$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa File: da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa (raw, json) Hash identifier: 244rjiYvrxi6Fxf/W8PUw+DzEVSoBSghyKKigT7Pq5c= Subject key identifier: AF:E7:E2:09:83:1B:3B:26:6D:F1:EF:87:A3:B6:D0:09:C9:D3:DD:2D Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584D746FD6C2E5A6307FBFA0EE80 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3754 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d6:c2:e5:a6:30:7f:bf:a0:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=a49cc490-8a32-4e57-a304-8af0cc020306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:a0:8b:da:dd:99:68:16:96:49:6c:12:6c: d7:b8:03:b5:ed:5e:bd:57:5e:3d:8f:c0:3d:97:2d: a9:a7:ba:d7:a6:85:c8:5c:10:7c:58:b5:21:e1:b2: 60:7e:9b:75:da:51:dd:81:dd:de:1b:2b:67:10:60: dd:f3:0b:3b:01:1f:4c:88:25:a2:14:5e:47:05:70: 24:07:6e:3f:2b:8f:11:31:96:40:b5:49:b3:2f:18: ae:6d:b5:f1:ab:8f:f2:21:59:63:f0:c3:0e:a2:31: 42:ed:01:13:11:59:8e:e2:00:21:06:eb:89:c5:f6: c1:e2:be:4f:80:8f:59:0f:15:8d:74:09:4f:2c:7a: a4:95:ab:fc:c0:15:f3:e5:5d:60:5e:fa:7c:99:7f: e5:6f:5f:08:25:49:87:7e:2d:f5:43:6d:d4:68:51: 1b:34:90:ba:98:aa:88:a1:44:aa:40:26:1e:62:1a: 0a:af:57:63:29:6d:1f:3c:30:e0:93:cb:5d:43:e4: 3b:bc:35:9d:27:c0:4d:dd:3a:db:2f:93:eb:53:18: 42:ad:b0:58:e0:cb:97:e5:e1:d9:9b:3e:ae:90:40: 82:9e:09:c4:61:98:a7:30:e5:fd:3a:0c:79:65:cd: 81:7a:eb:dd:ac:f4:90:50:2d:67:d0:b4:75:4e:84: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:E2:09:83:1B:3B:26:6D:F1:EF:87:A3:B6:D0:09:C9:D3:DD:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d2:8d:dd:e0:1c:6e:f7:1f:70:40:64:5a:72:7a:52:f9:57: fa:00:ac:82:44:16:0d:93:24:81:9e:de:69:79:f1:f2:93:7f: b9:28:56:73:c1:0e:26:01:90:3a:d4:17:28:e5:be:cb:f5:f8: 83:9b:79:4c:38:fc:68:92:79:e0:fb:1f:f3:43:9e:8f:04:a1: 7b:08:3b:ff:b9:be:ca:ca:a0:49:cc:cf:95:8b:75:6d:e1:01: ab:64:f3:7e:ee:52:c2:2e:6b:13:3b:ee:05:ba:3f:b8:56:b6: 1a:bf:51:2e:a7:23:33:e6:3c:91:df:71:81:6c:63:99:d1:71: 11:88:e7:af:71:40:c1:46:5b:61:12:43:3e:a1:a4:1f:d7:eb: 4a:09:08:5a:23:ba:57:82:f0:2a:10:f7:d2:ae:54:12:66:46: e7:82:b6:e9:6b:1a:90:3d:2a:0d:95:2b:62:65:30:fb:c7:34: 55:c6:75:35:9a:1f:2c:3e:73:e5:7a:18:35:a2:10:e6:6c:59: e9:29:e9:17:08:52:73:85:ec:5d:3f:34:90:22:49:6f:bb:54: dd:a7:90:5a:26:46:0c:ff:8d:73:86:fa:76:dc:d6:1e:c3:d7: ec:3f:fb:e3:9a:2c:09:a1:12:76:95:b6:46:11:60:51:55:f8: 31:c3:ce:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9bC5aYwf7+g7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTQ5Y2M0OTAtOGEzMi00ZTU3LWEzMDQtOGFmMGNjMDIwMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv16gi9rdmWgWlklsEmzXuAO17V69V149j8A9 ly2pp7rXpoXIXBB8WLUh4bJgfpt12lHdgd3eGytnEGDd8ws7AR9MiCWiFF5HBXAk B24/K48RMZZAtUmzLxiubbXxq4/yIVlj8MMOojFC7QETEVmO4gAhBuuJxfbB4r5P gI9ZDxWNdAlPLHqklav8wBXz5V1gXvp8mX/lb18IJUmHfi31Q23UaFEbNJC6mKqI oUSqQCYeYhoKr1djKW0fPDDgk8tdQ+Q7vDWdJ8BN3TrbL5PrUxhCrbBY4MuX5eHZ mz6ukECCngnEYZinMOX9Ogx5Zc2BeuvdrPSQUC1n0LR1ToSCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/n4gmDGzsmbfHvh6O20AnJ090tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZGE4MGE4OGMtZTQxYy0z YjcyLWE4OGUtMTY5MmJjM2ZjOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/Sjd3gHG73H3BAZFpyelL5V/oArIJEFg2TJIGe3ml58fKTf7koVnPB DiYBkDrUFyjlvsv1+IObeUw4/GiSeeD7H/NDno8EoXsIO/+5vsrKoEnMz5WLdW3h Aatk837uUsIuaxM77gW6P7hWthq/US6nIzPmPJHfcYFsY5nRcRGI569xQMFGW2ES Qz6hpB/X60oJCFojuleC8CoQ99KuVBJmRueCtulrGpA9Kg2VK2JlMPvHNFXGdTWa Hyw+c+V6GDWiEOZsWekp6RcIUnOF7F0/NJAiSW+7VN2nkFomRgz/jXOG+nbc1h7D 1+w/++OaLAmhEnaVtkYRYFFV+DHDzto= -----END CERTIFICATE-----Generated at Fri Apr 17 11:02:07 2026 by rpki-client