$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa File: d3a5dd72-8e2a-305c-8745-ad834707c297.roa (raw, json) Hash identifier: GKCUrrsRewAQxQlHlBWbeTh2Flvo//MPGd4kWUQxGjY= Subject key identifier: 08:39:24:89:52:D9:37:19:E6:BF:AC:58:D7:37:67:8D:F9:45:FD:86 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584ABD4B8FD7A850D01E16FB06C0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 211440 IP address blocks: 199.48.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8f:d7:a8:50:d0:1e:16:fb:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=b0dba3fd-427f-4fff-a169-ca816ff0165c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:5d:a1:d4:d9:42:f7:c6:fc:b1:82:0c:3b: c0:41:d0:5c:76:d3:31:d6:5e:fc:4a:e1:e3:e1:d6: 7f:a0:dd:d2:2b:d1:a4:46:08:a3:49:cf:3f:48:05: 6a:d0:5d:22:c7:f6:68:4f:43:a0:d1:f0:0d:20:37: 9c:a5:aa:be:e5:7a:fc:83:78:eb:41:13:61:3e:ac: b7:69:5a:1a:64:63:d7:3e:35:b7:5f:05:00:59:b0: 63:55:d7:cf:12:8d:dc:02:9d:b9:df:15:09:4c:2c: f6:16:e3:76:75:e8:1e:e8:4d:e4:0d:59:77:b5:5d: d5:8f:f1:c0:98:09:32:36:ff:89:45:41:a5:bf:c3: 7e:50:18:af:cb:d2:6a:97:b5:3e:f4:13:8e:3d:4f: 5b:5c:a7:55:26:88:62:61:12:15:b7:02:dd:8c:2d: f9:b8:9d:b3:b5:5d:38:3f:b1:f5:ca:4e:0d:22:6b: 5a:ff:f8:b9:16:76:a4:dd:47:b4:4e:20:e5:af:fb: d0:9e:9c:61:92:c0:c4:be:53:b3:83:77:d7:56:99: de:7e:51:fa:c9:07:9a:59:44:c3:b4:cb:64:5b:4c: f6:ea:23:6b:ec:ae:c0:80:7e:fb:a9:b1:34:19:be: 91:f7:5e:80:f2:8e:d5:82:0a:2c:3b:a5:44:2c:33: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:24:89:52:D9:37:19:E6:BF:AC:58:D7:37:67:8D:F9:45:FD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:07:a6:20:30:05:60:38:76:78:07:8c:85:55:b5:43:ea:1b: 47:79:72:6f:3d:95:2d:7f:6e:b3:49:be:cf:2b:c8:04:e9:bc: 22:68:82:ca:e5:df:80:ab:d2:ef:00:f8:3e:4f:a6:e9:6a:f9: 12:b4:9f:e4:e1:90:ac:70:67:68:94:23:ba:c7:61:c0:86:a9: 2a:72:41:78:10:9b:b5:4d:ac:6d:11:8b:46:fd:9e:2f:d9:11: 5f:d9:3a:25:9b:48:16:39:34:cc:d7:db:94:96:af:62:86:29: 95:f8:b8:fa:b9:0f:32:ee:e0:e5:19:92:c9:0f:20:ad:36:d9: d3:ac:82:73:d2:05:ee:eb:17:43:07:e3:0e:50:cc:9e:0f:1e: 2a:85:0f:38:b8:48:1a:d2:6b:df:36:41:ae:37:59:bd:dd:24: dc:5a:f1:f1:d1:4a:97:32:22:40:a4:e9:1f:d0:a4:35:53:e2: 25:a2:81:3c:f0:b9:9a:80:16:d1:0a:6a:e6:a8:81:ee:8d:b5: 99:7e:cc:17:f2:4e:4d:4d:07:1e:e6:4d:aa:4d:3d:1d:f0:f1: d7:d6:f2:b7:3d:d8:21:88:2d:43:87:51:34:13:1c:86:19:61: 60:c3:b2:6d:95:7e:c8:02:a9:b3:e1:77:1c:77:e7:0e:47:ac: fc:2b:26:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4/XqFDQHhb7BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YjBkYmEzZmQtNDI3Zi00ZmZmLWExNjktY2E4MTZmZjAxNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYFdodTZQvfG/LGCDDvAQdBcdtMx1l78SuHj 4dZ/oN3SK9GkRgijSc8/SAVq0F0ix/ZoT0Og0fANIDecpaq+5Xr8g3jrQRNhPqy3 aVoaZGPXPjW3XwUAWbBjVdfPEo3cAp253xUJTCz2FuN2dege6E3kDVl3tV3Vj/HA mAkyNv+JRUGlv8N+UBivy9Jql7U+9BOOPU9bXKdVJohiYRIVtwLdjC35uJ2ztV04 P7H1yk4NImta//i5Fnak3Ue0TiDlr/vQnpxhksDEvlOzg3fXVpneflH6yQeaWUTD tMtkW0z26iNr7K7AgH77qbE0Gb6R916A8o7VggosO6VELDNANQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg5JIlS2TcZ5r+sWNc3Z435Rf2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDNhNWRkNzItOGUyYS0z MDVjLTg3NDUtYWQ4MzQ3MDdjMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQHpiAwBWA4dngHjIVVtUPqG0d5cm89lS1/brNJvs8ryATpvCJogsrl 34Cr0u8A+D5Ppulq+RK0n+ThkKxwZ2iUI7rHYcCGqSpyQXgQm7VNrG0Ri0b9ni/Z EV/ZOiWbSBY5NMzX25SWr2KGKZX4uPq5DzLu4OUZkskPIK022dOsgnPSBe7rF0MH 4w5QzJ4PHiqFDzi4SBrSa982Qa43Wb3dJNxa8fHRSpcyIkCk6R/QpDVT4iWigTzw uZqAFtEKauaoge6NtZl+zBfyTk1NBx7mTapNPR3w8dfW8rc92CGILUOHUTQTHIYZ YWDDsm2VfsgCqbPhdxx35w5HrPwrJnY= -----END CERTIFICATE-----Generated at Wed Aug 6 19:32:00 2025 by rpki-client