$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa File: 7b56145a-292a-3242-b062-ea6188b785e0.roa (raw, json) Hash identifier: 1wFdXFCWLHGyDhtyGBNT5QQdGl9wDpH3y5x4QU0nQI8= Subject key identifier: BF:72:7E:67:D8:A0:8A:8D:48:DD:15:CF:8F:3A:29:EF:74:36:DA:25 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584AD0D644F25D79E869F0BA4B00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16276 IP address blocks: 199.48.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:44:f2:5d:79:e8:69:f0:ba:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=beb4bcd7-4b23-4cb6-a9d9-c99aa3604338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:25:0e:c9:3c:cf:6a:b4:9a:07:c4:6c:56: aa:8e:00:0f:17:09:cc:9d:61:41:b4:a9:a2:63:3f: 73:49:8c:d9:c5:42:93:e6:af:5d:06:b8:fa:6a:4b: cc:0d:1e:e3:86:ea:3e:9f:6d:51:fe:a5:a0:ff:ab: 19:7d:a3:33:a3:98:9a:a0:01:aa:ad:81:e7:98:ee: 3e:c7:02:77:26:bb:91:ac:9d:96:4e:8d:49:94:b4: b6:48:d8:99:44:2f:59:54:c5:91:ed:fb:4f:9a:73: 20:c3:9c:4b:5f:b3:0c:84:d6:3c:de:ad:f0:26:0b: c4:d8:56:4a:f4:dd:fe:25:07:5a:cb:ee:a6:30:ec: 3c:3c:81:38:4e:18:1e:7a:71:1a:c1:30:f2:05:7c: d9:6d:c0:8c:24:d5:ac:31:fc:82:aa:b0:60:22:6c: 70:1b:d0:3d:c8:41:6b:0a:ec:a6:70:2f:5d:f6:04: fb:a3:a4:29:8c:c3:1b:e7:31:99:46:49:57:2c:8b: 5c:35:e1:23:04:7f:c4:c6:4d:30:88:18:9c:7b:94: 30:2e:74:76:2f:70:2f:06:d6:4b:71:52:02:51:38: 2d:67:30:54:c8:bf:aa:f6:3e:cd:16:26:8c:ab:ef: b3:23:16:46:e3:4b:8e:ab:ce:db:67:84:cb:72:67: 1b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:7E:67:D8:A0:8A:8D:48:DD:15:CF:8F:3A:29:EF:74:36:DA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/7b56145a-292a-3242-b062-ea6188b785e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2e:73:09:64:d8:f2:81:a5:cb:5d:5a:3b:da:5a:b7:5b:f2: 5b:80:b6:fe:ac:25:13:28:3e:98:0b:18:1a:a3:85:f8:84:0d: 56:c5:e7:a6:20:12:07:65:58:c8:f0:36:b6:e7:70:f2:ae:01: 41:8c:2a:8b:2b:9a:65:88:96:95:49:66:dc:35:69:f5:1e:9a: e4:06:0e:57:3a:5e:a8:2e:e5:f4:f4:45:f1:ad:5e:62:c7:85: 02:d9:e1:0c:49:56:0d:cb:41:e7:1d:89:b7:c0:e9:21:b7:05: fd:39:aa:b5:f0:7e:bb:a9:53:07:6c:a3:48:aa:8d:22:8a:4b: a2:2d:6c:45:a5:c9:c1:b8:96:e7:54:05:16:b5:44:38:cc:44: e0:7e:c5:b1:fc:93:68:0f:ec:0a:c3:10:ff:51:eb:35:6d:98: 00:5c:4a:e9:29:e6:20:aa:07:4b:4d:be:04:0e:c0:56:34:f2: c0:3b:e0:b2:a4:26:13:98:32:9c:44:dc:2b:da:d7:1d:db:a6: 24:f5:22:0e:57:40:b1:58:ec:32:d5:e0:b8:45:a0:82:d0:03: 22:5e:b0:75:ce:62:77:87:b4:4c:12:8c:a7:29:c1:65:b9:c6: cc:dd:0b:d3:34:23:1f:89:b0:d9:94:24:cf:04:57:b4:82:8e: 16:72:1a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kTyXXnoafC6SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YmViNGJjZDctNGIyMy00Y2I2LWE5ZDktYzk5YWEzNjA0MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulIlDsk8z2q0mgfEbFaqjgAPFwnMnWFBtKmi Yz9zSYzZxUKT5q9dBrj6akvMDR7jhuo+n21R/qWg/6sZfaMzo5iaoAGqrYHnmO4+ xwJ3JruRrJ2WTo1JlLS2SNiZRC9ZVMWR7ftPmnMgw5xLX7MMhNY83q3wJgvE2FZK 9N3+JQday+6mMOw8PIE4ThgeenEawTDyBXzZbcCMJNWsMfyCqrBgImxwG9A9yEFr CuymcC9d9gT7o6QpjMMb5zGZRklXLItcNeEjBH/Exk0wiBice5QwLnR2L3AvBtZL cVICUTgtZzBUyL+q9j7NFiaMq++zIxZG40uOq87bZ4TLcmcbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9yfmfYoIqNSN0Vz486Ke90NtolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvN2I1NjE0NWEtMjkyYS0z MjQyLWIwNjItZWE2MTg4Yjc4NWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUucwlk2PKBpctdWjvaWrdb8luAtv6sJRMoPpgLGBqjhfiEDVbF56Yg EgdlWMjwNrbncPKuAUGMKosrmmWIlpVJZtw1afUemuQGDlc6Xqgu5fT0RfGtXmLH hQLZ4QxJVg3LQecdibfA6SG3Bf05qrXwfrupUwdso0iqjSKKS6ItbEWlycG4ludU BRa1RDjMROB+xbH8k2gP7ArDEP9R6zVtmABcSukp5iCqB0tNvgQOwFY08sA74LKk JhOYMpxE3Cva1x3bpiT1Ig5XQLFY7DLV4LhFoILQAyJesHXOYneHtEwSjKcpwWW5 xszdC9M0Ix+JsNmUJM8EV7SCjhZyGlA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:24 2025 by rpki-client