$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa File: e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa (raw, json) Hash identifier: NIPoQGUgJV0TTCr7h3BOw7PJV8OzVnZ3fr8cofEZ3nw= Subject key identifier: 65:9A:E5:CA:32:78:D0:5E:09:14:1A:BD:8E:EC:AC:CE:16:E6:E7:BF Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584B2496C95F08A03485909A5BC0 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 5719 IP address blocks: 199.109.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c9:5f:08:a0:34:85:90:9a:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=c8088db2-82f2-4535-ba61-f4af7d302f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:2f:5b:22:c8:4d:c7:50:e8:89:ad:5d:4d: f3:12:48:20:a8:da:4c:0a:9e:41:37:c5:33:02:81: 00:71:c6:cc:61:0d:be:70:6d:38:6d:96:ff:60:9a: 00:81:10:cb:dc:3c:5a:4a:9c:bf:d6:b6:2a:52:85: f5:2e:2a:7e:93:47:6c:ba:a6:9b:06:69:cd:4b:8b: bd:6a:94:8d:76:09:0f:5c:80:fb:dd:1e:22:38:8b: 95:54:e2:6a:46:44:eb:29:09:69:70:be:d9:73:78: 8b:e2:ed:a1:6e:31:49:d8:44:28:3c:f7:2d:93:45: ba:a3:ae:c2:ba:e1:09:7a:ed:b2:fa:b0:30:78:44: da:e4:e3:44:f5:5c:8a:06:a5:76:8b:2a:4b:b5:01: 45:43:8b:d9:85:b8:2d:d5:9c:74:93:8a:6e:40:7e: ab:ed:f4:a7:bb:c3:3c:76:1c:94:4f:b2:0f:b0:f7: d1:5e:cc:2e:df:02:5d:1a:4c:0e:7f:8a:68:22:43: ad:0a:d4:a3:12:d1:f2:49:05:41:b0:4a:23:e8:2a: 7d:74:53:ea:77:51:5d:cb:dc:fc:86:f5:72:e3:87: 49:5c:67:ae:8e:2a:cc:03:8c:95:6f:e8:67:8c:19: 55:34:09:77:94:41:15:e3:6d:90:95:80:c0:5e:3f: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9A:E5:CA:32:78:D0:5E:09:14:1A:BD:8E:EC:AC:CE:16:E6:E7:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e85c81f7-adca-367d-96d5-d5e2b070ff5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:76:c7:a0:a2:15:c9:fb:65:24:c4:e7:79:7f:97:d7:05:f9: ff:16:69:be:2b:a4:c6:1c:78:3d:6f:b3:1d:69:33:b7:17:2d: 30:f1:c0:a0:28:d1:28:b6:06:16:4b:1d:94:07:69:45:e5:f6: a9:25:ba:0d:bc:3d:65:5c:62:cf:0a:11:62:af:14:43:3f:5b: 0e:63:44:15:42:43:1f:ae:f3:3d:84:09:3b:61:00:79:52:be: 00:fe:61:7b:24:24:73:a9:c4:77:69:16:74:a1:14:15:d6:48: 7f:8b:f8:c3:c9:55:9b:25:7b:27:d0:46:fe:4b:45:3f:09:df: cc:30:00:8b:cc:e5:de:5c:87:99:84:ed:08:8c:ff:3a:7a:b1: 66:e5:60:e8:1e:36:80:9e:6e:78:00:a6:6b:d8:29:4d:44:c4: 1c:dc:07:fc:e2:9b:f0:c6:d8:b9:bc:86:cc:c3:61:d0:65:b0: 74:3c:69:5c:52:a3:02:5e:6c:90:ef:24:41:bc:ea:1d:63:2f: 52:28:0c:ba:78:99:cc:4b:01:b2:ef:81:11:e7:fd:92:42:9b: 5e:94:97:98:bf:b9:38:a0:26:a2:de:14:71:c5:d9:ee:3f:f8: 14:c8:88:50:52:3c:39:32:83:20:a9:d3:ec:67:42:2d:6a:9a: 1c:77:55:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklslfCKA0hZCaW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YzgwODhkYjItODJmMi00NTM1LWJhNjEtZjRhZjdkMzAyZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhosvWyLITcdQ6ImtXU3zEkggqNpMCp5BN8Uz AoEAccbMYQ2+cG04bZb/YJoAgRDL3DxaSpy/1rYqUoX1Lip+k0dsuqabBmnNS4u9 apSNdgkPXID73R4iOIuVVOJqRkTrKQlpcL7Zc3iL4u2hbjFJ2EQoPPctk0W6o67C uuEJeu2y+rAweETa5ONE9VyKBqV2iypLtQFFQ4vZhbgt1Zx0k4puQH6r7fSnu8M8 dhyUT7IPsPfRXswu3wJdGkwOf4poIkOtCtSjEtHySQVBsEoj6Cp9dFPqd1Fdy9z8 hvVy44dJXGeujirMA4yVb+hnjBlVNAl3lEEV422QlYDAXj+nLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWa5coyeNBeCRQavY7srM4W5ue/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvZTg1YzgxZjctYWRjYS0z NjdkLTk2ZDUtZDVlMmIwNzBmZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx20sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl2x6CiFcn7ZSTE53l/l9cF+f8Wab4rpMYceD1vsx1pM7cXLTDxwKAo 0Si2BhZLHZQHaUXl9qklug28PWVcYs8KEWKvFEM/Ww5jRBVCQx+u8z2ECTthAHlS vgD+YXskJHOpxHdpFnShFBXWSH+L+MPJVZsleyfQRv5LRT8J38wwAIvM5d5ch5mE 7QiM/zp6sWblYOgeNoCebngApmvYKU1ExBzcB/zim/DG2Lm8hszDYdBlsHQ8aVxS owJebJDvJEG86h1jL1IoDLp4mcxLAbLvgRHn/ZJCm16Ul5i/uTigJqLeFHHF2e4/ +BTIiFBSPDkygyCp0+xnQi1qmhx3Va8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:47 2025 by rpki-client