$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/952f842b-b2a6-30bc-ae43-85820673e3b2.roa File: 952f842b-b2a6-30bc-ae43-85820673e3b2.roa (raw, json) Hash identifier: Eoc5LenkBXS5AU/0FToHcEGP5Ni14+yfijTnbhB5BWo= Subject key identifier: 8D:83:A2:D9:3D:39:D2:8E:BA:E3:67:E2:CE:5A:E9:E9:4B:20:6D:99 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584AE72BBA126F6C3690764BF320 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/952f842b-b2a6-30bc-ae43-85820673e3b2.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 7029 IP address blocks: 206.245.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:ba:12:6f:6c:36:90:76:4b:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=e6fd2499-cb2a-4dde-9af8-ac023d025b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:4e:40:a0:f4:8f:50:64:8f:63:be:eb:4c: bc:4f:99:c9:75:02:6a:ee:12:7e:53:4d:d8:43:32: ea:14:76:e2:4e:98:23:55:7f:47:4c:09:51:a6:2e: ee:3c:0f:55:c0:48:35:de:94:93:ab:59:00:86:ed: f0:5f:c3:31:1d:8e:eb:ce:ef:b7:84:ff:4f:5b:7a: c5:9e:3e:95:b7:3e:43:f8:fa:23:3b:f4:cb:dc:ef: 25:fa:ae:a0:50:2e:c9:1a:11:a5:45:4d:f7:aa:de: e6:9c:c8:09:aa:47:0c:8d:1d:0d:ad:08:bc:36:d5: 08:eb:3a:0d:4d:5c:e9:a7:d4:cc:6c:32:6f:2e:60: 0e:32:17:d6:e2:63:4c:0d:e1:d4:a2:c3:9c:c1:62: f0:27:54:fc:a0:dd:ca:68:71:dc:41:50:03:dc:43: bd:ba:5c:f5:06:73:26:4a:dc:e2:ac:08:23:86:7b: 33:85:e9:e5:50:d6:20:2e:22:c2:96:0d:ce:ed:16: 79:55:d3:48:d6:0a:bd:bb:20:66:db:d7:ce:cc:1d: ad:ec:74:ad:ca:d1:ac:5e:5a:1a:9c:9f:de:15:d3: 51:70:fe:f6:d8:fc:f9:e5:cc:23:22:80:57:a2:51: ad:36:0c:ef:f3:e5:90:c3:ea:b9:51:86:e8:e1:f6: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:A2:D9:3D:39:D2:8E:BA:E3:67:E2:CE:5A:E9:E9:4B:20:6D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/952f842b-b2a6-30bc-ae43-85820673e3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:99:40:60:15:bc:91:27:fc:4e:58:5c:60:51:35:56:8f:29: 73:bb:f9:cd:7c:d6:14:e7:33:bf:9f:9d:37:08:c0:c4:8c:41: 7f:e5:a9:aa:95:25:b9:f4:63:93:8f:ba:ff:db:fa:30:e6:ef: 5e:a8:34:ac:ad:df:10:f3:82:29:be:f0:36:ae:87:b2:4b:dd: 0e:2b:9e:ca:f9:82:85:2a:40:0e:e0:0a:02:2e:2f:28:a2:06: db:9a:8e:71:a1:39:46:41:da:5e:eb:94:56:81:62:22:15:21: 9c:c6:e8:68:01:3c:c4:d2:75:30:6f:ae:88:d3:99:b4:a6:4b: 38:75:a2:7a:f4:08:bd:91:2d:fe:f6:bf:64:18:a9:66:97:70: 2e:33:06:ef:19:e5:8e:f3:03:68:85:c7:2f:c0:c8:35:fe:54: 1d:bd:0a:f2:2c:41:06:31:f5:e5:24:d4:c8:1a:c3:56:bc:26: d1:e2:60:27:6f:fe:7c:23:ef:ab:9e:71:12:85:fc:9a:42:24: 50:74:9f:ab:bb:01:ed:0a:14:d3:12:aa:76:c9:94:1c:5e:f3: cd:f9:75:f2:66:d1:46:43:7d:da:d4:0c:0b:6f:75:16:79:b0: 49:02:f7:4c:d6:a3:6a:bd:8e:1a:c9:b9:c0:82:57:4c:16:1a: a2:bd:f5:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7oSb2w2kHZL8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk ZTZmZDI0OTktY2IyYS00ZGRlLTlhZjgtYWMwMjNkMDI1YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk5OQKD0j1Bkj2O+60y8T5nJdQJq7hJ+U03Y QzLqFHbiTpgjVX9HTAlRpi7uPA9VwEg13pSTq1kAhu3wX8MxHY7rzu+3hP9PW3rF nj6Vtz5D+PojO/TL3O8l+q6gUC7JGhGlRU33qt7mnMgJqkcMjR0NrQi8NtUI6zoN TVzpp9TMbDJvLmAOMhfW4mNMDeHUosOcwWLwJ1T8oN3KaHHcQVAD3EO9ulz1BnMm StzirAgjhnszhenlUNYgLiLClg3O7RZ5VdNI1gq9uyBm29fOzB2t7HStytGsXloa nJ/eFdNRcP722Pz55cwjIoBXolGtNgzv8+WQw+q5UYbo4fZCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2Dotk9OdKOuuNn4s5a6elLIG2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTUyZjg0MmItYjJhNi0z MGJjLWFlNDMtODU4MjA2NzNlM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2ZQGAVvJEn/E5YXGBRNVaPKXO7+c181hTnM7+fnTcIwMSMQX/lqaqV Jbn0Y5OPuv/b+jDm716oNKyt3xDzgim+8Dauh7JL3Q4rnsr5goUqQA7gCgIuLyii BtuajnGhOUZB2l7rlFaBYiIVIZzG6GgBPMTSdTBvrojTmbSmSzh1onr0CL2RLf72 v2QYqWaXcC4zBu8Z5Y7zA2iFxy/AyDX+VB29CvIsQQYx9eUk1Mgaw1a8JtHiYCdv /nwj76uecRKF/JpCJFB0n6u7Ae0KFNMSqnbJlBxe8835dfJm0UZDfdrUDAtvdRZ5 sEkC90zWo2q9jhrJucCCV0wWGqK99Ro= -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:15 2025 by rpki-client