$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa File: 2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa (raw, json) Hash identifier: 1BbVkTx1xQG0Sm1uIkRQCP4/J7BQYmRlrpE2yQluH8Q= Subject key identifier: 19:65:91:E8:04:05:62:40:CF:F9:B4:67:89:EE:73:3F:1C:2F:28:2A Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F2C225DCEF6B8F093CBDD1660 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 2914 IP address blocks: 108.59.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5d:ce:f6:b8:f0:93:cb:dd:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=64ec9af6-beb7-47e3-8590-6691c203e88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:1b:f6:bc:34:11:22:c9:b4:b5:dc:ab:ee: fa:3f:26:06:d7:10:d1:a3:97:39:16:e2:e3:a4:4b: 8b:2f:93:41:66:5a:d5:dd:71:a9:1a:4f:57:3c:92: 0c:da:40:97:e0:b1:fa:46:a6:08:c8:0f:4e:66:f9: 3b:03:1b:0c:03:0a:a3:09:86:68:f8:6e:b2:83:d5: b0:25:a1:d6:b0:fb:54:b2:af:4f:e5:46:2d:89:1e: 7d:3e:99:d2:2a:43:86:ae:f5:83:2e:a4:0b:ae:e8: c7:0d:0c:94:c7:57:22:64:57:7b:50:08:eb:12:ea: 6f:b7:9c:43:e5:aa:e4:9c:dc:6d:a6:bb:95:eb:b2: 4a:c0:8f:73:90:5d:7a:c4:68:d2:f5:2b:63:67:c0: 5b:9d:02:8e:f2:6d:7d:b6:76:57:78:79:98:a1:0a: e0:cb:03:51:ab:03:dd:f9:dc:d4:e8:e2:c7:bb:b8: 6f:38:6b:6d:d8:5c:7f:1c:de:9c:5a:df:93:01:df: 7d:f8:67:b8:51:f0:26:fd:5b:fa:4c:ca:e0:20:36: 55:a8:08:50:6a:00:a3:5b:aa:c3:26:84:d2:32:88: 89:bf:7e:26:cb:cd:cc:81:2c:a2:37:2f:77:dd:c0: 7a:4b:6f:93:05:d3:69:b4:96:31:b8:4b:32:ff:c2: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:91:E8:04:05:62:40:CF:F9:B4:67:89:EE:73:3F:1C:2F:28:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c5:b6:7a:43:0a:55:21:d8:fb:5e:8d:90:04:66:47:ca:4a: b4:be:39:6f:ab:c6:c3:86:57:d5:6c:ab:5e:2b:da:67:20:f9: 82:eb:12:1f:74:24:31:f4:0b:66:dc:85:f0:53:c8:fe:55:7b: 7a:69:49:e7:5a:43:84:28:a5:95:8e:4d:ea:f7:3f:06:11:ff: da:6d:16:85:4b:95:b6:8b:37:17:98:a4:b7:59:b0:41:11:2e: b2:6d:77:69:6f:0b:13:cc:8f:74:6e:d1:7c:68:e3:0f:4a:ba: b4:e7:ed:57:08:25:d5:14:17:ba:03:0e:76:13:e5:d3:6a:f1: 24:a1:b4:1e:76:8f:8f:1c:ba:5e:c8:fb:d5:75:34:85:f0:8b: 8f:23:39:a8:16:97:a9:4f:92:fb:3c:b8:96:57:83:35:d9:b9: 43:06:00:32:2c:0e:39:43:4d:1c:a0:86:6d:49:44:98:1a:91: 89:0f:51:6f:66:6c:67:6f:a6:b5:75:41:e1:0e:fe:2b:ca:1e: bd:09:d0:b4:46:40:b3:46:00:0b:9d:5a:64:62:31:d2:a2:4d: b6:4e:f8:3f:f7:e1:20:67:38:f5:f8:3a:50:a1:c9:b0:70:3c: c7:6a:9b:18:c1:81:d1:15:b6:24:b8:2d:a1:15:43:2e:0c:4c: cc:f1:9c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIl3O9rjwk8vdFmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NjRlYzlhZjYtYmViNy00N2UzLTg1OTAtNjY5MWMyMDNlODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsb9rw0ESLJtLXcq+76PyYG1xDRo5c5FuLj pEuLL5NBZlrV3XGpGk9XPJIM2kCX4LH6RqYIyA9OZvk7AxsMAwqjCYZo+G6yg9Ww JaHWsPtUsq9P5UYtiR59PpnSKkOGrvWDLqQLrujHDQyUx1ciZFd7UAjrEupvt5xD 5arknNxtpruV67JKwI9zkF16xGjS9StjZ8BbnQKO8m19tnZXeHmYoQrgywNRqwPd +dzU6OLHu7hvOGtt2Fx/HN6cWt+TAd99+Ge4UfAm/Vv6TMrgIDZVqAhQagCjW6rD JoTSMoiJv34my83MgSyiNy933cB6S2+TBdNptJYxuEsy/8K7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBllkegEBWJAz/m0Z4nucz8cLygqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmE2NzIxM2MtNWQ3Yi0z NDM4LWIzYjYtNmJjNmY4MzVkMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfFtnpDClUh2PtejZAEZkfKSrS+OW+rxsOGV9Vsq14r2mcg+YLrEh90 JDH0C2bchfBTyP5Ve3ppSedaQ4QopZWOTer3PwYR/9ptFoVLlbaLNxeYpLdZsEER LrJtd2lvCxPMj3Ru0Xxo4w9KurTn7VcIJdUUF7oDDnYT5dNq8SShtB52j48cul7I +9V1NIXwi48jOagWl6lPkvs8uJZXgzXZuUMGADIsDjlDTRyghm1JRJgakYkPUW9m bGdvprV1QeEO/ivKHr0J0LRGQLNGAAudWmRiMdKiTbZO+D/34SBnOPX4OlChybBw PMdqmxjBgdEVtiS4LaEVQy4MTMzxnF0= -----END CERTIFICATE-----Generated at Mon Oct 5 00:52:53 2026 by rpki-client