$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa File: 9b5be190-61be-3524-9a29-a7fac18f508a.roa (raw, json) Hash identifier: Kw+c7UEatrXdLPV38Q4ZOlhhU+MEfRf9SPyFhmSQlyg= Subject key identifier: 90:7B:B3:FB:BF:11:34:86:CB:57:69:91:65:C5:7D:D3:E0:89:D3:0D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F43285849DC8FBD4F514D55DD58542264 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 212384 IP address blocks: 199.48.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bd:4f:51:4d:55:dd:58:54:22:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=1a6d1a3f-ba24-453f-8ca2-f98711cb0d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:dc:f0:12:a9:2d:32:9f:fd:21:30:d1:4e: cb:7c:cf:e2:11:b1:79:a3:84:48:99:fa:20:d0:74: 39:41:58:a0:50:17:94:af:8e:28:b5:11:6f:ce:fc: e5:1e:c3:09:37:0c:d1:05:5f:fd:1d:fe:3b:19:54: b2:57:55:c6:94:e6:32:bb:6e:a5:11:90:8e:d8:39: a0:49:32:4a:cb:20:88:b1:e8:6f:45:1a:5f:35:4f: f7:db:fc:a0:9d:f1:7b:43:db:cd:8a:e0:10:b1:af: 57:52:38:68:5a:8f:6f:a5:5b:e6:b6:9a:6a:53:21: 28:f5:a2:4a:b1:55:92:ab:4f:a0:56:dc:3e:19:29: 25:02:5a:40:20:9b:58:15:41:44:45:b6:49:54:c4: 95:28:41:fb:69:1b:f0:9a:7c:34:f9:a6:b3:84:97: 9f:d6:ef:16:7c:51:3b:08:dc:97:a7:64:5e:59:4a: 53:a6:cd:5c:88:0e:1b:34:df:a5:a6:3e:c7:6f:f1: 25:a2:25:1a:19:76:04:f4:e5:63:e1:26:86:41:a5: 45:a2:4c:76:e4:d1:ec:8f:7a:35:04:a7:dd:15:78: 56:f2:72:8d:1f:20:30:62:ff:b5:f9:b3:c5:22:37: 96:cc:b7:39:9e:d3:50:30:f3:31:cf:1e:3f:a5:d9: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7B:B3:FB:BF:11:34:86:CB:57:69:91:65:C5:7D:D3:E0:89:D3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cf:c0:a2:1f:be:a2:29:b4:7c:fb:b0:c3:a4:32:90:f7:76: ed:65:70:74:f9:a7:17:cc:a7:81:6f:a9:0e:bc:dc:8d:47:d3: da:9f:2a:2d:95:24:0b:9a:56:a0:0a:22:68:cc:45:c6:9d:20: 3a:f5:49:0b:eb:7d:6a:66:e7:3f:e1:8f:44:82:3e:10:b6:eb: 5a:93:63:f9:38:c5:2d:3d:e7:f1:6b:e8:e7:9f:84:63:04:06: 78:c1:3b:a1:07:4c:db:aa:f0:25:e3:4e:66:69:35:09:27:58: be:fb:5f:db:61:fe:21:8a:64:49:87:da:64:93:c9:bd:cb:17: 47:7e:85:47:a6:96:45:80:a4:4a:0a:b2:8b:3c:75:ec:5c:3b: 35:d4:17:25:76:66:a8:69:af:da:28:6e:04:a5:ec:78:31:1c: d7:0c:d4:da:c2:fa:ba:16:0b:4e:e0:e0:3f:a0:cb:8a:f9:03: c3:4c:bc:1f:2a:65:27:f0:73:5d:5e:ab:d3:20:e0:a5:4d:ad: 2b:67:a1:75:d5:da:c8:d9:01:f8:9f:48:db:fa:ca:93:a8:d4: d6:19:aa:59:84:9e:63:9c:c7:e2:5d:b7:bc:05:dd:68:90:28: c2:20:72:64:22:3f:a0:bd:01:d7:16:1e:cd:b7:9f:7b:95:96: 6e:b1:ab:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj71PUU1V3VhUImQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MWE2ZDFhM2YtYmEyNC00NTNmLThjYTItZjk4NzExY2IwZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Xc8BKpLTKf/SEw0U7LfM/iEbF5o4RImfog 0HQ5QVigUBeUr44otRFvzvzlHsMJNwzRBV/9Hf47GVSyV1XGlOYyu26lEZCO2Dmg STJKyyCIsehvRRpfNU/32/ygnfF7Q9vNiuAQsa9XUjhoWo9vpVvmtppqUyEo9aJK sVWSq0+gVtw+GSklAlpAIJtYFUFERbZJVMSVKEH7aRvwmnw0+aazhJef1u8WfFE7 CNyXp2ReWUpTps1ciA4bNN+lpj7Hb/EloiUaGXYE9OVj4SaGQaVFokx25NHsj3o1 BKfdFXhW8nKNHyAwYv+1+bPFIjeWzLc5ntNQMPMxzx4/pdn1wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB7s/u/ETSGy1dpkWXFfdPgidMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOWI1YmUxOTAtNjFiZS0z NTI0LTlhMjktYTdmYWMxOGY1MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPPwKIfvqIptHz7sMOkMpD3du1lcHT5pxfMp4FvqQ683I1H09qfKi2V JAuaVqAKImjMRcadIDr1SQvrfWpm5z/hj0SCPhC261qTY/k4xS095/Fr6OefhGME BnjBO6EHTNuq8CXjTmZpNQknWL77X9th/iGKZEmH2mSTyb3LF0d+hUemlkWApEoK sos8dexcOzXUFyV2Zqhpr9oobgSl7HgxHNcM1NrC+roWC07g4D+gy4r5A8NMvB8q ZSfwc11eq9Mg4KVNrStnoXXV2sjZAfifSNv6ypOo1NYZqlmEnmOcx+Jdt7wF3WiQ KMIgcmQiP6C9AdcWHs23n3uVlm6xq6Y= -----END CERTIFICATE-----Generated at Sat Jun 7 05:05:35 2025 by rpki-client