$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa File: da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa (raw, json) Hash identifier: 8cuq48khWAfWolVkXUt4+ALUryLoIjd8kK9Jk8uwmys= Subject key identifier: 4E:62:EA:EA:02:65:39:BA:D7:44:7B:20:6B:DF:E6:25:FF:4D:71:46 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584BB2F7CBD72A444C31CB7607C0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3754 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cb:d7:2a:44:4c:31:cb:76:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=66ddbb22-c385-434e-9e92-7f45b154a566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:e2:79:7e:e3:96:78:4e:a1:95:fe:95:de: 5d:c6:f2:bd:59:9b:3f:b9:02:30:44:f8:ab:95:77: 9d:95:1e:ea:bc:e9:a3:1b:d7:90:5e:50:ba:cf:6d: 6f:53:1f:0c:42:e3:df:95:af:6e:b5:1e:fe:9c:21: 2e:a7:ed:93:5f:4d:d7:fb:d0:76:6f:94:89:aa:83: a4:fb:ca:c7:c9:dc:5c:e0:e5:5a:c3:3c:52:a9:25: fc:44:04:df:a3:3c:7d:b4:f2:b5:3b:80:04:d4:ec: 22:28:14:34:0c:21:34:b0:eb:4b:4e:af:dc:e7:ef: 74:a7:4e:fa:d5:3a:80:d5:2f:c7:82:8c:fe:18:39: bb:0d:ab:da:33:0b:2a:9c:fa:11:09:a0:b6:ba:69: 62:fe:e8:f4:b1:bd:0e:69:2a:82:70:50:15:90:5e: 7b:27:9f:49:6a:93:d2:d1:8f:60:86:c3:b1:9a:23: 39:1d:86:09:14:eb:84:15:b1:e8:54:38:7d:f3:f3: 70:5e:97:18:17:b6:6a:37:f6:74:2e:ca:90:e0:37: 89:20:51:c6:c1:65:ac:66:9b:4c:ba:d7:65:40:33: 1e:0d:30:63:90:e5:d1:65:f2:8e:13:18:55:78:a7: da:3c:62:00:c5:e4:ca:a3:43:f0:a8:ff:aa:0c:61: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:62:EA:EA:02:65:39:BA:D7:44:7B:20:6B:DF:E6:25:FF:4D:71:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:80:65:d9:0b:6e:65:60:3e:e8:b5:74:ab:95:c1:ca:58:32: 26:db:f6:09:f3:d3:8c:02:9b:97:30:bb:1d:c4:e2:24:36:e4: d7:50:3b:6f:01:97:b3:d2:0f:dd:40:22:cb:09:89:17:20:97: 37:4c:90:8f:62:4e:fa:f6:15:3c:87:f1:8b:bf:52:26:5b:f9: 50:4a:c2:61:10:d6:b8:db:1b:ad:86:92:f5:fe:64:b1:b0:35: c7:4b:7c:08:b2:7b:6e:2d:9a:d6:93:d8:71:ce:6d:01:99:70: a2:9d:24:4d:9b:90:7d:80:5b:09:f3:7e:2f:11:da:d0:73:88: 89:b6:f3:b5:fc:a0:4c:57:01:74:47:9a:aa:97:6e:71:82:26: 38:eb:e1:96:0c:0e:c1:50:d3:61:61:aa:b9:9d:eb:10:7e:e7: a0:b3:32:be:c4:33:e9:5e:8c:b5:f3:36:d6:5a:72:31:d7:c3: 01:db:40:ef:82:c6:18:af:15:77:86:8d:6c:71:7f:2f:08:07: 39:92:03:cc:57:11:61:17:dc:5e:e6:02:65:57:ca:cd:91:a0: b1:43:9f:ef:6f:e8:88:7a:65:d9:6a:c3:7a:92:ec:4d:ae:76: c6:6e:f4:5a:a9:0b:35:a0:f6:9a:c0:f4:a9:69:77:5c:9c:1d: 4e:0f:01:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98vXKkRMMct2B8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjZkZGJiMjItYzM4NS00MzRlLTllOTItN2Y0NWIxNTRhNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuULieX7jlnhOoZX+ld5dxvK9WZs/uQIwRPir lXedlR7qvOmjG9eQXlC6z21vUx8MQuPfla9utR7+nCEup+2TX03X+9B2b5SJqoOk +8rHydxc4OVawzxSqSX8RATfozx9tPK1O4AE1OwiKBQ0DCE0sOtLTq/c5+90p076 1TqA1S/Hgoz+GDm7DavaMwsqnPoRCaC2umli/uj0sb0OaSqCcFAVkF57J59JapPS 0Y9ghsOxmiM5HYYJFOuEFbHoVDh98/NwXpcYF7ZqN/Z0LsqQ4DeJIFHGwWWsZptM utdlQDMeDTBjkOXRZfKOExhVeKfaPGIAxeTKo0PwqP+qDGGeqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5i6uoCZTm610R7IGvf5iX/TXFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZGE4MGE4OGMtZTQxYy0z YjcyLWE4OGUtMTY5MmJjM2ZjOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmAZdkLbmVgPui1dKuVwcpYMibb9gnz04wCm5cwux3E4iQ25NdQO28B l7PSD91AIssJiRcglzdMkI9iTvr2FTyH8Yu/UiZb+VBKwmEQ1rjbG62GkvX+ZLGw NcdLfAiye24tmtaT2HHObQGZcKKdJE2bkH2AWwnzfi8R2tBziIm287X8oExXAXRH mqqXbnGCJjjr4ZYMDsFQ02Fhqrmd6xB+56CzMr7EM+lejLXzNtZacjHXwwHbQO+C xhivFXeGjWxxfy8IBzmSA8xXEWEX3F7mAmVXys2RoLFDn+9v6Ih6Zdlqw3qS7E2u dsZu9FqpCzWg9prA9Klpd1ycHU4PAbs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:39 2025 by rpki-client