$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa File: e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa (raw, json) Hash identifier: +VvsY+mgXig6JsY6trS00E4gkRvPeueRmA6GcPuKHQE= Subject key identifier: 01:85:9B:4E:35:51:B5:03:6D:36:EF:8E:C1:41:A9:99:51:20:1B:DE Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5571CE637FB87E0DF748F580 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 199.102.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:ce:63:7f:b8:7e:0d:f7:48:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=8fd15019-6b93-4ef7-b9c9-cd79f39eb954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:89:0d:11:26:44:2e:9f:76:ef:74:aa:9b: 21:c3:6f:9b:22:4e:b0:21:15:27:3d:a6:55:e1:df: 4c:70:83:03:f5:99:61:32:66:54:64:c6:df:5a:9a: d0:5e:ff:68:8a:9a:a1:46:f9:32:da:57:f2:aa:97: ec:5f:bb:62:80:f1:23:34:87:b8:28:51:87:9c:83: c7:fe:c5:c9:05:c6:e0:05:4c:ae:a2:6f:b6:ad:77: 50:00:cb:66:c3:60:fc:b0:89:e8:09:98:20:01:78: 5c:88:d5:48:4d:97:b4:70:64:da:a1:d4:38:98:46: 4e:ef:7f:05:2f:53:7a:b0:ea:e6:47:47:00:8d:11: 0e:e1:49:c0:5b:1e:2a:73:ef:77:4c:3a:57:20:f8: 8d:d3:73:3c:cd:0c:da:41:b6:49:c6:2d:15:45:7e: e6:f8:02:f0:f0:54:77:9a:e6:37:3d:31:66:27:a8: 14:29:4c:09:52:a7:d2:14:99:5b:92:81:fd:1b:08: 1e:57:80:78:a7:4f:83:56:10:c1:e6:06:37:cb:1a: e5:aa:1b:90:e8:45:0c:3f:bc:d4:72:b2:7d:bd:c9: 9d:b5:f6:55:63:ca:50:b2:45:b4:70:d8:df:9b:8e: 52:87:1e:b7:96:fa:61:f4:b2:21:c4:9f:55:36:90: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:9B:4E:35:51:B5:03:6D:36:EF:8E:C1:41:A9:99:51:20:1B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7a:3b:26:63:04:91:98:47:bf:df:e9:53:af:99:78:20:55: 5c:01:68:a8:cc:42:04:ef:6d:1c:c6:b2:2c:b4:8a:5b:78:5c: 56:1c:9f:48:e0:5a:4e:9a:fe:1a:97:19:90:24:4e:92:57:f1: c9:af:32:2b:29:82:2b:d7:09:99:22:71:d8:61:70:3b:c5:4b: 98:79:6d:a6:9b:ab:85:cc:6d:e6:f2:62:df:82:17:1a:c1:d5: 86:1c:44:1a:20:d1:b9:b7:41:45:60:99:3c:f5:c7:0f:ae:9a: 18:9b:b3:f5:ec:3c:8f:76:c0:8e:23:6c:46:8e:f3:20:95:52: 6f:ed:0f:a6:77:86:e9:40:06:ee:f8:37:7e:68:a4:ad:b0:50: 3d:30:46:e2:25:9c:03:fc:57:0b:31:65:fc:a4:02:18:65:d0: a9:7d:49:be:73:38:bd:b0:77:af:7a:51:8d:1a:bb:a3:0e:dc: 42:b5:18:8c:27:10:5f:2a:25:2d:9f:84:0d:7f:0e:1d:c5:3f: e4:cb:ed:8d:36:1d:ca:1a:1c:d4:30:9c:71:3f:b9:81:b8:3e: 40:1b:53:da:b4:7e:bd:98:68:57:9f:8c:57:6a:1a:8b:81:9c: 09:c6:5f:0d:dc:12:d4:16:fe:e1:9f:a9:7f:d6:44:e7:5c:4f: c8:3c:36:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcc5jf7h+DfdI9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OGZkMTUwMTktNmI5My00ZWY3LWI5YzktY2Q3OWYzOWViOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/6JDREmRC6fdu90qpshw2+bIk6wIRUnPaZV 4d9McIMD9ZlhMmZUZMbfWprQXv9oipqhRvky2lfyqpfsX7tigPEjNIe4KFGHnIPH /sXJBcbgBUyuom+2rXdQAMtmw2D8sInoCZggAXhciNVITZe0cGTaodQ4mEZO738F L1N6sOrmR0cAjREO4UnAWx4qc+93TDpXIPiN03M8zQzaQbZJxi0VRX7m+ALw8FR3 muY3PTFmJ6gUKUwJUqfSFJlbkoH9GwgeV4B4p0+DVhDB5gY3yxrlqhuQ6EUMP7zU crJ9vcmdtfZVY8pQskW0cNjfm45Shx63lvph9LIhxJ9VNpCeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGFm041UbUDbTbvjsFBqZlRIBveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZTBmZDhlMzAtYzhhMy0z NWEyLWE2MDEtYTg3NTNkNWUzODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp6OyZjBJGYR7/f6VOvmXggVVwBaKjMQgTvbRzGsiy0ilt4XFYcn0jg Wk6a/hqXGZAkTpJX8cmvMispgivXCZkicdhhcDvFS5h5baabq4XMbebyYt+CFxrB 1YYcRBog0bm3QUVgmTz1xw+umhibs/XsPI92wI4jbEaO8yCVUm/tD6Z3hulABu74 N35opK2wUD0wRuIlnAP8VwsxZfykAhhl0Kl9Sb5zOL2wd696UY0au6MO3EK1GIwn EF8qJS2fhA1/Dh3FP+TL7Y02HcoaHNQwnHE/uYG4PkAbU9q0fr2YaFefjFdqGouB nAnGXw3cEtQW/uGfqX/WROdcT8g8NuU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:51 2025 by rpki-client