$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa File: c4d7f5be-73c8-302a-991e-a5952ac26f26.roa (raw, json) Hash identifier: GjXCAT34CkdfvH/zAllabOrsidOXIXr9dj8iKwKb7aE= Subject key identifier: C7:CB:0B:25:EB:53:DA:0F:1D:3D:D2:CC:A6:D8:B0:84:57:24:D7:F3 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EA5AA6AC6840E72B5BF8D0800 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 3754 IP address blocks: 199.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:6a:c6:84:0e:72:b5:bf:8d:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=bab6e58b-387c-4321-8537-1b40007a4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:87:ec:c0:18:34:f2:63:81:62:9e:66:e7: d1:1e:78:fa:a6:4c:8b:34:5d:1a:63:64:3e:7b:37: 6b:0c:c2:f3:5f:d9:06:19:0b:32:c8:53:88:28:1e: aa:78:b4:96:b3:38:6d:e1:a6:79:df:ae:35:69:61: fd:16:00:d5:ae:f2:14:84:3d:41:26:8f:7e:8f:f5: 39:33:23:a9:2a:73:5f:c7:49:5f:1b:13:7f:89:bd: e1:43:55:c2:09:51:1b:96:85:c5:22:ab:6b:29:18: 6c:41:7e:ac:e7:7b:e5:49:6b:97:0a:1f:5f:d3:b4: 5a:b5:53:2f:b4:67:50:38:f5:07:c0:cb:65:5d:f2: 5c:df:71:f1:63:6f:96:35:4f:3b:a5:fb:81:f8:32: 6e:c7:17:d0:cc:21:8a:03:3f:06:71:c0:32:7f:c8: 38:3a:50:02:b8:e6:40:bc:5d:59:57:6e:18:bc:f3: 31:cc:35:1a:0e:ce:68:7e:d4:21:8b:a8:33:78:c1: 2e:40:2a:a4:fa:5a:4b:d1:6c:c2:80:b0:3c:c2:04: 60:39:60:47:07:84:10:48:84:52:64:e9:61:10:f6: 61:20:79:91:e0:7c:bd:ee:ec:c1:25:28:3c:ac:08: 55:5a:b9:10:de:3f:f3:0e:90:d0:34:0e:6a:d6:06: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CB:0B:25:EB:53:DA:0F:1D:3D:D2:CC:A6:D8:B0:84:57:24:D7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/c4d7f5be-73c8-302a-991e-a5952ac26f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b7:fb:b5:07:df:c7:11:c3:d7:89:76:eb:96:1d:a3:f4:d5: d9:3c:4b:34:07:ca:3e:1c:f7:9e:c2:9c:a4:72:d9:36:07:f9: 68:dc:da:1c:99:6a:53:d4:e1:67:9b:6c:1e:8a:2f:3b:bb:0e: f7:47:08:44:6b:96:59:1f:02:97:82:56:04:3f:10:ae:4e:1e: d1:d2:61:89:b9:30:90:b9:e8:3e:50:df:a4:1f:48:86:1e:e1: 33:3f:1f:0a:3f:d9:73:9a:f2:03:e3:cf:fb:ff:fc:8d:f4:0a: 6a:9c:b7:fd:7a:48:3d:19:ae:01:cf:de:d5:b9:36:83:a1:39: 38:0d:60:33:b9:95:7d:ae:c4:28:0a:d3:ce:00:52:d5:bd:27: 08:5b:a1:45:4a:06:2a:87:e8:27:b7:02:db:82:80:a1:ae:5f: 0f:a5:ff:c5:89:0d:f7:55:e6:ed:24:e6:72:ea:22:6f:87:0f: 99:58:a1:d8:f7:7e:10:52:9a:aa:6f:3d:30:d3:b5:fb:1c:5d: 61:40:b7:20:31:7e:79:19:df:de:86:57:a5:8c:25:c0:be:c3: d8:ee:d1:68:1b:a3:6d:a2:5d:62:0f:31:b9:1f:b1:b2:0d:a1: 5f:4e:63:50:ef:15:ec:28:cd:4d:ee:6e:10:bd:09:06:e8:b0: d4:26:75:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmrGhA5ytb+NCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk YmFiNmU1OGItMzg3Yy00MzIxLTg1MzctMWI0MDAwN2E0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreeH7MAYNPJjgWKeZufRHnj6pkyLNF0aY2Q+ ezdrDMLzX9kGGQsyyFOIKB6qeLSWszht4aZ53641aWH9FgDVrvIUhD1BJo9+j/U5 MyOpKnNfx0lfGxN/ib3hQ1XCCVEbloXFIqtrKRhsQX6s53vlSWuXCh9f07RatVMv tGdQOPUHwMtlXfJc33HxY2+WNU87pfuB+DJuxxfQzCGKAz8GccAyf8g4OlACuOZA vF1ZV24YvPMxzDUaDs5oftQhi6gzeMEuQCqk+lpL0WzCgLA8wgRgOWBHB4QQSIRS ZOlhEPZhIHmR4Hy97uzBJSg8rAhVWrkQ3j/zDpDQNA5q1gZKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfLCyXrU9oPHT3SzKbYsIRXJNfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvYzRkN2Y1YmUtNzNjOC0z MDJhLTk5MWUtYTU5NTJhYzI2ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS3+7UH38cRw9eJduuWHaP01dk8SzQHyj4c957CnKRy2TYH+Wjc2hyZ alPU4WebbB6KLzu7DvdHCERrllkfApeCVgQ/EK5OHtHSYYm5MJC56D5Q36QfSIYe 4TM/Hwo/2XOa8gPjz/v//I30Cmqct/16SD0ZrgHP3tW5NoOhOTgNYDO5lX2uxCgK 084AUtW9JwhboUVKBiqH6Ce3AtuCgKGuXw+l/8WJDfdV5u0k5nLqIm+HD5lYodj3 fhBSmqpvPTDTtfscXWFAtyAxfnkZ396GV6WMJcC+w9ju0Wgbo22iXWIPMbkfsbIN oV9OY1DvFewozU3ubhC9CQbosNQmdfw= -----END CERTIFICATE-----Generated at Wed Jul 29 05:30:40 2026 by rpki-client