$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa File: 0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa (raw, json) Hash identifier: q4c8+xumdbgxV43rQOwgYUYZQWfomSxg8ggRsnsdhmU= Subject key identifier: CA:93:AB:45:7C:D2:7F:5F:29:10:16:55:7C:2D:DE:56:96:C7:3E:05 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E8F55027DB5BEB26249380D00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 397477 IP address blocks: 108.59.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:02:7d:b5:be:b2:62:49:38:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=c1ee3317-0ed6-4a98-9f29-31c95067ffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:c3:1f:28:3d:c5:e7:50:94:e8:fb:d4:f2: 83:4e:df:31:20:1c:94:6e:b4:8f:a9:df:64:47:d6: b9:07:25:c8:25:87:96:90:a7:d0:51:50:9e:60:05: 04:8b:48:7f:99:2e:2d:8b:8b:22:7a:94:ec:99:d6: 6e:61:61:4c:40:4d:01:db:6a:85:97:9a:7d:9f:d1: 49:17:78:0b:8c:78:97:e2:97:57:97:cf:6f:74:5f: 92:8d:da:26:69:66:46:77:a3:db:2f:0e:5c:73:35: 0c:b3:91:fa:be:06:c4:b1:7f:3d:05:49:10:f4:fa: 42:c3:55:16:5b:c9:b3:0c:a0:e1:79:38:04:55:6a: 7e:04:63:c9:16:9f:42:2a:04:a4:f3:9b:f5:5d:ca: 38:15:8d:bb:e2:b9:fd:b2:7e:f8:94:45:72:c1:22: df:4f:b6:a5:ab:66:68:d0:53:44:97:9d:03:d6:7f: ce:bc:ab:e3:2b:77:8c:95:71:e8:4c:4c:61:49:ac: 52:56:9c:67:50:82:01:93:58:17:35:e3:36:f4:77: e4:a1:20:51:3c:2b:ab:12:79:97:b5:09:c0:bf:42: ca:eb:d1:e6:90:ae:ad:6a:5b:5d:cc:12:ba:fa:34: 7d:f3:63:dd:75:1a:e5:25:87:f6:80:03:cf:84:65: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:93:AB:45:7C:D2:7F:5F:29:10:16:55:7C:2D:DE:56:96:C7:3E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:97:30:03:fc:12:51:a0:f8:30:15:f2:85:28:4d:8d:74:a5: d0:84:fc:57:a5:b6:38:a8:c4:b4:a2:35:0a:b5:35:4f:1f:be: de:cb:11:b2:2e:55:72:59:2b:5c:17:db:8b:a5:17:53:7b:d9: 6d:7b:8f:b0:38:84:4e:13:5f:b6:32:f4:1d:59:46:ef:86:81: e9:49:9c:96:37:30:8e:03:33:da:18:b7:22:a4:3c:29:d4:83: a7:d6:cf:e6:e7:e1:18:c5:b0:23:d3:d6:b6:49:f9:4b:53:e0: d9:1d:db:16:0b:54:f7:ab:01:58:77:c6:76:c9:97:0b:99:41: 89:c9:0d:30:d3:79:d1:9f:17:5c:27:c6:e1:6e:97:49:1d:dc: 70:7b:e8:f4:5e:ef:68:54:88:52:53:71:1e:0f:9d:9f:c4:f1: 11:96:39:4f:53:66:9e:a8:28:22:01:1c:3d:13:54:f7:30:2b: 7a:15:a0:62:4e:f5:03:d9:a5:df:b3:fc:c0:97:d5:a9:22:29: e1:52:59:cd:d2:94:21:eb:54:8c:d9:f1:10:b0:bf:f0:bf:55: e3:82:f7:f1:5b:7e:12:84:b5:74:2b:c6:e7:37:fc:0c:0b:3d: da:b6:eb:2d:d2:d8:32:eb:cd:1d:5a:77:f4:c8:a4:04:f7:a2: a9:24:8a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQJ9tb6yYkk4DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk YzFlZTMzMTctMGVkNi00YTk4LTlmMjktMzFjOTUwNjdmZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/fDHyg9xedQlOj71PKDTt8xIByUbrSPqd9k R9a5ByXIJYeWkKfQUVCeYAUEi0h/mS4ti4siepTsmdZuYWFMQE0B22qFl5p9n9FJ F3gLjHiX4pdXl89vdF+SjdomaWZGd6PbLw5cczUMs5H6vgbEsX89BUkQ9PpCw1UW W8mzDKDheTgEVWp+BGPJFp9CKgSk85v1Xco4FY274rn9sn74lEVywSLfT7alq2Zo 0FNEl50D1n/OvKvjK3eMlXHoTExhSaxSVpxnUIIBk1gXNeM29HfkoSBRPCurEnmX tQnAv0LK69HmkK6taltdzBK6+jR982PddRrlJYf2gAPPhGWTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqTq0V80n9fKRAWVXwt3laWxz4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMGFmY2M3MmYtNDU2OS0z YzdhLWEzM2ItNmUzMDRjMWYxNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOXMAP8ElGg+DAV8oUoTY10pdCE/FeltjioxLSiNQq1NU8fvt7LEbIu VXJZK1wX24ulF1N72W17j7A4hE4TX7Yy9B1ZRu+GgelJnJY3MI4DM9oYtyKkPCnU g6fWz+bn4RjFsCPT1rZJ+UtT4Nkd2xYLVPerAVh3xnbJlwuZQYnJDTDTedGfF1wn xuFul0kd3HB76PRe72hUiFJTcR4PnZ/E8RGWOU9TZp6oKCIBHD0TVPcwK3oVoGJO 9QPZpd+z/MCX1akiKeFSWc3SlCHrVIzZ8RCwv/C/VeOC9/FbfhKEtXQrxuc3/AwL Pdq26y3S2DLrzR1ad/TIpAT3oqkkiok= -----END CERTIFICATE-----Generated at Fri Jul 24 16:28:37 2026 by rpki-client