$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa File: 2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa (raw, json) Hash identifier: vxYgWSo4CjxAL+0FP9V5pct5vYj5+du1cHRg1+tROg0= Subject key identifier: 2A:2E:51:2D:1B:CB:DC:02:E9:07:78:7F:9D:94:6C:33:D7:47:7F:0D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A74B5CDCC7ADDC3BF11EA2B00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 199.102.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:cd:cc:7a:dd:c3:bf:11:ea:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=44827694-4344-4475-a9e2-110803793754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:5b:06:09:f9:58:3f:cf:ed:93:b8:c1:0d: 59:b0:a9:a3:60:df:23:bd:05:72:c6:42:30:f8:d2: 43:1a:e9:09:dc:7d:93:4d:ce:1c:35:77:b7:65:7b: be:3c:f9:7e:9f:a7:85:58:e3:ab:0b:0f:2d:01:af: fb:a2:57:7b:29:18:5d:b6:b2:55:c0:14:fd:23:01: d4:40:1f:82:86:7f:a7:31:5f:be:ee:27:b9:60:24: e5:48:3e:89:3e:53:e6:ce:b7:33:66:20:61:04:35: e2:d1:4c:fd:99:c6:bb:c2:d6:f3:a5:b2:b4:95:e6: 80:ac:de:bf:21:e9:2a:6f:c2:a9:cf:4f:dd:0a:91: 82:97:be:21:ac:2b:41:66:b3:38:3b:fa:59:33:b7: ee:1f:90:9c:2a:7a:64:24:df:f1:d1:e1:0a:9f:9d: f8:d9:48:8b:cf:df:1c:21:3f:9f:25:d0:c7:3c:77: 73:af:35:a7:95:c4:9e:9c:46:5c:0e:8c:a9:de:60: f7:8a:20:10:96:f3:f6:d8:9e:05:54:df:8b:9b:4b: 95:b7:2b:a9:66:61:54:a1:91:af:06:ec:50:c3:62: 3f:79:fd:15:ad:1a:8e:36:e9:9c:7b:02:50:19:a0: 69:f1:6d:78:10:84:5f:67:2f:f3:a2:21:de:4e:0a: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2E:51:2D:1B:CB:DC:02:E9:07:78:7F:9D:94:6C:33:D7:47:7F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f6:6b:9b:df:a6:1f:46:71:af:18:fa:67:11:8d:0b:4f:19: 4d:76:67:a0:2c:a8:32:01:f4:80:c9:3e:13:79:b7:b2:1b:8c: 45:25:0c:73:a5:6b:d3:96:00:90:8d:64:fc:8a:ed:a3:77:0b: 3b:3b:09:54:87:cb:ee:7c:ee:11:32:df:9b:b3:47:ac:bb:02: ca:dd:8a:3b:df:56:ba:a0:5d:f4:14:bd:a9:38:60:85:c8:cb: c3:ee:3f:0e:7e:c9:87:16:f4:44:0b:1a:7e:a8:fc:7e:b8:2c: 5f:15:f6:3b:b0:36:3f:91:b7:8e:3d:72:4b:8b:a7:74:fd:df: 04:25:08:4c:51:b9:3d:1c:f2:7c:c4:83:f3:9f:f0:8e:07:26: 50:33:df:98:ee:f2:e4:ae:8e:9c:a5:f7:c9:88:d6:a0:e5:cd: ae:4e:23:30:3b:11:43:c0:c7:f1:b5:f1:8e:46:0a:03:45:de: 5f:53:9a:85:88:f1:3b:e5:a5:55:e8:21:41:fa:5a:81:e4:bf: 65:94:cb:a1:f7:4b:57:f7:29:8d:aa:43:1a:4d:af:38:30:78: 53:8a:a0:ac:a1:1b:19:c3:65:a7:9f:6c:1f:77:e2:45:41:dd: 42:a4:6b:34:e2:c4:5c:09:fd:34:dc:a7:3b:8e:50:62:57:4b: 78:29:74:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tc3Met3DvxHqKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk NDQ4Mjc2OTQtNDM0NC00NDc1LWE5ZTItMTEwODAzNzkzNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpNbBgn5WD/P7ZO4wQ1ZsKmjYN8jvQVyxkIw +NJDGukJ3H2TTc4cNXe3ZXu+PPl+n6eFWOOrCw8tAa/7old7KRhdtrJVwBT9IwHU QB+Chn+nMV++7ie5YCTlSD6JPlPmzrczZiBhBDXi0Uz9mca7wtbzpbK0leaArN6/ Iekqb8Kpz0/dCpGCl74hrCtBZrM4O/pZM7fuH5CcKnpkJN/x0eEKn5342UiLz98c IT+fJdDHPHdzrzWnlcSenEZcDoyp3mD3iiAQlvP22J4FVN+Lm0uVtyupZmFUoZGv BuxQw2I/ef0VrRqONumcewJQGaBp8W14EIRfZy/zoiHeTgpcaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCouUS0by9wC6Qd4f52UbDPXR38NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmQ4ZjVmMDAtYzYwZi0z Mjk3LWFlZjYtOGZkYjg2MDYyYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/2a5vfph9Gca8Y+mcRjQtPGU12Z6AsqDIB9IDJPhN5t7IbjEUlDHOl a9OWAJCNZPyK7aN3Czs7CVSHy+587hEy35uzR6y7AsrdijvfVrqgXfQUvak4YIXI y8PuPw5+yYcW9EQLGn6o/H64LF8V9juwNj+Rt449ckuLp3T93wQlCExRuT0c8nzE g/Of8I4HJlAz35ju8uSujpyl98mI1qDlza5OIzA7EUPAx/G18Y5GCgNF3l9TmoWI 8TvlpVXoIUH6WoHkv2WUy6H3S1f3KY2qQxpNrzgweFOKoKyhGxnDZaefbB934kVB 3UKkazTixFwJ/TTcpzuOUGJXS3gpdLo= -----END CERTIFICATE-----Generated at Mon Jul 21 07:09:55 2025 by rpki-client