$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8ccb538-a424-3188-b211-059e5cb7f788.roa File: d8ccb538-a424-3188-b211-059e5cb7f788.roa (raw, json) Hash identifier: kkXIaBo9tDVrgqX/D596fG+PIvN+mWIXp9FoZyb5CXc= Subject key identifier: 40:19:30:CB:9A:CD:87:E5:7E:D9:F0:92:CC:D3:9D:76:E1:F0:EC:44 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B2B919101EF17524C3E2A53E0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8ccb538-a424-3188-b211-059e5cb7f788.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 398781 IP address blocks: 199.48.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:91:01:ef:17:52:4c:3e:2a:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=895ef8c7-8123-4f72-9023-75b745c05f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:79:fd:45:5a:f4:e4:f8:fb:bd:25:9a:ec:f4: 58:a8:d1:5b:f8:a2:53:10:ab:78:fe:ae:05:05:4a: 3f:34:5e:a5:b8:d9:e2:64:74:c3:2a:a3:4e:70:ce: 1c:c4:de:3d:8c:f8:f6:42:ab:2e:4c:0a:e7:ca:a3: 57:bd:c8:4a:8d:98:cc:32:b9:42:2b:0b:ff:ff:91: 04:ca:ac:20:44:57:c7:2c:9d:8c:4d:66:f6:37:05: 3a:7e:84:5f:7e:c3:64:a0:b1:9e:78:ff:6f:84:8e: 10:0b:99:aa:fe:e7:d2:ef:08:fe:60:56:f0:5d:72: 05:9b:fb:03:83:66:8d:91:20:a9:96:c7:b6:63:54: 4d:6a:a2:ea:1a:4b:76:80:ec:b1:9d:c4:44:e4:98: f9:c3:b0:f2:bc:a3:e3:82:50:c0:98:1b:85:7c:2f: a9:29:8e:5f:24:37:ee:d0:5a:a8:0f:9e:6e:04:c7: e9:7f:07:15:62:8a:bd:d2:e9:8f:03:e2:f2:b5:90: 88:a8:ac:96:90:cb:b6:5d:59:fc:f0:71:82:16:f0: c2:7e:44:40:e0:f9:a5:ab:16:ad:eb:ab:39:ee:cd: fe:16:0d:fd:ff:30:20:52:3b:5f:25:c1:40:43:3b: 2f:4f:d5:6f:3b:fa:56:d9:55:0c:4f:91:b7:d1:83: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:19:30:CB:9A:CD:87:E5:7E:D9:F0:92:CC:D3:9D:76:E1:F0:EC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8ccb538-a424-3188-b211-059e5cb7f788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:af:84:0f:40:05:6f:f8:61:68:b4:c7:a5:3f:51:b6:70:00: 14:7e:d2:0a:75:51:4b:94:2a:47:eb:ad:f1:c1:09:82:fe:e0: 31:55:d5:c5:61:5b:4a:53:80:a0:1b:26:24:94:ee:db:50:2d: 82:cd:a8:9e:6d:b1:10:13:7b:93:73:e1:c1:72:39:66:62:cc: 77:31:07:7d:e6:0c:98:76:24:f0:28:ed:33:2b:a4:91:c4:2d: c8:9f:9f:f7:d3:c8:f5:c0:a6:e1:20:fd:a7:2b:f9:42:6a:5f: cb:7b:e0:ee:2a:91:e3:46:78:26:dc:fc:74:5c:47:18:f6:35: 18:36:b0:0e:b0:83:53:a5:20:b2:31:92:fd:0a:65:11:fa:7f: 76:69:9a:02:eb:ff:8c:ec:70:f4:59:56:ba:d4:e6:ca:43:97: 2a:ab:71:21:48:d8:c0:b5:3d:81:94:15:c1:ef:75:d4:50:48: b1:82:a1:71:38:0d:15:43:bf:7d:46:81:9f:8f:0a:11:bc:6b: 3d:91:f5:42:97:65:a0:40:7c:04:8c:b8:be:58:49:4e:d4:ba: 99:db:b8:3d:80:70:25:06:aa:69:df:be:bd:16:e2:dd:2c:40: 5c:16:50:2a:c9:79:96:73:56:25:42:a1:53:ba:3a:97:4f:a8: 77:3d:b5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZEB7xdSTD4qU+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ODk1ZWY4YzctODEyMy00ZjcyLTkwMjMtNzViNzQ1YzA1ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHn9RVr05Pj7vSWa7PRYqNFb+KJTEKt4/q4F BUo/NF6luNniZHTDKqNOcM4cxN49jPj2QqsuTArnyqNXvchKjZjMMrlCKwv//5EE yqwgRFfHLJ2MTWb2NwU6foRffsNkoLGeeP9vhI4QC5mq/ufS7wj+YFbwXXIFm/sD g2aNkSCplse2Y1RNaqLqGkt2gOyxncRE5Jj5w7DyvKPjglDAmBuFfC+pKY5fJDfu 0FqoD55uBMfpfwcVYoq90umPA+LytZCIqKyWkMu2XVn88HGCFvDCfkRA4Pmlqxat 66s57s3+Fg39/zAgUjtfJcFAQzsvT9VvO/pW2VUMT5G30YOaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAZMMuazYflftnwkszTnXbh8OxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDhjY2I1MzgtYTQyNC0z MTg4LWIyMTEtMDU5ZTVjYjdmNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6vhA9ABW/4YWi0x6U/UbZwABR+0gp1UUuUKkfrrfHBCYL+4DFV1cVh W0pTgKAbJiSU7ttQLYLNqJ5tsRATe5Nz4cFyOWZizHcxB33mDJh2JPAo7TMrpJHE Lcifn/fTyPXApuEg/acr+UJqX8t74O4qkeNGeCbc/HRcRxj2NRg2sA6wg1OlILIx kv0KZRH6f3ZpmgLr/4zscPRZVrrU5spDlyqrcSFI2MC1PYGUFcHvddRQSLGCoXE4 DRVDv31GgZ+PChG8az2R9UKXZaBAfASMuL5YSU7UupnbuD2AcCUGqmnfvr0W4t0s QFwWUCrJeZZzViVCoVO6OpdPqHc9tT0= -----END CERTIFICATE-----Generated at Tue Sep 16 18:51:44 2025 by rpki-client