$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa File: 6ba844c7-221b-3c70-9a2c-77d382deca20.roa (raw, json) Hash identifier: dtNgWqGRFMIIa/fB0ln6IZIqn/RmfBhjFqkV2xtBSVs= Subject key identifier: 9E:4D:A4:F1:3B:43:1F:2A:E4:E6:3B:22:45:4D:6D:5D:EC:55:97:84 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2A2C27133AB94ECC61DAD700 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 0 IP address blocks: 199.109.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:27:13:3a:b9:4e:cc:61:da:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3abb4d9d-25b5-4490-af1a-2a5b959ea6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:8d:17:a7:0c:42:fd:fc:52:f4:c1:e8:63: d8:78:90:d3:bc:90:8c:80:b4:e6:ac:6e:78:ae:ea: e1:6d:89:fe:8a:e4:cd:d7:22:71:0d:53:b2:be:54: a0:c8:32:82:74:5b:a7:d5:ec:cc:78:4d:4c:a8:21: d0:a0:b9:06:e2:f4:24:34:70:cc:8e:fe:52:a9:81: b3:17:6b:57:52:6c:5b:0d:ce:a2:37:bc:b1:3e:33: e1:93:fd:0a:50:b3:07:20:31:99:25:c6:87:93:9d: f1:25:9f:b7:ce:44:b3:7a:f6:29:fd:89:22:19:6d: d1:53:bf:c7:1d:e1:0c:6a:92:e5:98:a2:d6:7d:8f: 20:c5:42:74:36:12:ab:33:d3:4d:8b:de:5f:be:f5: 3f:ac:e1:e4:7e:23:fc:b9:b0:4d:a1:67:27:61:c0: 92:d4:37:3f:64:dd:72:b3:7c:26:63:da:61:c7:2f: bb:32:f4:14:6a:01:70:07:1c:12:5d:1b:31:96:f6: 83:ae:66:f3:21:8c:ca:ad:5d:63:99:df:73:e0:35: 38:3a:d1:4d:07:16:4d:0e:b8:ca:43:af:cf:24:dc: 17:af:27:cd:bf:c1:24:b1:7f:31:b0:4b:81:02:37: c2:f1:6b:3b:10:68:f6:b8:3b:ce:38:67:a3:e0:ec: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4D:A4:F1:3B:43:1F:2A:E4:E6:3B:22:45:4D:6D:5D:EC:55:97:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6ba844c7-221b-3c70-9a2c-77d382deca20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fe:4c:b6:e0:78:42:a7:b3:f7:4d:9e:cf:1c:8e:bf:20:21: 30:4b:2b:83:20:d6:99:c6:d5:16:2f:12:24:23:05:f0:d0:41: 3c:e0:fb:60:7e:8c:ac:fd:4f:6c:0b:23:64:ff:83:d5:d9:65: a3:fd:84:26:72:26:27:82:e2:9b:ce:56:c1:42:dc:b9:d1:44: 84:cf:58:90:9c:d4:b2:43:8e:90:0d:9b:31:ba:67:49:80:77: de:fc:2d:73:14:bd:7f:d1:10:f1:58:c2:60:86:fa:2e:19:e6: 45:47:d4:f4:68:f0:59:88:0f:e1:7b:bf:02:f2:67:d2:16:38: 59:b9:b9:6f:ea:18:5e:b6:f3:db:d6:e5:1e:35:5b:25:3e:35: 5f:c0:6f:bc:4b:82:ad:6c:a2:5b:31:83:c8:a2:1c:cd:c4:a0: ef:49:92:d2:ca:3a:37:1d:7c:d7:91:64:20:6a:b6:eb:a5:46: 10:b0:17:af:f5:b7:8f:4f:16:19:09:90:f3:d9:05:92:b7:ae: d0:88:ea:cd:ae:22:34:65:13:f0:b2:1d:40:7f:30:7f:0e:21: bb:19:8f:0b:2b:88:53:4e:af:f0:b5:16:cc:ba:35:b7:be:72: 29:30:ae:a8:49:53:2d:46:38:82:28:63:8e:96:be:3b:1a:c3: dc:c0:b2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCcTOrlOzGHa1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk M2FiYjRkOWQtMjViNS00NDkwLWFmMWEtMmE1Yjk1OWVhNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aqNF6cMQv38UvTB6GPYeJDTvJCMgLTmrG54 rurhbYn+iuTN1yJxDVOyvlSgyDKCdFun1ezMeE1MqCHQoLkG4vQkNHDMjv5SqYGz F2tXUmxbDc6iN7yxPjPhk/0KULMHIDGZJcaHk53xJZ+3zkSzevYp/YkiGW3RU7/H HeEMapLlmKLWfY8gxUJ0NhKrM9NNi95fvvU/rOHkfiP8ubBNoWcnYcCS1Dc/ZN1y s3wmY9phxy+7MvQUagFwBxwSXRsxlvaDrmbzIYzKrV1jmd9z4DU4OtFNBxZNDrjK Q6/PJNwXryfNv8EksX8xsEuBAjfC8Ws7EGj2uDvOOGej4OyUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5NpPE7Qx8q5OY7IkVNbV3sVZeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvNmJhODQ0YzctMjIxYi0z YzcwLTlhMmMtNzdkMzgyZGVjYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx236MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz+TLbgeEKns/dNns8cjr8gITBLK4Mg1pnG1RYvEiQjBfDQQTzg+2B+ jKz9T2wLI2T/g9XZZaP9hCZyJieC4pvOVsFC3LnRRITPWJCc1LJDjpANmzG6Z0mA d978LXMUvX/REPFYwmCG+i4Z5kVH1PRo8FmID+F7vwLyZ9IWOFm5uW/qGF6289vW 5R41WyU+NV/Ab7xLgq1solsxg8iiHM3EoO9JktLKOjcdfNeRZCBqtuulRhCwF6/1 t49PFhkJkPPZBZK3rtCI6s2uIjRlE/CyHUB/MH8OIbsZjwsriFNOr/C1Fsy6Nbe+ cikwrqhJUy1GOIIoY46Wvjsaw9zAsgM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:40:45 2025 by rpki-client