$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a07a5a8-57d6-3594-b2e8-aada6c05529b.roa File: 2a07a5a8-57d6-3594-b2e8-aada6c05529b.roa (raw, json) Hash identifier: LAMTe7aPGB6fFToHSty2mMQlJ5CBnSLqEqcxCLdIs2Y= Subject key identifier: 92:76:7A:FB:54:F5:5E:94:78:E1:93:DC:08:14:F9:29:CB:28:25:5A Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584AE72BBA5EE64FFEE6268AE200 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a07a5a8-57d6-3594-b2e8-aada6c05529b.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 7029 IP address blocks: 206.245.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:ba:5e:e6:4f:fe:e6:26:8a:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=245174e0-c562-4990-8c5e-4eb9a24b5320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:3f:32:09:4d:4e:7a:dd:37:9a:12:af:b1: d5:a2:97:af:d1:ef:b7:ac:6f:c8:8a:25:d9:b8:a9: db:ed:c3:bc:06:46:f3:5e:3c:59:cc:99:bc:2f:56: 70:47:50:b4:97:ae:08:02:eb:35:9b:c1:c6:e9:24: c8:1a:8a:83:d4:f2:5c:80:96:82:58:04:f8:a7:fa: 20:3a:b1:e6:51:6a:fb:e8:f6:45:86:30:ea:39:d6: a9:16:2e:f2:c5:b5:44:0a:a7:a5:c8:01:cd:90:e0: f5:ed:80:ab:d1:90:57:3a:1e:18:a8:e3:f2:87:a9: 87:5f:0c:00:fa:df:ca:8c:71:37:53:22:8b:6d:cd: 75:b2:4c:1c:a4:74:05:e5:60:73:0b:80:d4:3f:bb: ec:df:1b:8c:cf:3c:b9:fb:6c:01:7e:d1:1e:46:62: e0:d2:2b:e0:30:2d:5c:2a:ef:bb:e6:99:07:03:b4: 71:24:61:1f:95:dc:df:7c:78:b5:a9:75:b0:55:47: c3:7e:8c:11:68:80:8e:4b:e7:cd:5c:0f:04:af:4c: b2:90:00:89:dc:b2:3c:79:6b:11:f0:d2:84:7b:2a: 3c:3e:80:5d:df:24:9b:da:b0:c0:a7:73:65:2b:cb: 91:bd:76:42:b9:5c:0d:98:52:5c:26:17:80:35:8c: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:76:7A:FB:54:F5:5E:94:78:E1:93:DC:08:14:F9:29:CB:28:25:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a07a5a8-57d6-3594-b2e8-aada6c05529b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:83:ac:5a:13:da:d2:1e:2f:c0:6c:ba:9f:65:bd:04:81:5a: f5:99:62:bf:e2:24:5c:71:54:5a:e5:15:fd:20:e7:15:9a:e0: 90:3c:3d:66:d5:aa:ff:bd:42:5a:54:5e:d5:e3:11:97:37:22: 3f:97:9d:38:fa:95:6a:12:84:dc:53:cc:b2:27:34:23:cd:18: f9:2b:91:2c:fc:da:4c:80:04:42:c3:5d:c7:aa:45:3b:56:0c: 3f:a3:92:34:cb:cb:cb:c2:4c:cb:d6:bf:ca:4e:3d:01:82:14: 1c:ac:9a:1e:00:e9:1e:20:2e:7f:36:72:97:04:75:c0:da:65: 3f:5f:95:8c:21:89:23:54:97:7d:7a:38:33:e6:3f:59:8f:33: bc:77:2a:4b:21:37:45:77:62:7b:93:7f:aa:b7:f7:76:6e:05: b2:cd:fb:be:5f:5c:e8:51:45:c5:60:b9:39:ec:9f:e2:e2:80: 6b:3d:28:4d:9e:bb:0c:34:34:33:9a:eb:0d:6e:39:b9:d9:70: 79:77:4a:75:05:09:69:6b:03:76:af:91:73:97:64:21:fe:29: b0:bd:2e:b4:7e:5b:c7:04:be:27:ba:ad:ba:fd:b8:66:ff:da: 8e:67:4e:e6:1a:70:97:32:fe:27:a6:df:a9:ba:8e:8f:73:22: 82:93:b9:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7pe5k/+5iaK4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk MjQ1MTc0ZTAtYzU2Mi00OTkwLThjNWUtNGViOWEyNGI1MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+0/MglNTnrdN5oSr7HVopev0e+3rG/IiiXZ uKnb7cO8BkbzXjxZzJm8L1ZwR1C0l64IAus1m8HG6STIGoqD1PJcgJaCWAT4p/og OrHmUWr76PZFhjDqOdapFi7yxbVECqelyAHNkOD17YCr0ZBXOh4YqOPyh6mHXwwA +t/KjHE3UyKLbc11skwcpHQF5WBzC4DUP7vs3xuMzzy5+2wBftEeRmLg0ivgMC1c Ku+75pkHA7RxJGEfldzffHi1qXWwVUfDfowRaICOS+fNXA8Er0yykACJ3LI8eWsR 8NKEeyo8PoBd3ySb2rDAp3NlK8uRvXZCuVwNmFJcJheANYzS4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ2evtU9V6UeOGT3AgU+SnLKCVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmEwN2E1YTgtNTdkNi0z NTk0LWIyZTgtYWFkYTZjMDU1MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyDrFoT2tIeL8Bsup9lvQSBWvWZYr/iJFxxVFrlFf0g5xWa4JA8PWbV qv+9QlpUXtXjEZc3Ij+XnTj6lWoShNxTzLInNCPNGPkrkSz82kyABELDXceqRTtW DD+jkjTLy8vCTMvWv8pOPQGCFBysmh4A6R4gLn82cpcEdcDaZT9flYwhiSNUl316 ODPmP1mPM7x3KkshN0V3YnuTf6q393ZuBbLN+75fXOhRRcVguTnsn+LigGs9KE2e uww0NDOa6w1uObnZcHl3SnUFCWlrA3avkXOXZCH+KbC9LrR+W8cEvie6rbr9uGb/ 2o5nTuYacJcy/iem36m6jo9zIoKTuZM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:09 2025 by rpki-client