$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f1f29446-3bd8-39da-82ee-9912c1c44526.roa File: f1f29446-3bd8-39da-82ee-9912c1c44526.roa (raw, json) Hash identifier: kSd0WDLcrB9YEQQFj7Ol8vu1IzXZ5FKWJV1DFvBCiww= Subject key identifier: 42:44:53:CD:6D:A4:10:58:1F:39:0B:06:1A:B8:D0:5B:87:DF:2E:93 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584AB220CED7A6332DBC71143C80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f1f29446-3bd8-39da-82ee-9912c1c44526.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 996 IP address blocks: 199.48.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:ce:d7:a6:33:2d:bc:71:14:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=ba5ed85e-84a0-4fb4-9944-07983837fd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:90:c7:ea:6c:3c:dd:6e:28:1f:9b:2b:fa:a8: 95:ab:71:2e:0d:a6:20:03:e0:6e:92:c5:29:cb:2a: f6:04:57:0f:de:00:f5:03:7a:bd:7f:8d:53:cf:0e: 3f:d1:09:95:68:41:00:3d:b9:aa:e2:30:0f:96:ee: e8:47:ed:86:75:5c:1a:4b:cc:db:df:90:55:ad:0a: 82:84:9e:9f:3f:43:5a:0c:ad:40:c1:f9:ab:af:ef: a8:e6:e5:9d:a6:4f:2e:ad:b9:d8:21:27:2c:6d:82: 3f:1f:5d:9b:1f:73:46:50:88:90:a6:3c:90:ca:69: 53:62:df:7a:e2:04:15:54:b4:38:17:6c:85:70:c0: 10:d2:58:1a:51:d0:63:75:c5:17:e2:30:e5:6b:e0: 5e:00:89:bb:a4:6b:eb:12:71:89:b0:f8:fa:f3:59: a8:22:e0:b3:ab:eb:63:c3:b9:46:d8:c8:dd:c8:5a: 8e:be:d6:f1:d3:1b:17:84:91:33:55:29:4b:8e:48: f3:25:ec:a9:e2:b0:71:4b:9f:77:55:37:ec:5c:87: cf:3b:75:b9:5f:bc:cd:44:24:cc:bf:73:dc:bc:4c: cd:fc:10:47:a9:43:c6:d4:8a:21:97:d9:9c:30:4a: c0:5f:32:34:ae:64:94:ec:bd:db:39:31:a7:8c:35: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:44:53:CD:6D:A4:10:58:1F:39:0B:06:1A:B8:D0:5B:87:DF:2E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f1f29446-3bd8-39da-82ee-9912c1c44526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 199.48.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fe:67:f5:a5:ce:84:7c:c2:32:b3:6d:29:9b:0d:1a:1c:9d: cd:20:3e:5d:27:b1:47:4e:72:06:ed:e4:8f:ae:ca:97:59:d1: 80:41:c2:91:3f:d1:55:08:18:0f:08:a3:23:22:ac:a4:c7:f5: 90:b9:94:df:65:3b:76:ff:04:0f:51:42:62:33:e6:6a:62:af: 1e:ba:82:bf:2a:42:d1:71:97:39:54:0a:d6:07:26:7c:e9:ba: 6a:d7:eb:1b:71:01:4e:20:f7:17:86:a6:4d:2c:72:41:be:43: 86:88:b5:1f:36:38:90:ee:81:a0:13:60:39:0e:f0:4b:28:41: 62:45:30:82:dd:a2:85:3b:41:d5:d2:a0:36:75:04:2d:bc:08: d4:3f:81:9f:ea:54:9b:a3:4e:58:9f:2f:37:fd:05:c5:d3:9e: 9b:59:b1:e5:fd:47:60:e7:31:83:2a:db:f5:ab:94:0e:a9:ee: cc:50:96:a9:ae:32:72:c9:29:f5:d4:10:98:c1:9e:34:30:52: 8d:e8:b0:0b:f0:3b:2e:e4:8b:a9:ae:5a:74:f4:f2:83:b7:2f: b7:77:d2:73:17:33:e2:88:c3:73:46:85:68:83:c5:87:20:76: f7:15:28:ad:91:c9:df:ba:a4:02:16:2f:21:f9:83:e2:0d:a9: 5d:39:08:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIM7XpjMtvHEUPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmE1ZWQ4NWUtODRhMC00ZmI0LTk5NDQtMDc5ODM4MzdmZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJDH6mw83W4oH5sr+qiVq3EuDaYgA+BuksUp yyr2BFcP3gD1A3q9f41Tzw4/0QmVaEEAPbmq4jAPlu7oR+2GdVwaS8zb35BVrQqC hJ6fP0NaDK1Awfmrr++o5uWdpk8urbnYIScsbYI/H12bH3NGUIiQpjyQymlTYt96 4gQVVLQ4F2yFcMAQ0lgaUdBjdcUX4jDla+BeAIm7pGvrEnGJsPj681moIuCzq+tj w7lG2MjdyFqOvtbx0xsXhJEzVSlLjkjzJeyp4rBxS593VTfsXIfPO3W5X7zNRCTM v3PcvEzN/BBHqUPG1Iohl9mcMErAXzI0rmSU7L3bOTGnjDW7DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJEU81tpBBYHzkLBhq40FuH3y6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZjFmMjk0NDYtM2JkOC0z OWRhLTgyZWUtOTkxMmMxYzQ0NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH+Z/WlzoR8wjKzbSmbDRocnc0gPl0nsUdOcgbt5I+uypdZ0YBBwpE/ 0VUIGA8IoyMirKTH9ZC5lN9lO3b/BA9RQmIz5mpirx66gr8qQtFxlzlUCtYHJnzp umrX6xtxAU4g9xeGpk0sckG+Q4aItR82OJDugaATYDkO8EsoQWJFMILdooU7QdXS oDZ1BC28CNQ/gZ/qVJujTlifLzf9BcXTnptZseX9R2DnMYMq2/WrlA6p7sxQlqmu MnLJKfXUEJjBnjQwUo3osAvwOy7ki6muWnT08oO3L7d30nMXM+KIw3NGhWiDxYcg dvcVKK2Ryd+6pAIWLyH5g+INqV05CPc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:17 2025 by rpki-client