$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa File: 3bc82832-766c-3b7f-8c81-125272a98e60.roa (raw, json) Hash identifier: gC+FgiQazAAkvgZqH/ymdbLUoHu/mm+FRPjeS+MyCCc= Subject key identifier: 3F:DD:F3:1F:CD:EE:B9:93:56:9E:6D:0C:E0:7B:AB:07:0A:E8:AD:A7 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD1DBCBB5369316CF87F180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 6079 IP address blocks: 209.236.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:db:cb:b5:36:93:16:cf:87:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=70983fa9-931e-430c-9946-c0fcb35d04b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:41:3f:71:b6:97:56:3c:03:69:97:e9:d9: 44:1b:7a:fa:8e:e0:00:1e:a2:d9:df:e1:1b:10:5b: 9a:3a:fe:21:7c:43:ec:84:35:20:1d:6a:82:56:01: b2:59:5f:85:e3:13:d4:c5:c1:7f:0d:39:7d:f6:7a: 95:6f:71:96:3e:7c:62:a7:0c:5a:5e:15:8d:49:6e: d5:74:b1:a1:61:60:9d:ab:4b:b3:5d:2d:0f:4c:50: 2c:ac:e2:24:ee:32:98:0f:8d:29:b0:01:8c:9c:e6: 3e:54:43:70:70:92:dd:06:11:79:06:fc:50:c0:69: fe:4f:53:35:a9:71:4b:a0:df:4f:dc:f6:8a:df:ec: 72:b9:06:ea:b9:c6:61:d0:ff:33:53:7c:0f:c0:2e: bc:27:d7:8c:34:63:ff:89:fb:43:a6:11:f4:e1:4c: 77:88:ed:53:91:58:f3:a4:37:52:77:27:64:90:fd: 08:c0:87:4c:46:07:4b:3b:1b:bc:1b:90:c6:ff:d8: 7f:84:9b:dc:d4:2a:7d:95:d2:ca:4b:89:d1:22:56: 08:dd:27:07:a4:9d:29:4f:65:d5:ab:ce:17:5b:57: 13:c4:d9:72:28:71:e6:66:ff:2d:72:e7:99:b8:6b: aa:26:f2:ea:6e:bd:d3:5a:d1:e0:0f:19:7e:97:19: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:F3:1F:CD:EE:B9:93:56:9E:6D:0C:E0:7B:AB:07:0A:E8:AD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:06:ea:f5:e3:90:df:00:e6:9e:ba:d7:cb:35:f4:b0:a8:73: b6:4f:80:37:f1:29:a6:05:d2:8b:55:05:fd:f1:a2:0f:c5:89: 36:e7:46:53:bf:44:9f:7c:b7:08:54:33:45:c0:48:78:47:58: 82:b8:12:12:ae:d2:29:92:cd:6b:08:26:06:01:3d:56:c0:0e: a8:11:31:35:35:1e:92:00:00:65:00:a1:54:e5:6d:83:23:d9: 68:c5:a2:a7:88:f7:a7:b5:04:0e:a7:d3:db:a0:c0:b4:48:f1: 9f:d9:ff:d1:81:c7:60:14:da:70:4a:d9:39:6f:d8:1d:99:cb: 89:ec:fa:e7:a1:e5:4b:be:1f:87:39:79:f6:55:22:b2:3b:66: 4f:dd:56:08:3d:64:08:77:e0:ad:77:08:82:16:c0:25:5c:85: c2:a2:46:68:d9:5b:00:95:43:5b:50:6a:e4:53:8c:2a:e1:d8: 52:ee:eb:b4:40:28:fb:86:02:9d:75:bc:c0:28:5e:45:99:d3: bb:b1:0b:69:df:d4:5f:9b:71:f1:3e:2c:50:ab:76:09:0a:5b: d5:c5:af:aa:ee:7d:72:00:f6:0a:99:d1:8b:5f:01:34:70:d5: 06:ae:7a:16:f8:60:5e:cf:0e:03:95:82:27:cd:87:b3:18:86: f6:19:78:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0dvLtTaTFs+H8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NzA5ODNmYTktOTMxZS00MzBjLTk5NDYtYzBmY2IzNWQwNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw5BP3G2l1Y8A2mX6dlEG3r6juAAHqLZ3+Eb EFuaOv4hfEPshDUgHWqCVgGyWV+F4xPUxcF/DTl99nqVb3GWPnxipwxaXhWNSW7V dLGhYWCdq0uzXS0PTFAsrOIk7jKYD40psAGMnOY+VENwcJLdBhF5BvxQwGn+T1M1 qXFLoN9P3PaK3+xyuQbqucZh0P8zU3wPwC68J9eMNGP/iftDphH04Ux3iO1TkVjz pDdSdydkkP0IwIdMRgdLOxu8G5DG/9h/hJvc1Cp9ldLKS4nRIlYI3ScHpJ0pT2XV q84XW1cTxNlyKHHmZv8tcueZuGuqJvLqbr3TWtHgDxl+lxkd0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/d8x/N7rmTVp5tDOB7qwcK6K2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2JjODI4MzItNzY2Yy0z YjdmLThjODEtMTI1MjcyYTk4ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0G6vXjkN8A5p6618s19LCoc7ZPgDfxKaYF0otVBf3xog/FiTbnRlO/ RJ98twhUM0XASHhHWIK4EhKu0imSzWsIJgYBPVbADqgRMTU1HpIAAGUAoVTlbYMj 2WjFoqeI96e1BA6n09ugwLRI8Z/Z/9GBx2AU2nBK2Tlv2B2Zy4ns+ueh5Uu+H4c5 efZVIrI7Zk/dVgg9ZAh34K13CIIWwCVchcKiRmjZWwCVQ1tQauRTjCrh2FLu67RA KPuGAp11vMAoXkWZ07uxC2nf1F+bcfE+LFCrdgkKW9XFr6rufXIA9gqZ0YtfATRw 1Qauehb4YF7PDgOVgifNh7MYhvYZeI4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:30:27 2025 by rpki-client