$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa File: cd6f640d-6126-3532-82b5-d912ca3486c0.roa (raw, json) Hash identifier: FJZM8eQOR5JlyBG3RFSsBwdW1LrFgDwP3/FRIYC2koY= Subject key identifier: A5:7B:7D:D3:60:AC:12:2D:72:0E:BC:EE:7E:FC:F3:EF:2A:62:39:DE Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EA2DFBAA0154EB70863A45F40 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 3756 IP address blocks: 199.109.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:ba:a0:15:4e:b7:08:63:a4:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=e4138bfd-fc5f-4ccb-b48f-8c67b5b0a885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:90:69:90:ad:04:77:65:ac:b0:d0:76:a3:e7: 6c:2f:91:8b:d1:5f:eb:c2:bc:75:77:8b:5a:5d:83: 9f:92:cf:6b:2b:d9:5e:85:30:25:c9:37:32:84:60: bc:00:d8:99:54:a0:bf:40:9f:5e:51:87:47:8e:82: 5a:de:19:b6:16:98:77:9d:d9:fa:cb:86:c9:6d:27: 1f:e4:2c:0e:f1:b5:ae:7d:01:1e:ef:73:c6:0c:79: a1:8b:b6:e8:6f:53:bd:0a:2a:b1:d2:f1:9e:a9:ec: a1:c4:ae:77:96:4c:08:53:b5:8d:90:d3:1e:8a:a3: 3b:f8:34:85:df:53:fd:1c:5e:cf:05:25:b0:14:41: fa:2c:65:78:25:43:25:26:0f:1c:22:d5:63:a0:29: 46:92:8a:21:ce:32:66:7f:d4:07:f4:69:f8:87:32: f6:66:31:a3:01:d0:76:63:2c:b1:75:27:8e:de:71: e0:f4:1b:b8:52:10:f0:f4:70:fe:59:02:f7:ab:04: 83:43:3c:a9:3a:db:1c:d1:df:27:95:34:4e:9c:0d: 99:68:26:21:92:97:8a:eb:4d:5c:c4:ea:c7:6f:6e: 41:cd:d5:83:7f:cb:ed:b9:de:c3:f9:a3:f1:a3:c0: 73:8e:24:2d:a0:c4:2b:ff:f7:4d:af:36:e5:5c:00: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7B:7D:D3:60:AC:12:2D:72:0E:BC:EE:7E:FC:F3:EF:2A:62:39:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/cd6f640d-6126-3532-82b5-d912ca3486c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:53:ca:fd:36:bc:b3:a3:59:f3:ef:f3:e7:d1:02:d7:14:52: 7e:ea:e4:4a:d0:ea:49:47:08:ea:cf:5f:60:50:55:00:b8:b4: ba:51:c6:9d:e8:dd:86:e6:8e:b2:11:46:62:65:af:69:8c:27: 84:c5:6c:fc:5d:76:c8:b2:45:c2:cc:8c:49:97:6c:fc:10:39: 0d:f0:15:c5:45:8f:96:61:2a:a0:fd:be:e5:b7:e0:8c:e4:ce: 27:13:33:2c:cf:a9:5c:88:0a:98:36:53:6d:d6:16:5b:97:bc: 68:56:06:09:6f:c7:11:36:98:58:a8:4c:cb:b4:60:8b:94:dc: 73:67:3f:3c:d6:3f:dc:ee:58:28:68:d2:4e:db:f9:5f:02:d2: 98:a3:88:3b:cb:62:42:c4:6b:83:06:d4:09:7e:09:12:99:cc: 1b:7f:59:72:93:6d:98:61:1c:51:ff:d8:41:d4:a0:23:ac:2b: ce:ee:c8:e4:3e:4c:0f:7e:a4:d5:f8:1f:99:d5:bf:c2:99:61: 09:b6:69:a4:48:2b:ff:03:8f:4c:4e:fc:59:d3:0f:03:5f:f8: bd:e7:a2:96:c2:18:c2:fe:de:e3:8f:03:02:76:bc:c9:54:28: 57:57:cf:90:1f:15:d6:36:f5:b5:ca:00:f3:03:09:7a:8b:a6: 78:68:be:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i37qgFU63CGOkX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZTQxMzhiZmQtZmM1Zi00Y2NiLWI0OGYtOGM2N2I1YjBhODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pBpkK0Ed2WssNB2o+dsL5GL0V/rwrx1d4ta XYOfks9rK9lehTAlyTcyhGC8ANiZVKC/QJ9eUYdHjoJa3hm2Fph3ndn6y4bJbScf 5CwO8bWufQEe73PGDHmhi7bob1O9Ciqx0vGeqeyhxK53lkwIU7WNkNMeiqM7+DSF 31P9HF7PBSWwFEH6LGV4JUMlJg8cItVjoClGkoohzjJmf9QH9Gn4hzL2ZjGjAdB2 YyyxdSeO3nHg9Bu4UhDw9HD+WQL3qwSDQzypOtsc0d8nlTROnA2ZaCYhkpeK601c xOrHb25BzdWDf8vtud7D+aPxo8BzjiQtoMQr//dNrzblXACaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV7fdNgrBItcg687n788+8qYjneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvY2Q2ZjY0MGQtNjEyNi0z NTMyLTgyYjUtZDkxMmNhMzQ4NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpTyv02vLOjWfPv8+fRAtcUUn7q5ErQ6klHCOrPX2BQVQC4tLpRxp3o 3YbmjrIRRmJlr2mMJ4TFbPxddsiyRcLMjEmXbPwQOQ3wFcVFj5ZhKqD9vuW34Izk zicTMyzPqVyICpg2U23WFluXvGhWBglvxxE2mFioTMu0YIuU3HNnPzzWP9zuWCho 0k7b+V8C0pijiDvLYkLEa4MG1Al+CRKZzBt/WXKTbZhhHFH/2EHUoCOsK87uyOQ+ TA9+pNX4H5nVv8KZYQm2aaRIK/8Dj0xO/FnTDwNf+L3nopbCGML+3uOPAwJ2vMlU KFdXz5AfFdY29bXKAPMDCXqLpnhovpc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:37:59 2026 by rpki-client