$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17434baa-24ec-3b10-8b27-65cb30058e9d.roa File: 17434baa-24ec-3b10-8b27-65cb30058e9d.roa (raw, json) Hash identifier: Is7Q0JRZVOnvD2+gFRpe9xkrkQIpxhuQM2TUzMzW8hY= Subject key identifier: 3C:16:D9:03:06:8B:F0:60:DA:CB:6B:F0:90:5D:75:8C:0D:2D:3E:D3 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5571DB8F583F99103DED2F00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17434baa-24ec-3b10-8b27-65cb30058e9d.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 199.102.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:db:8f:58:3f:99:10:3d:ed:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=f752f2a4-c761-4281-9653-e0aa3ed15bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:08:19:54:fa:a1:b4:98:82:07:03:74:b8: 6c:49:87:e5:ea:ee:18:19:6d:bf:93:e3:36:b2:c0: 7c:fd:ec:00:cb:2d:bb:9c:51:52:87:23:b3:c9:61: cf:ac:b7:ea:dd:f9:bb:a5:3a:84:37:12:74:ea:6a: f1:f3:e7:e4:1c:67:f8:cf:a2:c1:6c:df:48:85:7e: c2:8c:e9:90:84:5d:a5:21:e0:c1:59:28:e6:ab:63: db:bc:24:0c:2b:b6:e8:f3:d3:5e:d0:d4:b2:05:39: 56:6b:c1:f8:86:fb:74:6d:45:11:0d:e1:4a:25:fe: b3:38:c5:9b:e0:fc:87:f3:2c:a2:0a:be:ea:ce:6f: ee:83:11:6c:bb:ce:85:70:d3:72:15:6c:d9:4e:ab: 73:19:f6:77:ad:65:d7:8e:1b:b5:42:79:86:15:90: cc:69:a7:28:c9:bc:51:37:4f:53:4e:9e:71:e4:75: 1d:8c:c1:39:ff:51:b8:63:0a:48:70:ea:83:12:3e: 91:2a:b5:2d:ff:f5:ae:42:d8:ad:70:b2:ca:54:cd: de:52:b0:ff:14:cf:11:c3:f4:00:b0:23:50:35:fa: fa:48:7d:40:43:8d:b0:a5:fa:68:a9:e1:87:df:f8: e4:cd:ee:7f:42:72:b8:eb:c8:2a:02:e0:0c:08:6b: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:D9:03:06:8B:F0:60:DA:CB:6B:F0:90:5D:75:8C:0D:2D:3E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17434baa-24ec-3b10-8b27-65cb30058e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:e4:8c:41:34:a7:c9:78:14:bb:98:42:4e:e5:c0:94:28: 47:87:8a:5e:ff:c9:09:ef:61:a9:65:c3:98:54:f4:f1:04:59: 40:49:b8:21:29:3b:52:2f:2e:c8:ba:aa:a0:d6:c1:80:9b:b5: 4a:7a:0a:6a:c4:42:ee:a5:60:ed:4e:1e:da:ce:76:af:f2:a0: 56:e1:5b:b2:7e:31:8e:f1:a4:ca:aa:ff:19:4c:bf:c6:b4:20: 32:06:fc:df:f6:61:fb:f4:06:61:22:a6:49:80:9a:d2:86:90: 4e:4a:8d:2e:03:93:1a:2f:2c:c1:c8:da:88:87:93:f1:ca:b3: f8:6a:d3:03:ec:be:b8:eb:f6:0b:70:a5:ba:da:f7:e0:7a:2d: 65:96:30:2e:65:1c:96:3e:ee:f6:92:1d:49:5a:18:b7:3c:aa: e2:ce:ef:7c:2a:ed:b1:20:ae:8a:a9:75:b5:04:4f:4e:96:a9: 45:27:9c:12:75:83:b3:87:af:97:15:ca:88:57:59:7f:d3:9c: 91:2c:d3:6e:37:f1:60:ef:ec:b1:c4:5c:ad:63:22:27:c6:f0: c7:f1:0b:26:d5:26:fc:5a:90:66:b0:d3:0d:8e:5b:0f:36:5e: 78:c1:8b:4a:36:29:18:ee:b5:fb:dd:d0:74:c3:11:15:73:c4: 4d:f1:ae:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcduPWD+ZED3tLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk Zjc1MmYyYTQtYzc2MS00MjgxLTk2NTMtZTBhYTNlZDE1YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUIGVT6obSYggcDdLhsSYfl6u4YGW2/k+M2 ssB8/ewAyy27nFFShyOzyWHPrLfq3fm7pTqENxJ06mrx8+fkHGf4z6LBbN9IhX7C jOmQhF2lIeDBWSjmq2PbvCQMK7bo89Ne0NSyBTlWa8H4hvt0bUURDeFKJf6zOMWb 4PyH8yyiCr7qzm/ugxFsu86FcNNyFWzZTqtzGfZ3rWXXjhu1QnmGFZDMaacoybxR N09TTp5x5HUdjME5/1G4YwpIcOqDEj6RKrUt//WuQtitcLLKVM3eUrD/FM8Rw/QA sCNQNfr6SH1AQ42wpfpoqeGH3/jkze5/QnK468gqAuAMCGujswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwW2QMGi/Bg2str8JBddYwNLT7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMTc0MzRiYWEtMjRlYy0z YjEwLThiMjctNjVjYjMwMDU4ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC05IxBNKfJeBS7mEJO5cCUKEeHil7/yQnvYallw5hU9PEEWUBJuCEp O1IvLsi6qqDWwYCbtUp6CmrEQu6lYO1OHtrOdq/yoFbhW7J+MY7xpMqq/xlMv8a0 IDIG/N/2Yfv0BmEipkmAmtKGkE5KjS4DkxovLMHI2oiHk/HKs/hq0wPsvrjr9gtw pbra9+B6LWWWMC5lHJY+7vaSHUlaGLc8quLO73wq7bEgroqpdbUET06WqUUnnBJ1 g7OHr5cVyohXWX/TnJEs02438WDv7LHEXK1jIifG8MfxCybVJvxakGaw0w2OWw82 XnjBi0o2KRjutfvd0HTDERVzxE3xru4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:40 2025 by rpki-client