$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa File: 9b5be190-61be-3524-9a29-a7fac18f508a.roa (raw, json) Hash identifier: 9kOY47C9NeILRVvAVTYNdzpcZIgeOSVrrpGG/notk7E= Subject key identifier: 22:DA:99:A7:BD:A5:E9:6F:7B:2D:B9:EB:44:79:A4:64:00:CB:B3:77 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584EE0C20182286527C03BF8E280 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 212384 IP address blocks: 199.48.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:01:82:28:65:27:c0:3b:f8:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=4ac965b6-eb0a-4914-a346-ea48e1e17f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:12:da:40:04:d9:97:df:24:d6:4c:bd:cb: 24:36:22:73:d7:6e:92:90:8c:a8:df:66:cd:49:43: 6e:3c:af:d9:a6:a9:a2:bf:b0:96:ef:4b:60:2c:3a: 17:17:df:52:30:68:12:bb:91:4a:59:58:5a:e8:bc: 25:32:50:68:5d:9b:ab:a8:fe:10:bd:16:63:57:c1: e9:73:56:5a:dd:8d:0c:16:47:b2:1a:08:c1:5e:53: 5d:4b:20:13:34:35:d7:24:64:90:15:4f:c8:43:41: 92:4b:b5:3b:fd:51:e1:22:b5:eb:eb:71:46:48:90: 75:2c:7d:82:2f:56:d0:8d:a3:a5:ba:f9:95:fd:9f: a8:52:4a:b0:84:94:4e:02:6a:45:ff:0e:2c:fc:ad: a9:78:e8:3f:c1:b6:71:98:db:f2:09:68:8b:ab:bd: 2f:82:b2:1f:a0:e2:49:6e:08:f4:1d:c2:34:fe:a5: ab:d4:6a:43:b5:22:4b:eb:9b:75:97:2b:c5:e2:eb: 5c:18:54:f1:7e:a9:0c:eb:13:19:e8:4f:55:8e:57: 85:32:5b:5f:34:0d:5d:d1:9d:79:43:7e:3c:ff:18: b3:f1:28:a5:b3:16:ba:27:45:49:29:48:c9:d5:b9: 4e:a7:9a:52:a7:11:3c:26:c6:ab:c8:1e:c3:10:90: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DA:99:A7:BD:A5:E9:6F:7B:2D:B9:EB:44:79:A4:64:00:CB:B3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c6:39:d8:26:d1:19:02:7c:09:55:99:ee:8f:a7:e9:8a:5f: ce:84:64:a1:82:92:00:d5:e8:b2:dd:43:16:d3:7f:49:2a:0b: c9:88:1f:bf:88:9b:22:a5:dd:ac:87:ca:87:ae:e7:73:b8:6a: ac:d8:7e:1c:29:cb:e8:c8:c8:09:70:f5:dc:7f:0d:a5:1f:ec: 05:3a:aa:e6:77:be:93:d2:63:cc:c2:7c:9a:59:2f:0f:64:f9: 1b:28:5a:72:df:9c:8d:53:7c:16:fb:59:29:31:59:f7:7a:06: b6:25:b5:48:c2:22:5c:7a:19:48:90:67:c6:4e:d2:88:c2:27: fa:7a:01:81:34:0e:43:8f:50:7d:0a:06:3e:9d:3f:58:8e:05: f6:ef:5a:ab:e0:a3:89:ba:3b:4b:4c:1b:cc:98:36:56:b8:28: 58:10:b4:e9:b7:ab:1f:15:58:9e:6d:b6:7b:69:7d:b9:7c:1f: a1:80:d8:e7:f7:76:0b:d3:01:97:7e:b1:6c:b1:73:1f:ad:c8: 0d:74:03:74:42:77:b9:b7:86:14:4d:52:a1:0c:b3:ce:e9:de: a4:fc:21:5f:6e:c5:f4:13:fb:6d:7d:01:61:bc:c8:d0:dc:98: a7:57:8c:ae:20:86:3d:b4:db:8c:63:f7:ea:72:5e:70:e4:ab: 65:d9:91:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgGCKGUnwDv44oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NGFjOTY1YjYtZWIwYS00OTE0LWEzNDYtZWE0OGUxZTE3ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotkS2kAE2ZffJNZMvcskNiJz126SkIyo32bN SUNuPK/Zpqmiv7CW70tgLDoXF99SMGgSu5FKWVha6LwlMlBoXZurqP4QvRZjV8Hp c1Za3Y0MFkeyGgjBXlNdSyATNDXXJGSQFU/IQ0GSS7U7/VHhIrXr63FGSJB1LH2C L1bQjaOluvmV/Z+oUkqwhJROAmpF/w4s/K2peOg/wbZxmNvyCWiLq70vgrIfoOJJ bgj0HcI0/qWr1GpDtSJL65t1lyvF4utcGFTxfqkM6xMZ6E9VjleFMltfNA1d0Z15 Q348/xiz8Silsxa6J0VJKUjJ1blOp5pSpxE8JsaryB7DEJD6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLamae9pelvey2560R5pGQAy7N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOWI1YmUxOTAtNjFiZS0z NTI0LTlhMjktYTdmYWMxOGY1MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfGOdgm0RkCfAlVme6Pp+mKX86EZKGCkgDV6LLdQxbTf0kqC8mIH7+I myKl3ayHyoeu53O4aqzYfhwpy+jIyAlw9dx/DaUf7AU6quZ3vpPSY8zCfJpZLw9k +RsoWnLfnI1TfBb7WSkxWfd6BrYltUjCIlx6GUiQZ8ZO0ojCJ/p6AYE0DkOPUH0K Bj6dP1iOBfbvWqvgo4m6O0tMG8yYNla4KFgQtOm3qx8VWJ5ttntpfbl8H6GA2Of3 dgvTAZd+sWyxcx+tyA10A3RCd7m3hhRNUqEMs87p3qT8IV9uxfQT+219AWG8yNDc mKdXjK4ghj2024xj9+pyXnDkq2XZkdc= -----END CERTIFICATE-----Generated at Sun Sep 6 06:44:54 2026 by rpki-client