84:5c:df: 21:7a:46:49:30:ad:12:bc:a5:bb:cb:9b:00:d3:f3: 8f:9e:a6:94:52:a2:82:8a:94:df:87:55:58:ba:84: fe:74:24:0a:e3:31:f4:f4:00:66:de:7b:4e:7b:44: 79:67:b6:3f:10:24:b5:52:c2:f1:51:da:c6:1b:1f: f2:36:82:b9:ae:ce:06:bf:3e:58:b5:38:20:fc:aa: b6:34:0f:b8:e1:d6:0f:5f:2b:58:5a:0c:3b:3f:d6: 05:4f:46:04:50:f8:81:cb:eb:ff:52:89:71:73:e3: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FA:4E:EE:D3:43:08:AD:47:1A:52:17:A1:66:FA:03:DE:A6:53:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2a99f6d7-aed5-3f47-8b31-7ab6d39cab47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.110.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a9:28:cd:38:0e:ee:2f:72:b4:6a:bb:ab:c8:06:65:2a:f8: 0f:68:18:8c:a9:8a:ea:c5:21:c5:d3:c0:c2:7f:1c:c0:8c:e6: b4:f2:56:5b:8d:16:3d:d7:cf:16:2d:49:23:16:54:b1:1a:ac: 4c:60:39:ea:82:03:14:b3:09:b3:93:f2:1d:3b:90:b2:56:1d: ba:4a:76:e8:b2:54:33:3a:c4:7d:dd:91:75:ff:86:62:0c:c6: 22:98:a5:03:63:56:34:27:b6:82:41:d0:43:cc:48:a2:29:4f: e2:1c:a6:40:49:08:07:41:f2:f7:82:e2:2d:cf:62:7e:06:32: 06:b3:fd:e2:49:c7:9a:8c:7a:58:aa:09:f9:4c:bb:fe:8b:27: 88:eb:ce:bd:2e:26:94:56:eb:5a:a2:82:32:82:35:37:5f:3c: 60:96:5a:17:95:fd:91:f6:ea:fe:37:f5:59:0f:5d:89:e0:48: 30:0d:06:05:a0:05:89:74:c7:3d:da:e9:22:45:c9:39:3f:22: 43:34:64:f3:12:ba:74:fb:90:f2:12:66:5b:3d:c0:cb:98:5d: 17:ca:12:30:b2:52:81:aa:ba:56:0f:16:da:e9:ce:2c:21:0f: 5a:fc:d8:a3:18:21:2c:4b:08:32:9f:14:db:45:ee:c6:b1:3e: 73:bb:6a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTyFBflw6J23QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YThjODE5YTItYTE5Yy00ZTNiLWI2OTQtYjBjN2M2NGZjYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcahsLYHl1hEazeai5AczYNwl2sGpeOw3MfV Y/U0gPf3Yt9TD/YVwH67tWFQxwq4bsBNrhdvzpeVqbEfnsSO56N9Tc1m4gI986ft 8Qoaow/LmTeiyc+9zMdrFZIgq+vozCSlhXt45XmeI62o/xdzWe9C2yhGbSsFFyl9 QriUJ7Kc6KJRSmAQvVX+WG0AUDkjb42EXN8hekZJMK0SvKW7y5sA0/OPnqaUUqKC ipTfh1VYuoT+dCQK4zH09ABm3ntOe0R5Z7Y/ECS1UsLxUdrGGx/yNoK5rs4Gvz5Y tTgg/Kq2NA+44dYPXytYWgw7P9YFT0YEUPiBy+v/Uolxc+MZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb6Tu7TQwitRxpSF6Fm+gPeplNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMmE5OWY2ZDctYWVkNS0z ZjQ3LThiMzEtN2FiNmQzOWNhYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx27wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqpKM04Du4vcrRqu6vIBmUq+A9oGIypiurFIcXTwMJ/HMCM5rTyVluN Fj3XzxYtSSMWVLEarExgOeqCAxSzCbOT8h07kLJWHbpKduiyVDM6xH3dkXX/hmIM xiKYpQNjVjQntoJB0EPMSKIpT+IcpkBJCAdB8veC4i3PYn4GMgaz/eJJx5qMeliq CflMu/6LJ4jrzr0uJpRW61qigjKCNTdfPGCWWheV/ZH26v439VkPXYngSDANBgWg BYl0xz3a6SJFyTk/IkM0ZPMSunT7kPISZls9wMuYXRfKEjCyUoGqulYPFtrpziwh D1r82KMYISxLCDKfFNtF7saxPnO7avE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:16:16 2026 by rpki-client