$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8ccb538-a424-3188-b211-059e5cb7f788.roa File: d8ccb538-a424-3188-b211-059e5cb7f788.roa (raw, json) Hash identifier: V9ZGdxgyUL0zVd4tTSAwIBsH56g5Xr1Mqq5Iw5Mz1ac= Subject key identifier: C2:79:27:74:02:9A:16:DE:6C:37:FC:8B:C3:55:0B:38:67:01:DB:87 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584DCC6062377405270F71F8B180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8ccb538-a424-3188-b211-059e5cb7f788.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 398781 IP address blocks: 199.48.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:62:37:74:05:27:0f:71:f8:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=6124df98-0904-436b-a460-5a7ff5182069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:d1:da:93:c1:da:60:15:1d:76:96:d3:3d: cc:c7:8d:f4:4b:f6:ed:6b:8f:7f:ca:ea:09:d5:32: 0a:8f:99:d0:59:e3:4b:17:3c:24:89:a5:2d:56:1d: aa:5f:17:f6:72:68:8b:5b:c3:fd:22:bc:e9:60:ad: 4e:74:8c:15:55:18:76:c3:8b:f6:51:7a:1b:c4:7d: cd:6c:56:45:ec:48:fd:7c:36:52:6f:3f:63:83:79: a9:f0:c3:a1:f5:23:c7:01:66:39:86:0e:72:0a:81: 66:ee:19:9a:14:ec:19:57:69:27:13:8a:2a:b6:8f: 67:b7:cd:b8:32:9d:b6:79:75:7a:2e:0b:33:6a:a0: a5:b9:d9:ea:f0:f8:17:f6:94:dd:4b:90:e4:e4:d5: 01:36:bc:92:49:49:2f:58:2b:bb:1d:f7:ec:b9:68: e9:99:90:38:88:c4:83:7d:8d:c1:ca:4c:f1:50:3c: 54:a6:ed:1b:66:18:e4:0f:42:57:d0:63:16:ce:e4: f8:5a:b2:e2:80:df:f8:fe:27:08:9d:95:dd:e3:4f: ba:f0:c4:71:d0:96:17:d4:92:b9:6f:e2:04:17:50: 47:d5:92:24:0a:39:61:6e:43:25:50:14:19:be:64: 1d:5a:c6:29:f9:40:1e:c7:8d:a9:ec:06:95:a1:00: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:79:27:74:02:9A:16:DE:6C:37:FC:8B:C3:55:0B:38:67:01:DB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8ccb538-a424-3188-b211-059e5cb7f788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:95:00:d1:6c:06:b8:da:65:6f:b1:74:99:6c:5b:a6:81:54: b0:b6:06:aa:ca:cc:52:54:79:86:1f:a2:47:1c:dc:f1:9f:75: 28:4e:d3:c9:3a:2f:db:f2:8f:c6:b0:16:b0:c9:07:10:8e:e5: d1:9b:43:9b:de:51:7f:57:65:42:03:99:95:8d:ca:33:ef:43: bc:3a:84:1e:f5:e4:90:0d:f4:7c:22:54:3e:11:20:9c:cd:85: 2c:5a:3d:1e:ba:b8:10:08:d4:7f:83:05:0e:65:51:c8:f4:5a: 01:35:58:bd:e6:f6:f8:3b:e9:87:b5:40:8a:64:19:bb:2c:b3: 24:ad:a1:23:7c:ad:47:2b:1c:10:47:de:61:d9:d2:9c:16:16: 9c:7e:7c:5b:68:1c:24:e7:cb:b0:02:3e:bf:98:6e:15:a3:95: b7:32:37:b6:d6:73:03:b4:23:5c:85:40:f1:61:54:cc:d9:e8: 7f:7a:78:45:46:bb:6a:ce:0c:64:b3:f6:d5:f4:14:21:31:0b: 9c:6d:16:0f:e7:c0:68:a5:39:1b:f4:14:71:8a:e5:eb:be:ba: 63:5e:d7:84:d4:28:f0:45:a3:21:c2:54:1e:17:79:64:42:45: dd:48:b0:fe:6f:38:a3:22:60:39:2d:0d:b8:23:b6:3b:19:32: 5c:33:95:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYGI3dAUnD3H4sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk NjEyNGRmOTgtMDkwNC00MzZiLWE0NjAtNWE3ZmY1MTgyMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0knR2pPB2mAVHXaW0z3Mx430S/bta49/yuoJ 1TIKj5nQWeNLFzwkiaUtVh2qXxf2cmiLW8P9IrzpYK1OdIwVVRh2w4v2UXobxH3N bFZF7Ej9fDZSbz9jg3mp8MOh9SPHAWY5hg5yCoFm7hmaFOwZV2knE4oqto9nt824 Mp22eXV6LgszaqCludnq8PgX9pTdS5Dk5NUBNrySSUkvWCu7HffsuWjpmZA4iMSD fY3BykzxUDxUpu0bZhjkD0JX0GMWzuT4WrLigN/4/icInZXd40+68MRx0JYX1JK5 b+IEF1BH1ZIkCjlhbkMlUBQZvmQdWsYp+UAex42p7AaVoQCtKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ5J3QCmhbebDf8i8NVCzhnAduHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDhjY2I1MzgtYTQyNC0z MTg4LWIyMTEtMDU5ZTVjYjdmNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqVANFsBrjaZW+xdJlsW6aBVLC2BqrKzFJUeYYfokcc3PGfdShO08k6 L9vyj8awFrDJBxCO5dGbQ5veUX9XZUIDmZWNyjPvQ7w6hB715JAN9HwiVD4RIJzN hSxaPR66uBAI1H+DBQ5lUcj0WgE1WL3m9vg76Ye1QIpkGbsssyStoSN8rUcrHBBH 3mHZ0pwWFpx+fFtoHCTny7ACPr+YbhWjlbcyN7bWcwO0I1yFQPFhVMzZ6H96eEVG u2rODGSz9tX0FCExC5xtFg/nwGilORv0FHGK5eu+umNe14TUKPBFoyHCVB4XeWRC Rd1IsP5vOKMiYDktDbgjtjsZMlwzleE= -----END CERTIFICATE-----Generated at Wed May 13 04:01:15 2026 by rpki-client