$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa File: da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa (raw, json) Hash identifier: Noq54RVu18SXosDMSLO1zD0yjhne/QKnyjPZ409cXsI= Subject key identifier: DD:D1:34:A5:0F:9C:98:C8:58:44:82:67:F3:63:99:2A:F0:D6:E8:0E Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584EF71775BE1332FC7431D01800 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3754 IP address blocks: 199.109.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:75:be:13:32:fc:74:31:d0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=67f8ae24-30c3-40ed-8db5-9d46b07f3b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:27:6f:44:3a:d5:ca:62:79:34:aa:ee:7f: 6f:eb:6b:29:a1:8b:f2:00:a6:7d:57:86:80:82:2b: 7b:44:46:a1:bc:71:bf:a0:a1:76:d1:b2:78:7d:b1: c9:a7:f3:ac:f9:e1:bc:0e:1e:42:b7:c6:fc:5f:f3: 17:a9:cd:e0:e8:07:61:f0:6c:44:3d:88:0f:ae:67: 56:67:72:fe:90:17:52:be:e7:91:f9:63:a4:c2:2e: 2a:fd:fc:6f:b3:4b:d9:2a:c5:57:56:5d:f1:49:a7: 5c:d8:61:fa:7e:e2:b6:2e:2b:f3:39:0b:fd:b1:f9: 0a:72:e6:f5:01:12:14:e2:0d:e8:8c:55:1f:68:3b: 4d:46:7c:aa:96:64:ef:2b:3c:c4:a8:73:f0:51:cb: 60:af:3b:c9:e6:73:26:4c:c1:59:71:73:07:ae:e6: ae:f2:8d:00:ac:cd:44:cb:72:cf:38:c7:f6:98:07: 08:0c:b3:ac:9d:b1:3b:b8:44:0b:a8:3f:e5:80:32: 90:d0:d5:9c:79:fa:83:b5:17:79:82:56:d2:cf:51: eb:b0:3c:b8:6c:32:a0:dc:64:47:65:71:fc:3c:78: 56:1d:a1:94:ff:74:97:2b:87:2a:18:c6:86:94:c4: 62:44:77:26:36:16:ea:e2:1e:68:e8:7e:79:fb:f8: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D1:34:A5:0F:9C:98:C8:58:44:82:67:F3:63:99:2A:F0:D6:E8:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/da80a88c-e41c-3b72-a88e-1692bc3fc8e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e5:8d:ef:90:c4:c1:78:4d:a9:79:a0:98:92:78:c2:49:21: a6:71:43:44:ab:d8:eb:a0:82:25:74:88:18:64:b5:31:3b:70: 70:05:6c:df:df:06:8a:82:f1:5e:2a:98:de:24:e1:8f:21:5e: 56:13:09:f6:90:19:5e:a4:53:be:d3:97:45:3f:19:68:ef:07: 0b:cc:87:9c:3d:d5:45:bb:15:69:77:69:fb:9a:45:53:bd:a7: cc:a6:24:34:6e:98:81:67:d6:dd:a8:5d:68:ce:d0:ab:1e:24: 6b:7c:5d:2d:e7:de:ef:81:ab:92:b0:1c:b2:4e:0b:98:4e:cc: 5e:69:fb:64:e9:e5:d0:5b:08:b4:d0:04:36:f8:bf:e0:a6:99: 4a:d1:c3:7f:89:98:37:a9:13:6c:bb:21:cb:9c:35:7a:49:30: 10:5a:8b:f6:f6:34:52:fa:c3:8c:4e:b0:9a:08:d2:38:58:3f: d1:86:77:af:4c:02:cc:6c:de:85:f8:fd:e4:bd:2a:60:07:f3: 71:b9:d3:5c:fb:39:87:c8:95:ba:bf:31:f1:ed:44:c4:77:f7: 36:c8:13:c3:6f:0d:fa:a1:13:99:76:b6:93:9c:99:e2:60:94: ea:7b:62:37:6a:02:86:42:25:fc:b6:89:3b:e3:79:a0:f2:f0: c4:3d:8f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3W+EzL8dDHQGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NjdmOGFlMjQtMzBjMy00MGVkLThkYjUtOWQ0NmIwN2YzYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDwnb0Q61cpieTSq7n9v62spoYvyAKZ9V4aA git7REahvHG/oKF20bJ4fbHJp/Os+eG8Dh5Ct8b8X/MXqc3g6Adh8GxEPYgPrmdW Z3L+kBdSvueR+WOkwi4q/fxvs0vZKsVXVl3xSadc2GH6fuK2LivzOQv9sfkKcub1 ARIU4g3ojFUfaDtNRnyqlmTvKzzEqHPwUctgrzvJ5nMmTMFZcXMHruau8o0ArM1E y3LPOMf2mAcIDLOsnbE7uEQLqD/lgDKQ0NWcefqDtRd5glbSz1HrsDy4bDKg3GRH ZXH8PHhWHaGU/3SXK4cqGMaGlMRiRHcmNhbq4h5o6H55+/g2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3RNKUPnJjIWESCZ/NjmSrw1ugOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZGE4MGE4OGMtZTQxYy0z YjcyLWE4OGUtMTY5MmJjM2ZjOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/lje+QxMF4Tal5oJiSeMJJIaZxQ0Sr2OuggiV0iBhktTE7cHAFbN/f BoqC8V4qmN4k4Y8hXlYTCfaQGV6kU77Tl0U/GWjvBwvMh5w91UW7FWl3afuaRVO9 p8ymJDRumIFn1t2oXWjO0KseJGt8XS3n3u+Bq5KwHLJOC5hOzF5p+2Tp5dBbCLTQ BDb4v+CmmUrRw3+JmDepE2y7IcucNXpJMBBai/b2NFL6w4xOsJoI0jhYP9GGd69M Asxs3oX4/eS9KmAH83G501z7OYfIlbq/MfHtRMR39zbIE8NvDfqhE5l2tpOcmeJg lOp7YjdqAoZCJfy2iTvjeaDy8MQ9j/A= -----END CERTIFICATE-----Generated at Tue Sep 22 20:18:05 2026 by rpki-client