$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa File: 3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa (raw, json) Hash identifier: JqFKBgcoLTirABzWY4mg+0i1WFi0iX33ZdorURTuo9s= Subject key identifier: 10:AB:3B:53:AF:FE:EA:DE:55:8B:CF:15:16:79:43:3A:92:41:4B:A1 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F3A17C85C4233A2E79D040500 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 5650 IP address blocks: 108.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c8:5c:42:33:a2:e7:9d:04:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=ad5799f3-d69a-421a-b21a-2ce5d4039fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:1d:a8:53:07:8a:1d:d3:12:bb:60:1b:c0: a2:12:e2:cf:bf:df:09:de:df:21:2e:2c:3d:f1:58: 98:77:f5:44:15:bc:4c:fe:d0:f6:56:05:1b:50:91: 25:f0:44:f8:7b:1e:8e:a8:82:97:65:a4:68:26:f4: 5e:8b:ea:0b:83:15:fb:d6:45:09:4c:d4:a6:25:07: b8:d9:27:f8:46:3a:a4:9c:97:70:ba:e0:30:6c:38: b4:29:7a:cf:cc:98:7b:4c:98:4b:38:90:2c:23:3a: b7:26:a6:c1:63:ad:4e:aa:49:24:02:6e:ce:ae:64: e4:90:fd:fe:9f:6c:4d:3e:e2:be:32:8d:ab:4d:56: e7:3f:62:da:a8:30:e3:66:7f:c5:6c:53:ae:0f:cc: 5b:4a:42:65:65:46:5f:a7:2b:63:6b:f3:69:cc:48: cb:fd:c1:90:1f:01:6c:58:68:80:ae:b9:b4:49:48: e6:a9:ab:b9:b4:56:54:2d:06:40:89:9f:0b:a6:77: 67:3d:48:28:90:b3:b3:d1:38:07:2b:3b:4c:ee:76: f3:dd:ad:b4:13:9c:2c:dc:6a:c7:df:8f:53:b0:59: 54:3c:0d:48:13:74:6f:82:52:82:ea:5c:d2:de:03: 61:87:ec:85:12:99:2b:0c:b3:78:d7:50:2d:a0:40: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:3B:53:AF:FE:EA:DE:55:8B:CF:15:16:79:43:3A:92:41:4B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:60:1a:1e:d9:5f:f0:18:ad:ae:61:9d:38:51:8f:d2:51:66: ab:de:02:7a:f5:15:51:65:59:6f:48:ef:85:3d:2a:ba:e5:ea: b9:d0:1e:bc:bd:68:9d:c1:22:ff:cb:fa:7e:d7:21:84:57:72: 36:86:97:cb:71:0b:84:e3:2b:54:2d:d1:4f:81:5f:20:5b:25: 43:8a:51:70:0d:91:bb:98:1e:02:2e:26:e2:26:10:64:12:e0: e7:ed:15:0f:7e:b8:a5:17:33:66:e3:b3:cd:11:56:a8:43:af: 08:d8:8d:70:cc:52:3c:09:cf:a8:52:58:b7:5d:54:b1:f8:07: 28:67:73:b8:75:f5:c2:0e:43:61:ab:62:51:19:04:30:dd:19: ad:bd:16:9a:b8:0f:9f:1d:0e:f9:3d:ac:57:6d:3e:8a:8e:06: 22:6f:6b:00:8e:fd:67:e8:48:b3:1b:15:51:1f:9c:af:5b:78: 88:77:4d:0d:10:19:c9:0b:46:ac:e5:99:24:b0:4a:9d:1e:a2: 44:88:89:01:86:81:01:35:01:f3:33:b8:91:22:42:89:c9:31: 58:d4:51:c3:85:67:1e:ca:f7:b5:bf:24:83:f0:26:2b:09:d0: 2a:b2:dd:89:88:a7:4d:13:3f:8e:75:94:ba:05:00:7a:39:cb: 1b:70:f1:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8hcQjOi550EBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YWQ1Nzk5ZjMtZDY5YS00MjFhLWIyMWEtMmNlNWQ0MDM5ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98dqFMHih3TErtgG8CiEuLPv98J3t8hLiw9 8ViYd/VEFbxM/tD2VgUbUJEl8ET4ex6OqIKXZaRoJvRei+oLgxX71kUJTNSmJQe4 2Sf4RjqknJdwuuAwbDi0KXrPzJh7TJhLOJAsIzq3JqbBY61OqkkkAm7OrmTkkP3+ n2xNPuK+Mo2rTVbnP2LaqDDjZn/FbFOuD8xbSkJlZUZfpytja/NpzEjL/cGQHwFs WGiArrm0SUjmqau5tFZULQZAiZ8LpndnPUgokLOz0TgHKztM7nbz3a20E5ws3GrH 349TsFlUPA1IE3RvglKC6lzS3gNhh+yFEpkrDLN411AtoEBigwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCrO1Ov/ureVYvPFRZ5QzqSQUuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2FkZjFhNmItYzgzNy0z MTM4LWEyYTQtNWI1ZGIzMmUxMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhgGh7ZX/AYra5hnThRj9JRZqveAnr1FVFlWW9I74U9Krrl6rnQHry9 aJ3BIv/L+n7XIYRXcjaGl8txC4TjK1Qt0U+BXyBbJUOKUXANkbuYHgIuJuImEGQS 4OftFQ9+uKUXM2bjs80RVqhDrwjYjXDMUjwJz6hSWLddVLH4Byhnc7h19cIOQ2Gr YlEZBDDdGa29Fpq4D58dDvk9rFdtPoqOBiJvawCO/WfoSLMbFVEfnK9beIh3TQ0Q GckLRqzlmSSwSp0eokSIiQGGgQE1AfMzuJEiQonJMVjUUcOFZx7K97W/JIPwJisJ 0Cqy3YmIp00TP451lLoFAHo5yxtw8UU= -----END CERTIFICATE-----Generated at Tue Oct 6 20:35:17 2026 by rpki-client