$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa File: 4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa (raw, json) Hash identifier: 07ivApdIYYRFyqfvy4Sd49v5vPUz2vEPl642vqARSlA= Subject key identifier: DF:A9:4A:76:BD:59:FF:74:22:88:32:13:60:2B:84:73:A9:32:09:D8 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B9E07B029843AE95F68E3F2A0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 1239 IP address blocks: 199.48.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b0:29:84:3a:e9:5f:68:e3:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a48d6c01-5c2c-44f3-95d9-7e68eb3c77f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:66:13:23:9e:4c:a1:dc:39:93:26:3b:23: e6:0f:1d:e8:a8:67:b5:d0:a2:08:c4:cb:52:d1:de: 1a:7e:48:1d:dc:6f:30:b5:e3:a3:bf:48:85:64:3c: 14:ad:57:2b:9f:fa:c6:49:cc:c1:1f:97:ce:5f:1a: 11:db:bc:30:bc:0f:57:fd:53:a2:71:ba:b8:b1:ab: 70:fb:49:53:ad:47:be:40:45:46:2c:68:f2:40:3f: ca:20:9c:c1:3b:bc:64:57:fc:56:e2:b5:01:b2:72: a7:8b:5c:c9:3c:6e:b5:3b:29:2c:60:1a:b8:b8:af: 72:19:24:e4:79:78:46:68:a6:6c:72:73:26:1e:98: 8f:ae:ea:77:22:7f:24:91:8d:6b:d6:25:23:46:32: 40:85:2d:ca:ec:78:73:ee:0b:17:3c:d2:96:b3:e1: 5f:63:89:0d:4a:6d:63:a6:54:87:16:42:72:b8:a4: 1a:78:85:cb:b6:3c:2b:9d:2a:48:80:df:0e:30:10: b0:bd:4a:85:3c:f8:c4:b9:c1:b1:a8:e7:bf:a3:cb: 6a:74:07:1b:56:7d:a2:39:b6:d1:4b:63:f4:e6:3e: 64:88:00:bb:4d:07:d8:17:b9:54:51:7c:a5:56:2c: 66:21:28:35:ea:c0:52:3e:71:8c:36:e1:6f:2b:58: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A9:4A:76:BD:59:FF:74:22:88:32:13:60:2B:84:73:A9:32:09:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4b0a632c-dbe4-3ea8-b6a9-38280d8b6078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:20:86:6a:e1:dc:93:b8:bc:a2:04:cf:9b:ea:0a:00:df:e1: 1c:ff:28:31:3b:a1:dd:5e:d7:d7:6e:a7:c3:0c:50:90:96:d3: 9b:84:15:34:17:c9:40:cf:65:5b:50:f9:d6:73:ae:76:45:0b: e2:55:23:80:53:dc:ac:d1:a8:e5:ae:6f:3e:f0:13:3e:2b:15: 5d:82:7e:25:1f:16:7c:f7:e6:95:06:da:6c:3b:e1:6e:3d:8d: 81:ca:1b:e8:3c:bd:c1:ad:02:d4:dc:d1:ac:5f:e5:f7:25:ea: dc:47:83:e5:02:1d:7d:ef:71:57:21:bf:63:df:65:0a:29:8a: d5:ba:52:78:ca:e8:9e:5b:77:72:17:4d:69:b3:87:b9:3d:64: 2d:5e:d3:a9:c7:29:73:44:be:8a:43:58:d0:01:45:1e:49:69: 28:cd:d4:a0:8e:c4:cc:1a:31:06:93:b5:67:6f:10:83:fd:dd: bd:77:43:ef:02:5c:3b:5f:4d:25:3f:2f:a7:41:81:09:af:ca: d7:28:a1:9e:96:76:a4:12:f1:9d:41:22:2f:bb:51:f2:52:ad: 03:19:50:c7:0f:93:f4:87:0e:ff:23:bc:ef:e9:8d:6e:33:c1: ab:d3:4d:01:95:cc:62:c9:75:e4:9c:f4:a9:c2:d9:0f:60:84: 95:d9:8b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7AphDrpX2jj8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTQ4ZDZjMDEtNWMyYy00NGYzLTk1ZDktN2U2OGViM2M3N2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrVmEyOeTKHcOZMmOyPmDx3oqGe10KIIxMtS 0d4afkgd3G8wteOjv0iFZDwUrVcrn/rGSczBH5fOXxoR27wwvA9X/VOicbq4satw +0lTrUe+QEVGLGjyQD/KIJzBO7xkV/xW4rUBsnKni1zJPG61OyksYBq4uK9yGSTk eXhGaKZscnMmHpiPrup3In8kkY1r1iUjRjJAhS3K7Hhz7gsXPNKWs+FfY4kNSm1j plSHFkJyuKQaeIXLtjwrnSpIgN8OMBCwvUqFPPjEucGxqOe/o8tqdAcbVn2iObbR S2P05j5kiAC7TQfYF7lUUXylVixmISg16sBSPnGMNuFvK1i/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+pSna9Wf90IogyE2ArhHOpMgnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvNGIwYTYzMmMtZGJlNC0z ZWE4LWI2YTktMzgyODBkOGI2MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzC2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4ghmrh3JO4vKIEz5vqCgDf4Rz/KDE7od1e19dup8MMUJCW05uEFTQX yUDPZVtQ+dZzrnZFC+JVI4BT3KzRqOWubz7wEz4rFV2CfiUfFnz35pUG2mw74W49 jYHKG+g8vcGtAtTc0axf5fcl6txHg+UCHX3vcVchv2PfZQopitW6UnjK6J5bd3IX TWmzh7k9ZC1e06nHKXNEvopDWNABRR5JaSjN1KCOxMwaMQaTtWdvEIP93b13Q+8C XDtfTSU/L6dBgQmvytcooZ6WdqQS8Z1BIi+7UfJSrQMZUMcPk/SHDv8jvO/pjW4z wavTTQGVzGLJdeSc9KnC2Q9ghJXZi00= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:57 2025 by rpki-client