$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa File: 0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa (raw, json) Hash identifier: PogwUDQ+g6TNjaDxNNOumjca3M4iEeMUXc6p1e0lpdk= Subject key identifier: 7B:59:69:75:E9:58:68:9E:87:E0:16:78:36:1F:91:9D:DF:CC:4B:2B Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F31B7D0959565591B18728AC8 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 397477 IP address blocks: 108.59.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:d0:95:95:65:59:1b:18:72:8a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=f1dd7ae0-a1f8-4dda-9ef7-a5d68cec6c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:9d:c7:7e:6a:7a:2c:20:ef:6f:ac:d4:c4: 80:01:f9:d4:01:c3:d0:ae:0f:56:f8:ce:59:3d:59: 4d:b6:54:ea:5d:49:84:b5:5a:c1:31:83:65:70:8c: 17:ab:b2:83:28:36:55:db:f2:47:0e:63:7d:1d:f6: 05:af:d4:0b:c5:9d:13:24:bc:20:d9:a6:01:77:91: b5:61:3b:1b:0f:4d:e3:e0:3f:0c:67:eb:91:9a:34: 0e:f6:a2:19:84:2a:9a:bc:5a:77:ec:62:fd:ac:92: 8a:ff:9b:d6:05:42:69:45:d4:41:f0:19:26:df:df: de:66:f7:94:63:12:b2:f7:06:e3:a8:29:8a:7f:bf: 70:5e:61:9c:07:54:22:7a:c8:91:b4:b1:40:87:2e: bb:85:26:9a:02:61:43:99:d6:48:13:2c:6c:3a:86: 58:66:ac:fe:0b:5f:18:15:a1:00:4f:da:42:9a:f7: 36:f7:5f:d4:83:0f:6a:3d:f9:91:ca:f7:cc:6c:91: 5c:fd:fe:81:7e:23:ad:e9:0e:5a:94:55:04:f1:20: 55:56:27:1d:c9:00:65:61:93:24:af:b4:50:e4:00: 82:df:1a:e6:0f:42:f9:f2:62:66:d2:74:4a:4b:ca: c1:54:27:ac:56:b9:28:2a:0e:83:a2:d9:94:c3:d9: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:69:75:E9:58:68:9E:87:E0:16:78:36:1F:91:9D:DF:CC:4B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5e:36:b1:d4:c4:87:b4:0a:e9:ed:39:a8:04:41:06:94:c6: 05:85:73:bf:59:b9:58:e1:58:a9:a3:48:5e:cd:9a:fa:81:eb: a0:26:90:17:a6:2b:30:36:9c:e5:a6:ac:38:d7:97:0d:0f:71: 8c:3d:a0:8a:f6:20:bf:f0:94:a7:34:16:24:85:5d:47:26:3b: 23:ac:33:94:a4:a3:1e:2b:57:cc:2f:01:96:c2:db:d1:59:91: ce:09:fb:22:85:5b:6a:32:78:ab:0b:51:bb:88:96:62:8c:e1: 71:ba:3b:8d:70:b0:b7:fb:3b:b0:fc:34:6c:fc:e1:3c:7d:4c: e0:89:c0:31:2f:e7:38:a9:a4:a1:9c:1e:11:e2:43:27:91:87: 0e:e6:e0:87:f9:07:96:2c:a6:31:ae:aa:83:3a:b0:49:0e:0e: ab:4e:ee:1b:b0:2a:1b:4b:6d:78:b4:79:34:4e:22:fb:9d:a4: 60:89:01:27:23:69:2f:24:00:60:0e:e4:92:ed:3b:4f:64:c0: c5:40:08:38:10:61:77:6b:2e:83:a2:09:5b:e7:47:3d:a5:af: 12:3a:44:ae:66:74:f4:95:18:de:4f:9b:13:22:58:db:54:4c: f2:eb:d5:4d:5d:e8:20:d1:1c:27:31:72:60:63:72:2d:e3:9e: 10:4d:c4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt9CVlWVZGxhyisgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZjFkZDdhZTAtYTFmOC00ZGRhLTllZjctYTVkNjhjZWM2YzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaydx35qeiwg72+s1MSAAfnUAcPQrg9W+M5Z PVlNtlTqXUmEtVrBMYNlcIwXq7KDKDZV2/JHDmN9HfYFr9QLxZ0TJLwg2aYBd5G1 YTsbD03j4D8MZ+uRmjQO9qIZhCqavFp37GL9rJKK/5vWBUJpRdRB8Bkm39/eZveU YxKy9wbjqCmKf79wXmGcB1QiesiRtLFAhy67hSaaAmFDmdZIEyxsOoZYZqz+C18Y FaEAT9pCmvc291/Ugw9qPfmRyvfMbJFc/f6BfiOt6Q5alFUE8SBVVicdyQBlYZMk r7RQ5ACC3xrmD0L58mJm0nRKS8rBVCesVrkoKg6DotmUw9kjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtZaXXpWGieh+AWeDYfkZ3fzEsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMGFmY2M3MmYtNDU2OS0z YzdhLWEzM2ItNmUzMDRjMWYxNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHteNrHUxIe0CuntOagEQQaUxgWFc79ZuVjhWKmjSF7NmvqB66AmkBem KzA2nOWmrDjXlw0PcYw9oIr2IL/wlKc0FiSFXUcmOyOsM5Skox4rV8wvAZbC29FZ kc4J+yKFW2oyeKsLUbuIlmKM4XG6O41wsLf7O7D8NGz84Tx9TOCJwDEv5zippKGc HhHiQyeRhw7m4If5B5YspjGuqoM6sEkODqtO7huwKhtLbXi0eTROIvudpGCJAScj aS8kAGAO5JLtO09kwMVACDgQYXdrLoOiCVvnRz2lrxI6RK5mdPSVGN5PmxMiWNtU TPLr1U1d6CDRHCcxcmBjci3jnhBNxPQ= -----END CERTIFICATE-----Generated at Mon Sep 28 20:44:43 2026 by rpki-client