$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa File: 2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa (raw, json) Hash identifier: B6oFt9WCNH2bXH4HonR86LwOjFughr4ufVzbVByr1p8= Subject key identifier: CE:BE:66:72:62:DA:72:98:A3:21:06:A8:3F:9F:7D:03:99:D7:FA:97 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584DF640B017F6D967F82550A880 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 199.102.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:b0:17:f6:d9:67:f8:25:50:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=67ff0c54-3450-4846-8167-affdafecdfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:87:d4:dd:29:0f:d6:17:3d:24:17:5b:20: 1c:d0:59:ed:f8:dd:b5:13:08:9f:bf:92:ec:85:df: 4e:08:4d:d6:1d:64:34:38:4d:b0:8a:ff:69:55:9d: a8:dd:ed:75:ea:5c:ef:a8:3c:8f:44:fa:f2:75:ed: 5b:43:e3:b5:ca:0f:a1:1b:48:c3:d9:bb:e1:a7:95: 7e:74:e4:a7:3c:25:b8:0c:55:b4:66:a2:7b:84:a7: 4d:82:ff:fc:64:1d:93:e0:54:58:96:4c:42:e8:cb: b8:08:fb:d4:64:00:f6:81:a4:b7:91:0e:a6:6f:ad: e7:84:c9:9d:8e:dd:f8:9e:36:a1:ba:b6:59:61:cd: 84:5d:4d:00:4a:76:20:de:18:40:38:75:30:5c:94: f9:52:ad:1d:06:4f:26:c9:63:0a:8f:b5:e7:e3:d3: c1:2d:b5:db:d3:a8:e5:eb:8f:98:45:71:79:4d:e4: df:a3:2a:ad:12:ab:2b:62:14:1c:98:fd:25:89:cd: 20:ce:9d:ae:4b:89:4e:3f:4d:b1:39:7d:47:20:db: ad:56:93:5b:fb:55:59:7c:a9:39:5a:d3:47:88:2b: 5c:b7:73:62:17:5a:65:08:4b:dd:eb:7a:60:da:ca: 24:70:d6:57:b7:d0:39:80:d0:34:19:b9:f3:2c:aa: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BE:66:72:62:DA:72:98:A3:21:06:A8:3F:9F:7D:03:99:D7:FA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2d8f5f00-c60f-3297-aef6-8fdb86062c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.102.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:58:44:c8:6f:a9:3f:d5:97:09:15:ce:37:95:d0:e7:80:40: 78:df:01:0a:e6:a4:d5:ff:bc:f8:4e:e5:01:9f:5b:29:d3:c0: 11:ce:97:3d:bd:02:ed:43:9c:b7:52:52:90:dd:91:8e:4b:49: ec:f5:fc:19:7c:1b:d0:d6:35:57:2c:f4:e6:e9:33:19:c7:66: 50:62:9a:71:08:bd:6f:2f:00:ba:57:1b:5f:0d:ef:e8:e7:3d: 94:14:27:62:0f:6f:39:f4:1f:4a:ff:2e:8a:c1:a0:d8:d6:f6: 72:40:81:e0:b0:51:d4:e5:f8:c7:7f:77:d3:e9:bc:ee:61:94: 3f:fe:17:51:08:43:20:3e:dd:dd:a8:bd:f7:d8:13:b3:e2:06: 07:b8:9f:17:a4:cd:93:92:56:8e:2e:2c:77:b5:f6:11:6b:83: 69:d8:59:3a:3d:56:1d:ff:86:08:a6:1e:db:6d:df:81:bf:f1: a3:1a:e7:ec:bb:df:04:92:9c:8c:a4:e9:c3:f5:5b:22:f4:39: da:f3:c8:85:17:0b:d3:65:27:20:2f:36:ba:3d:0a:e5:72:8d: eb:a3:5b:6d:45:15:c3:4d:bc:e7:c6:fb:7b:c1:59:b7:7a:27: 2e:97:28:f6:70:e1:37:86:91:eb:3b:80:dc:55:76:b5:15:89: c7:7c:77:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QLAX9tln+CVQqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk NjdmZjBjNTQtMzQ1MC00ODQ2LTgxNjctYWZmZGFmZWNkZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4OH1N0pD9YXPSQXWyAc0Fnt+N21Ewifv5Ls hd9OCE3WHWQ0OE2wiv9pVZ2o3e116lzvqDyPRPryde1bQ+O1yg+hG0jD2bvhp5V+ dOSnPCW4DFW0ZqJ7hKdNgv/8ZB2T4FRYlkxC6Mu4CPvUZAD2gaS3kQ6mb63nhMmd jt34njahurZZYc2EXU0ASnYg3hhAOHUwXJT5Uq0dBk8myWMKj7Xn49PBLbXb06jl 64+YRXF5TeTfoyqtEqsrYhQcmP0lic0gzp2uS4lOP02xOX1HINutVpNb+1VZfKk5 WtNHiCtct3NiF1plCEvd63pg2sokcNZXt9A5gNA0GbnzLKqLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6+ZnJi2nKYoyEGqD+ffQOZ1/qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmQ4ZjVmMDAtYzYwZi0z Mjk3LWFlZjYtOGZkYjg2MDYyYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2bBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlYRMhvqT/VlwkVzjeV0OeAQHjfAQrmpNX/vPhO5QGfWynTwBHOlz29 Au1DnLdSUpDdkY5LSez1/Bl8G9DWNVcs9ObpMxnHZlBimnEIvW8vALpXG18N7+jn PZQUJ2IPbzn0H0r/LorBoNjW9nJAgeCwUdTl+Md/d9PpvO5hlD/+F1EIQyA+3d2o vffYE7PiBge4nxekzZOSVo4uLHe19hFrg2nYWTo9Vh3/hgimHttt34G/8aMa5+y7 3wSSnIyk6cP1WyL0OdrzyIUXC9NlJyAvNro9CuVyjeujW21FFcNNvOfG+3vBWbd6 Jy6XKPZw4TeGkes7gNxVdrUVicd8d3E= -----END CERTIFICATE-----Generated at Thu Jun 4 10:13:41 2026 by rpki-client