$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa File: 0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa (raw, json) Hash identifier: WmPblTQ+Z2SaQjTOKa/2m7g2GLP/AXzzyvGXC/3/83I= Subject key identifier: CC:40:71:49:19:19:83:BC:03:96:EB:FA:F6:92:9F:CC:5C:09:5B:7A Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584DAF102C4B68DD1B5E2A409E00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 397477 IP address blocks: 108.59.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:2c:4b:68:dd:1b:5e:2a:40:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=1ca01cd6-cbf7-45b6-80b7-1b11df309f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:28:3b:66:16:25:4a:7b:85:26:4c:26:25: a7:a6:29:76:8f:86:1a:b4:cc:c7:2e:cd:b5:ff:77: 75:29:eb:9a:7e:db:4c:fc:8e:cc:83:cc:a8:9d:1c: 09:4e:a4:ca:2a:83:d9:40:54:66:e8:85:ad:a1:03: fb:9b:fc:cb:0d:7d:a4:26:42:44:59:86:7f:76:bd: 7b:06:9d:cb:95:43:f7:16:90:70:df:d2:a7:cc:fe: 60:eb:8e:24:41:94:83:9a:73:6f:3c:dd:ad:70:40: e1:45:b9:7b:b9:d2:28:12:a8:4c:f4:06:5d:6d:06: 28:43:e2:58:4a:03:e8:14:64:70:78:4e:a4:0a:6d: d9:f3:fa:e1:4f:59:83:b8:06:fa:8d:bf:16:cb:f3: 47:34:b5:1e:5b:49:0e:89:d5:9b:ba:70:72:95:16: dd:4d:78:22:29:73:04:c0:bf:47:5a:28:0b:99:8a: 3b:bb:37:b8:50:4d:44:e3:b6:79:41:e0:8e:aa:9a: 2a:52:d1:bf:96:8b:8f:38:6f:92:31:d1:e3:d5:7b: 37:68:4e:07:5f:e4:2b:b2:fd:d9:f5:2c:c5:24:73: 26:28:c8:bc:0c:fa:01:85:33:89:21:68:99:7f:b2: 07:8e:d5:18:02:55:86:07:1c:f7:df:27:bc:ba:cf: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:40:71:49:19:19:83:BC:03:96:EB:FA:F6:92:9F:CC:5C:09:5B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0b:27:fc:6a:ce:e0:2f:1a:d0:c3:17:cf:e9:93:7c:46:f0: f6:6e:52:95:cf:d6:6b:15:e7:32:09:f9:6d:1c:cb:c5:12:67: 8b:10:ef:c3:46:a4:a7:f9:1e:4b:c0:fc:7e:8c:11:1e:0b:22: 50:24:00:10:43:c6:42:3f:fc:98:f8:47:76:6c:ca:6d:6d:cc: a6:6e:07:3e:f1:00:e1:da:c1:56:95:08:07:c5:59:12:e0:47: a3:7a:28:36:86:96:21:a4:a9:f0:13:19:25:8b:2f:6d:f5:73: 3c:4c:c1:d7:e5:4a:92:35:e4:08:6e:1e:c5:89:88:c1:52:96: e3:0d:52:56:45:ab:1f:be:65:15:90:79:c7:f1:3f:8e:25:92: be:33:40:3d:0e:ea:26:6f:fb:ef:1a:51:3c:bd:c3:34:83:2b: b4:b1:7e:49:18:53:76:a7:0b:ba:66:87:8a:ee:44:8a:5b:82: 84:84:2c:1e:d4:00:61:4d:c0:19:e7:5d:76:e8:2e:7d:dc:aa: be:70:26:88:b0:01:c1:89:34:df:8c:f1:d2:15:bd:73:39:65: 6e:40:fc:de:be:5e:06:e0:92:3a:7b:6c:79:1f:21:78:7b:26: 1e:b6:bb:d5:ca:b6:ae:42:e6:b2:f8:0e:71:6a:d6:d1:ff:14: b7:d4:c5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECxLaN0bXipAngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk MWNhMDFjZDYtY2JmNy00NWI2LTgwYjctMWIxMWRmMzA5ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwooO2YWJUp7hSZMJiWnpil2j4YatMzHLs21 /3d1KeuafttM/I7Mg8yonRwJTqTKKoPZQFRm6IWtoQP7m/zLDX2kJkJEWYZ/dr17 Bp3LlUP3FpBw39KnzP5g644kQZSDmnNvPN2tcEDhRbl7udIoEqhM9AZdbQYoQ+JY SgPoFGRweE6kCm3Z8/rhT1mDuAb6jb8Wy/NHNLUeW0kOidWbunBylRbdTXgiKXME wL9HWigLmYo7uze4UE1E47Z5QeCOqpoqUtG/louPOG+SMdHj1Xs3aE4HX+Qrsv3Z 9SzFJHMmKMi8DPoBhTOJIWiZf7IHjtUYAlWGBxz33ye8us9LjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxAcUkZGYO8A5br+vaSn8xcCVt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMGFmY2M3MmYtNDU2OS0z YzdhLWEzM2ItNmUzMDRjMWYxNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcLJ/xqzuAvGtDDF8/pk3xG8PZuUpXP1msV5zIJ+W0cy8USZ4sQ78NG pKf5HkvA/H6MER4LIlAkABBDxkI//Jj4R3Zsym1tzKZuBz7xAOHawVaVCAfFWRLg R6N6KDaGliGkqfATGSWLL231czxMwdflSpI15AhuHsWJiMFSluMNUlZFqx++ZRWQ ecfxP44lkr4zQD0O6iZv++8aUTy9wzSDK7SxfkkYU3anC7pmh4ruRIpbgoSELB7U AGFNwBnnXXboLn3cqr5wJoiwAcGJNN+M8dIVvXM5ZW5A/N6+Xgbgkjp7bHkfIXh7 Jh62u9XKtq5C5rL4DnFq1tH/FLfUxQw= -----END CERTIFICATE-----Generated at Wed May 13 15:53:38 2026 by rpki-client