$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa File: 2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa (raw, json) Hash identifier: kddamHQs7qvUq2CosI+RQMIFrsM8k/D160tD1i+heHM= Subject key identifier: 15:9B:0B:29:AC:E3:DD:DB:79:C0:25:CF:80:53:EA:5F:3C:B4:CD:46 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F498AB3D0FA8B5EC5678A0D00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 199.102.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:b3:d0:fa:8b:5e:c5:67:8a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a3f9379-e302-4c7a-9e46-971890981bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:10:54:96:44:e3:9d:09:ea:d9:28:09:8f:c9: b5:f6:ba:45:5b:1e:7a:6f:3c:43:c5:d7:56:53:ed: 94:55:b8:b5:82:67:d8:3a:c2:a1:96:9c:a3:e3:ed: 50:70:9a:2a:bf:ea:a5:ac:b9:4d:b4:e3:09:db:68: 4e:4e:81:74:9f:68:2d:17:d4:e9:28:d8:7c:36:37: b3:46:06:91:74:a4:5f:70:60:de:90:03:bc:a1:de: a3:d8:27:1e:7a:15:33:17:56:a3:02:b9:c1:24:97: 27:75:4f:ce:44:7d:9d:8a:46:3c:9a:04:f2:9f:fd: cc:93:42:2a:ec:91:f5:58:00:f6:0b:79:a6:aa:fa: f8:11:0f:1f:54:ea:05:77:bf:fa:11:d7:87:eb:ac: af:e2:49:ae:0d:60:55:9c:52:91:84:e5:28:3b:b4: ee:61:4c:8b:34:1c:c3:f4:49:29:69:dc:dd:54:22: 6f:e9:f4:93:22:d9:44:50:32:d8:bb:e5:05:eb:46: d2:72:4b:18:3f:21:4d:41:35:cf:05:b7:fc:eb:c0: 87:f2:25:01:d1:74:c7:9d:4b:7f:e0:67:76:ea:b0: 33:8a:8f:8f:61:e4:a4:34:f6:61:3c:09:08:13:ee: 44:d6:ea:97:7d:fe:67:0d:8e:a1:cd:d8:a4:15:82: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9B:0B:29:AC:E3:DD:DB:79:C0:25:CF:80:53:EA:5F:3C:B4:CD:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:75:76:fa:cc:a7:88:3b:53:1a:e6:86:37:48:cf:9d:43:ce: 7f:14:98:6a:d5:ec:ca:08:97:94:16:42:80:96:19:48:4a:50: 15:c2:f3:0c:b9:db:08:c0:3c:99:17:83:cb:0c:9c:46:0a:83: f1:c3:30:9e:3a:79:b0:10:74:db:a8:89:99:8e:c3:9f:41:48: 28:49:ab:08:74:74:97:7c:88:62:ec:4d:79:25:69:66:be:48: 6f:82:ff:a2:e8:11:66:9d:e1:1b:15:8b:28:cf:c3:46:e3:70: f2:e9:c8:ef:7a:e1:18:02:12:c6:36:ef:8b:30:39:95:df:39: e7:79:e9:98:e9:d6:af:a1:dd:4c:d6:6a:77:db:23:3b:d5:16: db:4c:28:5f:73:41:02:28:1a:fc:54:17:9e:22:28:09:d1:5e: 3c:6c:2d:73:15:cd:31:2f:8e:6b:e8:be:a2:47:99:cb:14:cb: a6:47:0f:66:17:96:9f:88:64:cf:d7:9c:16:76:53:ee:e4:e4: 5e:30:19:43:bb:c0:5c:46:dd:d7:15:03:16:c8:73:21:96:61: 59:5c:d1:9c:bb:c4:31:44:c0:fe:4d:a8:27:fe:b9:d0:b5:d6: 4b:f4:76:e6:24:c4:89:73:96:17:48:71:09:82:e6:3f:f1:95: 00:7a:cd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JirPQ+otexWeKDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGEzZjkzNzktZTMwMi00YzdhLTllNDYtOTcxODkwOTgxYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hBUlkTjnQnq2SgJj8m19rpFWx56bzxDxddW U+2UVbi1gmfYOsKhlpyj4+1QcJoqv+qlrLlNtOMJ22hOToF0n2gtF9TpKNh8Njez RgaRdKRfcGDekAO8od6j2CceehUzF1ajArnBJJcndU/ORH2dikY8mgTyn/3Mk0Iq 7JH1WAD2C3mmqvr4EQ8fVOoFd7/6EdeH66yv4kmuDWBVnFKRhOUoO7TuYUyLNBzD 9EkpadzdVCJv6fSTItlEUDLYu+UF60bScksYPyFNQTXPBbf868CH8iUB0XTHnUt/ 4Gd26rAzio+PYeSkNPZhPAkIE+5E1uqXff5nDY6hzdikFYKVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWbCyms493becAlz4BT6l88tM1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmQ4ZjVmMDAtYzYwZi0z Mjk3LWFlZjYtOGZkYjg2MDYyYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ1dvrMp4g7UxrmhjdIz51Dzn8UmGrV7MoIl5QWQoCWGUhKUBXC8wy5 2wjAPJkXg8sMnEYKg/HDMJ46ebAQdNuoiZmOw59BSChJqwh0dJd8iGLsTXklaWa+ SG+C/6LoEWad4RsViyjPw0bjcPLpyO964RgCEsY274swOZXfOed56Zjp1q+h3UzW anfbIzvVFttMKF9zQQIoGvxUF54iKAnRXjxsLXMVzTEvjmvovqJHmcsUy6ZHD2YX lp+IZM/XnBZ2U+7k5F4wGUO7wFxG3dcVAxbIcyGWYVlc0Zy7xDFEwP5NqCf+udC1 1kv0duYkxIlzlhdIcQmC5j/xlQB6zVI= -----END CERTIFICATE-----Generated at Mon Sep 28 21:18:36 2026 by rpki-client