$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b666e68f-274d-35d1-bb34-66272f47070d.roa File: b666e68f-274d-35d1-bb34-66272f47070d.roa (raw, json) Hash identifier: /P8mHhQ6B7JiE+lm2niuX5t+KFVHMAl78G67rKNiOXc= Subject key identifier: 2B:D8:9C:7B:B7:F6:CF:A5:68:C2:19:8C:F3:25:1D:2F:30:10:02:2D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A74B5CD1F853F859F4F484620 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b666e68f-274d-35d1-bb34-66272f47070d.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 11404 IP address blocks: 199.102.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:cd:1f:85:3f:85:9f:4f:48:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=b3f5e488-f95a-4ad9-b4f2-00215447e3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:21:a0:b6:07:a6:d6:95:43:77:cb:a8:51: cb:b2:5c:e1:c2:d0:64:b1:76:b5:47:4e:da:55:a8: 73:78:b8:64:2d:6b:3a:fd:cf:9d:0c:39:d9:ac:65: 8b:a8:fc:99:84:77:16:26:da:ef:c0:fc:08:4d:78: a7:88:5b:5e:c3:34:07:2c:95:ba:27:dc:66:f9:fa: 5b:5e:fb:c7:d3:90:c7:28:11:49:04:f1:47:75:44: 35:e3:aa:0b:24:f8:6d:d6:f7:63:75:a5:9f:58:67: cc:60:1a:7f:14:e4:be:c4:c4:cf:27:f5:a2:82:3b: 63:38:83:20:68:ae:bd:14:08:0f:15:d3:52:32:50: 18:27:4e:95:12:b8:1b:ec:57:21:a5:e1:b9:b6:f8: 49:fa:83:a5:38:98:e1:be:5b:ba:47:e2:70:06:e4: 17:d8:fc:2b:48:10:d9:8f:bb:65:6d:7e:71:13:cb: 80:1b:cf:80:cd:21:16:6e:04:c4:f5:ba:72:41:d9: 79:86:b3:36:c3:99:6e:9d:0e:ed:22:99:e7:03:a0: 63:7c:d0:53:a5:51:8f:67:b5:71:a7:4a:1e:a5:68: 68:8c:ec:8e:ad:70:50:e2:0a:47:60:bc:66:a0:1c: fc:0b:b4:dc:d2:56:e0:d6:3f:87:57:3b:b4:cb:c2: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D8:9C:7B:B7:F6:CF:A5:68:C2:19:8C:F3:25:1D:2F:30:10:02:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b666e68f-274d-35d1-bb34-66272f47070d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:88:3f:73:41:3c:a5:0a:cc:de:68:f2:71:16:ca:81:10:3b: 2d:cd:2c:c6:bb:d9:d7:bb:ff:4a:dd:8b:a9:31:bc:a1:0a:a5: 73:a8:d3:77:0a:93:af:73:dd:68:7e:f4:47:78:58:aa:66:de: 2c:82:46:30:ad:10:f1:ba:a3:a1:3f:40:af:62:3e:cb:4a:fe: 13:43:2a:19:75:41:1b:cd:bf:af:e2:28:ba:0e:e3:47:a2:12: a4:e2:7d:2a:0e:75:46:a0:68:c8:0f:72:8b:c9:21:b6:ae:10: 9b:a2:01:83:f9:0b:1d:48:dd:23:04:20:03:dd:b3:36:a8:f1: 29:ff:5d:3e:e6:53:bb:e7:0b:b6:68:d0:45:66:7d:7d:80:ec: 5f:d8:17:d8:a8:47:1c:b1:c0:46:68:8c:f8:8f:00:12:86:72: f0:50:6f:ed:07:7f:41:70:1b:2e:a9:7b:25:c6:60:68:5e:ce: 20:15:be:8b:b5:a4:3c:c6:89:1e:76:d8:fa:8c:d5:ed:55:a6: a7:d6:4d:89:66:f3:63:99:1a:5f:3f:5d:07:c7:5e:d8:4e:0e: 7f:5c:1f:c7:30:6f:32:50:b7:73:11:fb:c0:08:c8:85:7a:c0: 4b:78:1a:17:c1:2d:dc:49:2a:f2:1d:dd:e3:ab:19:90:a9:7f: 15:d0:55:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tc0fhT+Fn09IRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk YjNmNWU0ODgtZjk1YS00YWQ5LWI0ZjItMDAyMTU0NDdlM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobkhoLYHptaVQ3fLqFHLslzhwtBksXa1R07a VahzeLhkLWs6/c+dDDnZrGWLqPyZhHcWJtrvwPwITXiniFtewzQHLJW6J9xm+fpb XvvH05DHKBFJBPFHdUQ146oLJPht1vdjdaWfWGfMYBp/FOS+xMTPJ/WigjtjOIMg aK69FAgPFdNSMlAYJ06VErgb7FchpeG5tvhJ+oOlOJjhvlu6R+JwBuQX2PwrSBDZ j7tlbX5xE8uAG8+AzSEWbgTE9bpyQdl5hrM2w5lunQ7tIpnnA6BjfNBTpVGPZ7Vx p0oepWhojOyOrXBQ4gpHYLxmoBz8C7Tc0lbg1j+HVzu0y8J3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvYnHu39s+laMIZjPMlHS8wEAItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYjY2NmU2OGYtMjc0ZC0z NWQxLWJiMzQtNjYyNzJmNDcwNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuIP3NBPKUKzN5o8nEWyoEQOy3NLMa72de7/0rdi6kxvKEKpXOo03cK k69z3Wh+9Ed4WKpm3iyCRjCtEPG6o6E/QK9iPstK/hNDKhl1QRvNv6/iKLoO40ei EqTifSoOdUagaMgPcovJIbauEJuiAYP5Cx1I3SMEIAPdszao8Sn/XT7mU7vnC7Zo 0EVmfX2A7F/YF9ioRxyxwEZojPiPABKGcvBQb+0Hf0FwGy6peyXGYGheziAVvou1 pDzGiR522PqM1e1VpqfWTYlm82OZGl8/XQfHXthODn9cH8cwbzJQt3MR+8AIyIV6 wEt4GhfBLdxJKvId3eOrGZCpfxXQVUE= -----END CERTIFICATE-----Generated at Wed Jul 23 16:07:45 2025 by rpki-client