$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa File: 2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa (raw, json) Hash identifier: ZnwAEEeVsAIhbldWxYEAYH5TTB7Y1nXkN0nKewN738g= Subject key identifier: 5D:4D:B6:C5:27:32:76:55:7A:A6:A8:04:8F:F5:59:4E:9B:51:BF:2F Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5571E628905DA54140351FE0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 199.102.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e6:28:90:5d:a5:41:40:35:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=966e1d0e-58de-4ec4-8be7-b08546357ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:03:2e:80:07:de:b0:07:70:dc:a2:67:33:a5: 06:f7:99:e7:8e:92:22:d4:de:e6:1f:ee:17:97:4d: 75:ac:c3:3e:d1:4b:85:94:0d:8b:10:ae:6d:ba:eb: 2e:a1:4a:8b:dd:be:bc:c9:dc:b3:a1:c8:d6:c0:19: c5:17:db:e7:dd:23:0c:74:b2:28:99:1f:b7:d9:8a: e7:2c:dd:b1:b7:d5:3c:0e:d6:b3:03:cf:ba:7c:5b: da:0c:93:d2:7d:c3:64:17:34:25:20:56:57:a8:92: 67:fd:64:79:05:fe:cf:d4:79:54:90:e3:3f:a5:be: 09:d8:3b:be:00:1a:fe:c8:b9:01:72:65:18:f5:86: 6b:47:f1:2b:ec:16:d0:37:12:a7:d9:83:e5:23:aa: f2:c2:2b:87:2a:a1:9f:a5:91:db:f4:f6:a7:05:52: e4:3e:72:f6:88:76:81:ba:9d:ae:f1:6e:08:89:7e: f0:13:be:e2:ce:ee:cb:bb:94:e1:87:74:fd:63:9d: dc:71:69:3d:cc:57:e4:19:46:a0:32:31:71:ac:cc: 86:dc:ba:42:5c:ce:cc:d0:d6:18:af:52:4d:3b:0b: 8f:25:73:ed:3f:6e:e5:ac:21:89:5a:2a:4f:81:b1: e9:1f:de:81:e7:59:ef:fe:04:43:f8:90:84:97:3a: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4D:B6:C5:27:32:76:55:7A:A6:A8:04:8F:F5:59:4E:9B:51:BF:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:65:7c:9d:17:2f:67:87:42:76:ab:12:54:da:ba:a9:30:2f: dc:6f:1f:40:aa:1d:dc:fe:13:6a:26:7c:ad:2f:15:0c:37:98: 95:19:13:a3:c8:6e:9e:b2:c5:fd:a1:39:3b:b6:af:4d:65:6e: 83:7f:fd:15:e9:cf:88:33:09:39:cd:ef:91:bf:4e:67:ed:81: 55:b1:ee:04:88:6f:13:15:ed:a5:9e:1b:de:a8:fb:d9:0c:8e: d2:a9:73:5c:55:4c:75:37:83:23:8b:e7:a8:92:52:48:36:aa: 12:0a:63:5a:d7:41:bb:fa:34:64:1a:d1:19:d3:b1:4f:f8:84: e2:35:74:4e:8c:3f:55:ac:aa:06:a3:97:9f:8d:d5:4e:ee:88: c7:82:a5:77:7a:08:58:68:45:d4:f9:11:93:03:0c:bc:9c:2b: 62:3f:b9:cb:97:cc:f0:80:c4:21:d9:5c:1f:e9:04:d7:24:af: 3e:09:cb:fe:72:50:dc:0a:34:dd:8d:e8:40:69:fc:13:fd:0a: a0:df:0e:b8:5d:9d:ac:1f:63:ab:30:c0:d9:36:25:92:41:d9: f2:af:8a:a5:d0:33:57:2a:e0:40:29:51:47:5c:40:12:c6:da: 81:9f:80:b8:6b:22:75:b5:c4:93:47:3d:5f:5f:7f:bd:da:ef: 73:82:cf:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceYokF2lQUA1H+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OTY2ZTFkMGUtNThkZS00ZWM0LThiZTctYjA4NTQ2MzU3Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgMugAfesAdw3KJnM6UG95nnjpIi1N7mH+4X l011rMM+0UuFlA2LEK5tuusuoUqL3b68ydyzocjWwBnFF9vn3SMMdLIomR+32Yrn LN2xt9U8DtazA8+6fFvaDJPSfcNkFzQlIFZXqJJn/WR5Bf7P1HlUkOM/pb4J2Du+ ABr+yLkBcmUY9YZrR/Er7BbQNxKn2YPlI6rywiuHKqGfpZHb9PanBVLkPnL2iHaB up2u8W4IiX7wE77izu7Lu5Thh3T9Y53ccWk9zFfkGUagMjFxrMyG3LpCXM7M0NYY r1JNOwuPJXPtP27lrCGJWipPgbHpH96B51nv/gRD+JCElzq9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1NtsUnMnZVeqaoBI/1WU6bUb8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmQ4ZjVmMDAtYzYwZi0z Mjk3LWFlZjYtOGZkYjg2MDYyYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADplfJ0XL2eHQnarElTauqkwL9xvH0CqHdz+E2omfK0vFQw3mJUZE6PI bp6yxf2hOTu2r01lboN//RXpz4gzCTnN75G/TmftgVWx7gSIbxMV7aWeG96o+9kM jtKpc1xVTHU3gyOL56iSUkg2qhIKY1rXQbv6NGQa0RnTsU/4hOI1dE6MP1Wsqgaj l5+N1U7uiMeCpXd6CFhoRdT5EZMDDLycK2I/ucuXzPCAxCHZXB/pBNckrz4Jy/5y UNwKNN2N6EBp/BP9CqDfDrhdnawfY6swwNk2JZJB2fKviqXQM1cq4EApUUdcQBLG 2oGfgLhrInW1xJNHPV9ff73a73OCz3U= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:28 2025 by rpki-client