$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa File: 3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa (raw, json) Hash identifier: 9jKdBQcbRvtY/BUvkMT5gnBG2MLgDByD9/QkUhZLyX4= Subject key identifier: 73:80:0D:C1:B9:65:C6:BA:03:24:AE:9F:B7:B0:02:E7:2E:39:B3:1C Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584DB77026206D8A2FB99C0B5E00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 5650 IP address blocks: 108.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:26:20:6d:8a:2f:b9:9c:0b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=5a2d9bf6-ba87-4692-9fc9-78f26e6e00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:fc:32:4e:75:3f:15:13:26:54:49:70:70: 97:01:f6:d6:0b:6d:9b:10:04:12:27:5f:81:69:ab: 73:44:d5:ac:f1:c2:17:4a:a7:12:de:9a:7e:b6:74: 67:66:61:54:ac:c4:b6:2d:34:da:c1:c8:7f:1e:20: 20:59:72:c9:82:f7:e9:9f:2a:3b:23:e1:d3:0e:cf: 91:e6:b1:3f:0a:4e:f8:db:61:d6:8c:4e:76:b2:4b: 8b:50:f4:75:14:da:5c:ce:31:c5:67:a1:e4:f6:45: af:86:8e:b1:92:4d:b3:2e:f2:ce:fd:e2:0f:9e:24: e8:b9:0a:af:64:e3:4d:ca:0f:db:d3:ac:90:da:1b: 77:23:8a:e0:0d:5a:bd:4f:22:92:fe:ed:c8:2f:81: 2c:32:11:b8:22:9e:04:67:cd:3b:6b:db:ec:21:8c: e7:50:d3:9e:62:89:d0:5a:9b:a0:d8:f0:87:1a:80: d4:fb:2a:63:a9:7d:04:16:0c:eb:b7:20:f8:ec:d3: 94:77:60:35:43:4e:36:1f:60:d4:16:69:a3:28:98: d4:ec:b1:a3:3c:4a:d2:5a:80:a7:53:07:bd:06:bd: 8f:47:fd:96:21:ee:9b:9e:23:61:61:33:b6:58:67: dc:37:0e:c7:68:bc:dd:e1:ca:b5:c6:1a:d6:72:1e: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:0D:C1:B9:65:C6:BA:03:24:AE:9F:B7:B0:02:E7:2E:39:B3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5a:8b:4c:11:60:3e:c0:30:44:bc:95:55:4f:eb:b2:78:3b: b9:33:5b:24:e4:4c:8d:cb:33:eb:7f:02:7d:84:dc:6b:0d:17: da:33:89:a4:4a:ea:c7:f2:68:45:fb:cb:6d:21:39:20:12:cc: ef:9b:93:01:b1:fa:b2:2e:10:e8:69:41:ff:d8:70:e9:47:5e: cc:4b:e5:42:2f:cb:48:f9:9f:59:30:2c:8a:7b:ad:89:f6:bd: bd:85:a0:35:f7:cb:49:2c:0b:b7:86:1f:81:3e:13:2e:1b:9b: d5:a2:43:93:72:22:01:29:ec:86:40:5b:fc:10:88:2d:f6:4f: 03:c6:10:44:1e:39:cc:de:78:14:bd:51:d1:4f:98:75:f1:e5: 83:8c:e2:69:87:ef:a0:38:84:e4:7f:93:cc:e4:31:7d:04:d5: 4d:b0:22:ba:03:49:36:15:8f:87:a9:32:85:30:4d:e1:b2:22: f9:86:10:3b:6d:a2:d9:18:a4:c5:c0:d0:e9:cf:1c:b2:f2:a9: 69:c0:4d:71:d6:ce:5e:40:a3:7a:ed:64:f5:30:09:04:17:be: 4b:ad:ce:be:5a:90:62:1e:4e:1d:c8:96:0c:65:ac:59:bc:65: ac:d4:a8:05:02:d5:f5:e4:5e:36:f6:e0:40:a6:b2:dc:9d:dc: 0f:72:64:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCYgbYovuZwLXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NWEyZDliZjYtYmE4Ny00NjkyLTlmYzktNzhmMjZlNmUwMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxf8Mk51PxUTJlRJcHCXAfbWC22bEAQSJ1+B aatzRNWs8cIXSqcS3pp+tnRnZmFUrMS2LTTawch/HiAgWXLJgvfpnyo7I+HTDs+R 5rE/Ck7422HWjE52skuLUPR1FNpczjHFZ6Hk9kWvho6xkk2zLvLO/eIPniTouQqv ZONNyg/b06yQ2ht3I4rgDVq9TyKS/u3IL4EsMhG4Ip4EZ807a9vsIYznUNOeYonQ Wpug2PCHGoDU+ypjqX0EFgzrtyD47NOUd2A1Q042H2DUFmmjKJjU7LGjPErSWoCn Uwe9Br2PR/2WIe6bniNhYTO2WGfcNw7HaLzd4cq1xhrWch6bawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOADcG5Zca6AySun7ewAucuObMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2FkZjFhNmItYzgzNy0z MTM4LWEyYTQtNWI1ZGIzMmUxMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVai0wRYD7AMES8lVVP67J4O7kzWyTkTI3LM+t/An2E3GsNF9oziaRK 6sfyaEX7y20hOSASzO+bkwGx+rIuEOhpQf/YcOlHXsxL5UIvy0j5n1kwLIp7rYn2 vb2FoDX3y0ksC7eGH4E+Ey4bm9WiQ5NyIgEp7IZAW/wQiC32TwPGEEQeOczeeBS9 UdFPmHXx5YOM4mmH76A4hOR/k8zkMX0E1U2wIroDSTYVj4epMoUwTeGyIvmGEDtt otkYpMXA0OnPHLLyqWnATXHWzl5Ao3rtZPUwCQQXvkutzr5akGIeTh3IlgxlrFm8 ZazUqAUC1fXkXjb24ECmstyd3A9yZCw= -----END CERTIFICATE-----Generated at Wed May 13 12:44:33 2026 by rpki-client