$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa File: 3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa (raw, json) Hash identifier: QrL2/hfHxLq/IvZuW1USoqjl/8wLPWHc39+O2UAUAPg= Subject key identifier: 28:84:BA:4B:CC:E8:DB:09:FA:B7:4F:95:91:09:C6:59:43:F5:24:72 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E97B4FB36A2F94C0C30EEC180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 5650 IP address blocks: 108.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:fb:36:a2:f9:4c:0c:30:ee:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=7bd84bd1-96d8-412a-bb5a-86dd410b41a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:ca:e8:1a:b7:ab:f8:8b:7d:5f:f8:36:16: ac:e1:26:66:6d:f2:4b:77:6b:0e:c1:97:d9:86:5b: 52:4a:41:17:32:20:2a:da:c5:18:c2:ac:7e:d6:81: 5c:06:6c:31:dd:86:33:37:61:e7:91:70:ef:03:24: 34:86:5a:24:04:87:bd:c8:bb:f2:02:78:d5:8c:a4: 85:b0:11:05:e8:c8:13:07:f1:c3:f9:16:97:1f:8f: 6a:c4:2b:ed:4d:b5:97:ce:a4:f0:b8:85:42:05:3f: 47:11:b6:9d:01:82:97:2c:5d:44:9c:8f:e0:eb:9e: 7a:d9:c3:db:e6:20:1f:d1:5a:f2:ea:0e:65:09:04: 38:57:ce:06:3f:96:56:a3:b9:b4:e2:e6:e1:38:66: f9:d6:46:3e:1d:6e:d1:25:6e:fc:76:f8:19:e0:ee: 3d:8f:d6:54:03:9d:cc:5e:4e:af:cd:c5:f9:f5:c4: 2b:d1:23:63:63:c1:17:64:e9:20:65:63:1d:72:fa: ef:bf:51:ed:b8:58:90:0c:77:23:e6:db:9a:82:5e: 00:6d:38:95:52:fd:f2:d6:63:11:23:62:9a:a1:b9: c2:a7:82:fd:0e:cf:f4:9c:88:37:e5:00:d7:d4:c6: 25:f3:e8:5e:6d:ad:66:a6:92:81:7f:fa:b0:9d:6e: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:BA:4B:CC:E8:DB:09:FA:B7:4F:95:91:09:C6:59:43:F5:24:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:43:cc:d4:3e:18:19:7e:05:b6:b0:3a:59:c2:4e:38:7d:25: 45:82:69:83:9f:35:b0:3e:ee:f4:1a:3d:e2:3f:32:a4:f8:c9: 7d:eb:d7:44:39:8a:3d:13:89:52:f1:43:78:13:47:86:24:64: 0f:06:a2:bd:4a:ee:3f:6d:bc:c4:63:6c:2a:d8:32:0d:9a:f2: ac:06:e6:e0:43:57:5a:3d:ee:b8:e9:b9:69:79:ef:43:a1:4e: 65:a0:30:3e:69:15:bc:f2:4f:02:2e:85:06:3c:03:7c:df:cd: 23:a9:d1:c2:ed:89:b3:fe:e9:20:e4:21:bd:2f:ba:2e:93:5d: c3:3a:14:c6:5d:22:65:0a:41:63:75:2c:9c:73:eb:62:46:5e: 7c:e2:02:91:47:62:bb:fa:6d:7e:b9:a6:e8:c6:67:90:bb:17: 01:0b:00:02:93:c2:6a:c9:9a:3a:f9:dd:3f:82:82:80:9e:0f: 41:27:7e:b3:b6:fa:56:0c:96:ea:6e:08:67:07:d5:71:eb:cf: c2:ce:29:d0:b6:b3:a8:bd:cc:e5:02:e3:37:2d:53:95:0f:55: f3:70:e0:36:41:e5:8e:44:f9:18:10:ea:2c:3b:a0:f3:85:d4: 50:7a:75:8f:a7:c4:d1:ce:d6:79:3a:d8:50:64:f4:40:b3:6f: 28:ba:58:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtPs2ovlMDDDuwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk N2JkODRiZDEtOTZkOC00MTJhLWJiNWEtODZkZDQxMGI0MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpfK6Bq3q/iLfV/4Nhas4SZmbfJLd2sOwZfZ hltSSkEXMiAq2sUYwqx+1oFcBmwx3YYzN2HnkXDvAyQ0hlokBIe9yLvyAnjVjKSF sBEF6MgTB/HD+RaXH49qxCvtTbWXzqTwuIVCBT9HEbadAYKXLF1EnI/g65562cPb 5iAf0Vry6g5lCQQ4V84GP5ZWo7m04ubhOGb51kY+HW7RJW78dvgZ4O49j9ZUA53M Xk6vzcX59cQr0SNjY8EXZOkgZWMdcvrvv1HtuFiQDHcj5tuagl4AbTiVUv3y1mMR I2KaobnCp4L9Ds/0nIg35QDX1MYl8+heba1mppKBf/qwnW4xtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiEukvM6NsJ+rdPlZEJxllD9SRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2FkZjFhNmItYzgzNy0z MTM4LWEyYTQtNWI1ZGIzMmUxMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJDzNQ+GBl+BbawOlnCTjh9JUWCaYOfNbA+7vQaPeI/MqT4yX3r10Q5 ij0TiVLxQ3gTR4YkZA8Gor1K7j9tvMRjbCrYMg2a8qwG5uBDV1o97rjpuWl570Oh TmWgMD5pFbzyTwIuhQY8A3zfzSOp0cLtibP+6SDkIb0vui6TXcM6FMZdImUKQWN1 LJxz62JGXnziApFHYrv6bX65pujGZ5C7FwELAAKTwmrJmjr53T+CgoCeD0EnfrO2 +lYMlupuCGcH1XHrz8LOKdC2s6i9zOUC4zctU5UPVfNw4DZB5Y5E+RgQ6iw7oPOF 1FB6dY+nxNHO1nk62FBk9ECzbyi6WBo= -----END CERTIFICATE-----Generated at Fri Jul 24 14:46:46 2026 by rpki-client