$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa File: e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa (raw, json) Hash identifier: 44X8MtPBG0sAkPBnY1FWieAHYC4ZThmTnbWFYYK3VvI= Subject key identifier: BF:78:1C:98:83:A6:42:D1:05:4B:36:22:43:57:00:41:E4:B8:BC:4E Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D15A2566145BDA0DC35BFDC00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 199.102.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:56:61:45:bd:a0:dc:35:bf:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=60c48e37-3338-4f17-bdb7-42a8a0aa0c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:a3:8c:39:29:a8:89:67:70:84:cb:b3:c6: 69:8d:01:64:d2:5c:da:a0:f1:ca:21:0e:84:29:47: ce:3e:ce:af:57:86:08:95:a8:1e:2e:8a:d5:7f:c0: e9:eb:80:75:f4:7a:89:5d:f4:53:2d:3a:f9:c8:de: 51:5e:cd:b9:8e:de:de:c8:fa:c2:e0:85:5e:50:c6: 3d:29:e7:05:25:18:75:51:86:a9:ea:d2:2a:fc:fe: 88:df:cd:4f:c1:e7:c2:40:f3:56:25:e1:53:17:c2: 4c:52:30:cf:02:f6:ef:65:8c:21:9a:34:a5:94:9e: 66:ba:68:87:c9:e6:b0:57:c4:cb:85:0d:39:cc:e5: 99:7c:a4:5a:cb:23:a4:17:90:91:c9:91:47:b8:26: 53:45:8e:41:54:3e:7a:cd:a8:bc:f7:7f:f6:2f:ce: d0:a2:44:46:cd:24:b8:45:1f:25:5f:c5:65:ee:b2: 9f:39:60:30:c7:58:80:27:8c:54:f1:a5:e3:a7:18: aa:f7:11:60:a2:35:7a:76:70:5b:06:99:11:73:3f: 96:d1:dd:81:98:67:65:2f:35:7c:4e:c1:e6:55:36: 5d:db:da:79:67:13:e3:d9:64:bf:1a:5b:3a:80:3d: b7:08:cd:51:73:f5:ce:9f:d6:a1:98:e8:de:9b:fe: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:1C:98:83:A6:42:D1:05:4B:36:22:43:57:00:41:E4:B8:BC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/e0fd8e30-c8a3-35a2-a601-a8753d5e387e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1c:8c:e4:4b:01:5d:27:7a:c2:a8:c4:fb:e7:73:d9:3f:c6: d7:6f:12:4d:0e:07:9f:68:6b:7e:78:a4:a3:4c:df:32:75:99: 9f:d9:a3:c7:f9:0a:0f:f8:4b:e4:c9:88:d6:18:f7:00:aa:c6: 58:e2:e9:6b:25:1e:6a:98:e1:6a:98:29:16:e3:be:08:ee:ed: a8:63:a6:9f:b7:a6:3c:c6:af:a0:b8:7d:fd:5f:54:d8:06:61: ca:c0:21:78:92:5f:4c:f2:dc:df:f0:25:9a:f4:04:f9:33:5d: 76:e1:d4:2f:65:e4:cf:37:63:e2:1f:ba:9d:74:fc:eb:5c:cd: 40:79:dc:ce:33:83:7b:f9:e4:dd:ac:82:b6:b0:93:8e:56:58: 94:26:bf:50:78:3d:45:81:d4:0f:d1:fe:e4:c6:3b:9a:73:aa: 1d:76:98:47:52:93:7f:d4:36:f5:df:e1:d2:20:e3:31:ac:1e: 41:11:55:25:5f:ed:28:c1:2a:8c:8d:4d:83:74:c8:9c:51:57: de:5f:19:57:d8:8b:31:3c:cb:4b:5f:02:df:3c:de:f0:94:c1: 2f:f1:3c:bf:08:1f:75:79:52:c2:55:6e:ca:2c:08:cb:0b:03: 88:f8:bb:1a:bf:70:14:ea:1d:ca:a4:0d:27:31:6e:5f:63:c0: 93:65:8a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolZhRb2g3DW/3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NjBjNDhlMzctMzMzOC00ZjE3LWJkYjctNDJhOGEwYWEwYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BmjjDkpqIlncITLs8ZpjQFk0lzaoPHKIQ6E KUfOPs6vV4YIlageLorVf8Dp64B19HqJXfRTLTr5yN5RXs25jt7eyPrC4IVeUMY9 KecFJRh1UYap6tIq/P6I381PwefCQPNWJeFTF8JMUjDPAvbvZYwhmjSllJ5mumiH yeawV8TLhQ05zOWZfKRayyOkF5CRyZFHuCZTRY5BVD56zai893/2L87QokRGzSS4 RR8lX8Vl7rKfOWAwx1iAJ4xU8aXjpxiq9xFgojV6dnBbBpkRcz+W0d2BmGdlLzV8 TsHmVTZd29p5ZxPj2WS/Gls6gD23CM1Rc/XOn9ahmOjem/7q2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL94HJiDpkLRBUs2IkNXAEHkuLxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZTBmZDhlMzAtYzhhMy0z NWEyLWE2MDEtYTg3NTNkNWUzODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYcjORLAV0nesKoxPvnc9k/xtdvEk0OB59oa354pKNM3zJ1mZ/Zo8f5 Cg/4S+TJiNYY9wCqxlji6WslHmqY4WqYKRbjvgju7ahjpp+3pjzGr6C4ff1fVNgG YcrAIXiSX0zy3N/wJZr0BPkzXXbh1C9l5M83Y+Ifup10/OtczUB53M4zg3v55N2s grawk45WWJQmv1B4PUWB1A/R/uTGO5pzqh12mEdSk3/UNvXf4dIg4zGsHkERVSVf 7SjBKoyNTYN0yJxRV95fGVfYizE8y0tfAt883vCUwS/xPL8IH3V5UsJVbsosCMsL A4j4uxq/cBTqHcqkDScxbl9jwJNligI= -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:14 2026 by rpki-client