$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa File: 3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa (raw, json) Hash identifier: 6YbUtq/CIsDt4wQdYWGlzWkMdW/B6B2JGMAZYfpCTu4= Subject key identifier: 21:0A:4D:A4:5A:A4:C8:5E:5A:C0:00:64:99:A4:86:64:D9:5D:A2:8F Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D948AA3E6151EE9CE09DFA700 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa Signing time: Tue 21 Apr 2026 13:00:31 +0000 ROA not before: Tue 21 Apr 2026 13:00:31 +0000 ROA not after: Mon 20 Jul 2026 13:00:31 +0000 asID: 6079 IP address blocks: 208.52.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8a:a3:e6:15:1e:e9:ce:09:df:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 21 13:00:31 2026 GMT Not After : Jul 20 13:00:31 2026 GMT Subject: CN=4ba33468-90fc-4e5e-8e75-830aabac7043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:a5:e8:dd:23:d9:51:91:02:5b:91:f0:8b: c1:e0:09:01:e7:ce:09:ca:76:e8:8c:eb:01:1c:3f: b9:2e:78:16:31:96:8d:16:0a:35:ed:b3:6a:c6:5f: 3f:fa:36:fe:cd:06:4e:e5:fc:04:30:5f:89:0f:2c: e0:c8:e1:32:64:f9:69:4b:3b:c0:b2:aa:8d:56:f5: de:8a:31:80:c3:6b:8a:2b:77:23:75:e3:bb:63:31: b6:fb:f7:41:3e:a1:f4:a2:20:c2:ef:c6:d7:fa:ea: 92:94:8a:e8:4f:fd:a1:48:11:45:34:79:c8:88:79: c7:ff:1b:e4:6a:f7:46:34:30:13:c3:da:3c:fb:c5: 82:2f:ef:ac:af:59:26:5a:10:c6:c6:7f:7e:72:49: 54:6f:eb:a7:ca:65:ee:ef:a1:01:c5:24:c4:f9:d8: 13:60:f0:7f:70:d2:58:38:08:36:fb:1b:e6:d6:ac: 05:cd:a1:34:7e:3c:31:e1:45:06:3c:5d:64:0c:4f: c1:09:46:2e:fc:a0:e6:14:aa:2e:e6:a8:9d:e1:4a: f8:1a:2a:06:c9:4f:fd:c3:9c:f6:a7:68:94:11:e8: 3e:04:92:dd:76:1a:54:51:1f:4e:64:40:a4:f8:d1: 0c:09:fb:fe:de:e1:79:d1:a7:a2:42:74:ba:c7:f3: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:4D:A4:5A:A4:C8:5E:5A:C0:00:64:99:A4:86:64:D9:5D:A2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 208.52.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:cb:4a:e6:e2:70:f5:5b:18:29:95:8a:c6:75:58:b4:06:c5: 51:cf:22:f4:8c:d2:8f:ba:ed:fc:2b:2d:98:5f:84:f0:6e:8c: 33:42:c1:12:8e:83:28:00:79:bb:46:b8:36:76:26:13:9a:08: 7d:65:13:c1:0f:74:1e:d7:da:61:3a:60:f6:21:4c:6d:b4:34: 6d:83:4d:76:05:c7:65:6d:cd:e1:7e:5a:5a:4a:11:f4:15:fa: 2e:c6:5f:05:5e:f4:6c:82:68:ab:19:f8:c5:28:14:91:4c:95: 7b:8b:78:b4:a3:aa:52:f0:aa:88:28:1a:b4:38:4f:ed:f8:e8: 44:ab:18:74:9c:77:ff:7f:6a:de:4b:88:40:e2:af:e3:62:a8: be:4d:e2:32:00:f0:03:85:a6:7e:fa:95:64:f2:22:a0:0f:5b: 99:fa:37:17:a2:e9:87:b0:63:ac:ce:56:8c:c3:29:d0:60:27: a3:96:e1:c6:5f:67:50:36:ed:17:e7:c4:a8:d7:1a:f7:5f:6c: a9:be:f6:28:97:a6:3f:61:42:49:d1:5a:7c:36:be:eb:60:04: 54:56:2c:78:51:5e:2a:e5:5f:68:cb:80:2c:cb:df:fb:2e:33: 3f:a6:10:ce:0c:10:83:76:86:2f:62:43:f6:da:db:90:24:b8: db:8c:fe:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UiqPmFR7pzgnfpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk NGJhMzM0NjgtOTBmYy00ZTVlLThlNzUtODMwYWFiYWM3MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjyl6N0j2VGRAluR8IvB4AkB584JynbojOsB HD+5LngWMZaNFgo17bNqxl8/+jb+zQZO5fwEMF+JDyzgyOEyZPlpSzvAsqqNVvXe ijGAw2uKK3cjdeO7YzG2+/dBPqH0oiDC78bX+uqSlIroT/2hSBFFNHnIiHnH/xvk avdGNDATw9o8+8WCL++sr1kmWhDGxn9+cklUb+unymXu76EBxSTE+dgTYPB/cNJY OAg2+xvm1qwFzaE0fjwx4UUGPF1kDE/BCUYu/KDmFKou5qid4Ur4GioGyU/9w5z2 p2iUEeg+BJLddhpUUR9OZECk+NEMCfv+3uF50aeiQnS6x/OsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEKTaRapMheWsAAZJmkhmTZXaKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2M2YTdlM2YtZjZmNC0z MzU3LTkyOGEtMDRhN2VjNjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPLSubicPVbGCmVisZ1WLQGxVHPIvSM0o+67fwrLZhfhPBujDNCwRKO gygAebtGuDZ2JhOaCH1lE8EPdB7X2mE6YPYhTG20NG2DTXYFx2VtzeF+WlpKEfQV +i7GXwVe9GyCaKsZ+MUoFJFMlXuLeLSjqlLwqogoGrQ4T+346ESrGHScd/9/at5L iEDir+NiqL5N4jIA8AOFpn76lWTyIqAPW5n6Nxei6YewY6zOVozDKdBgJ6OW4cZf Z1A27RfnxKjXGvdfbKm+9iiXpj9hQknRWnw2vutgBFRWLHhRXirlX2jLgCzL3/su Mz+mEM4MEIN2hi9iQ/ba25AkuNuM/g4= -----END CERTIFICATE-----Generated at Wed May 13 16:02:17 2026 by rpki-client