$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa File: 3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa (raw, json) Hash identifier: wEyYDZaxp2v8EXLG6BDBI5hGyfswv/gtGRKOB08nLHg= Subject key identifier: D7:23:F9:13:E7:E5:0B:D8:B2:9F:D1:19:95:CB:98:19:BD:C4:DA:3B Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F17323F8F3F5CE5474B40AA80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 6079 IP address blocks: 208.52.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3f:8f:3f:5c:e5:47:4b:40:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=d5301554-7c21-4505-bb0b-fda55cf9b10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:1f:47:c4:d8:1d:49:04:58:af:cf:a1:ad: 43:9d:ad:86:0b:31:a3:4b:14:cc:66:38:be:02:98: a6:99:47:11:6e:ea:6e:f5:8b:6c:d7:90:53:2c:d3: ff:19:63:e8:af:d4:b3:3f:cd:3a:74:72:68:f8:54: f1:a7:5e:ae:24:93:b6:5f:1b:19:d9:95:03:f1:82: 0b:90:ba:6f:70:ab:11:08:0d:bb:a7:e9:0c:4d:17: 84:ab:9d:f6:f4:c9:14:aa:24:46:d1:86:db:0b:c3: 8d:4e:cd:fd:59:c0:e8:de:45:40:7c:04:d8:8c:47: 36:77:c9:3d:d6:2b:80:c1:8c:aa:65:20:58:47:a6: ac:11:51:ed:49:d0:d4:59:bf:e5:28:c5:f6:af:6e: a3:4a:08:78:49:fe:dc:48:1d:be:9a:14:27:b1:ed: 5a:b7:15:46:75:93:7f:44:10:ae:0c:09:87:4c:cc: 3b:87:d0:68:df:ad:c5:a1:8d:9a:96:5f:f4:0c:7d: 6b:07:b4:57:d7:d8:b6:fd:d5:8e:a9:49:94:43:33: 54:f3:2e:04:5e:ed:9f:28:7d:50:b3:ff:a3:4c:ad: fd:e5:25:ad:53:9d:42:44:22:43:d0:24:a4:76:92: 89:8c:5c:66:ad:4e:f0:54:4c:87:39:ed:b7:ed:48: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:F9:13:E7:E5:0B:D8:B2:9F:D1:19:95:CB:98:19:BD:C4:DA:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3c6a7e3f-f6f4-3357-928a-04a7ec64f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 208.52.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c7:99:00:85:69:3c:f8:20:26:3b:d4:bf:fb:98:53:95:c4: 31:f3:41:ba:16:9f:66:2b:1d:68:e1:e5:4b:31:c6:a6:5d:eb: c7:e3:60:e2:12:7f:29:fa:84:af:37:5d:4f:e6:79:28:3c:0f: fa:50:d7:e4:bf:0e:59:34:64:d4:6b:05:8e:bd:02:5b:8e:64: a3:ff:e6:5e:5e:ee:91:a3:7f:00:05:51:d3:a9:ff:a0:75:c7: 34:25:fd:d4:f4:e7:32:2a:7e:74:81:5b:47:b0:d3:88:d2:19: f1:7f:6c:9a:96:24:ad:66:2e:95:cf:be:63:ba:6e:b9:6c:cd: 76:78:f3:75:95:54:ef:d3:49:71:d9:1b:12:b5:24:29:1b:04: 80:15:6c:20:8c:0f:46:85:f5:1b:50:29:44:ac:e7:ac:8a:eb: 62:76:f3:e8:9b:40:37:52:d1:a4:95:62:b0:95:e6:0a:0e:33: f5:21:ee:ed:37:fe:26:ed:19:01:92:27:eb:cf:fb:5a:62:e2: 04:dd:b8:b7:f8:4b:8b:28:3d:34:8f:4c:65:16:54:97:98:01: 80:a8:9d:e9:97:b4:b9:e1:96:72:95:56:d6:b2:e6:c4:c7:e2: c0:d2:36:68:d7:0f:52:b9:d3:3a:94:00:79:2d:42:a5:69:8e: 8b:6a:de:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj+PP1zlR0tAqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDUzMDE1NTQtN2MyMS00NTA1LWJiMGItZmRhNTVjZjliMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuUfR8TYHUkEWK/Poa1Dna2GCzGjSxTMZji+ ApimmUcRbupu9Yts15BTLNP/GWPor9SzP806dHJo+FTxp16uJJO2XxsZ2ZUD8YIL kLpvcKsRCA27p+kMTReEq5329MkUqiRG0YbbC8ONTs39WcDo3kVAfATYjEc2d8k9 1iuAwYyqZSBYR6asEVHtSdDUWb/lKMX2r26jSgh4Sf7cSB2+mhQnse1atxVGdZN/ RBCuDAmHTMw7h9Bo363FoY2all/0DH1rB7RX19i2/dWOqUmUQzNU8y4EXu2fKH1Q s/+jTK395SWtU51CRCJD0CSkdpKJjFxmrU7wVEyHOe237Ug7/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcj+RPn5QvYsp/RGZXLmBm9xNo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2M2YTdlM2YtZjZmNC0z MzU3LTkyOGEtMDRhN2VjNjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzHmQCFaTz4ICY71L/7mFOVxDHzQboWn2YrHWjh5UsxxqZd68fjYOIS fyn6hK83XU/meSg8D/pQ1+S/Dlk0ZNRrBY69AluOZKP/5l5e7pGjfwAFUdOp/6B1 xzQl/dT05zIqfnSBW0ew04jSGfF/bJqWJK1mLpXPvmO6brlszXZ483WVVO/TSXHZ GxK1JCkbBIAVbCCMD0aF9RtQKUSs56yK62J28+ibQDdS0aSVYrCV5goOM/Uh7u03 /ibtGQGSJ+vP+1pi4gTduLf4S4soPTSPTGUWVJeYAYConemXtLnhlnKVVtay5sTH 4sDSNmjXD1K50zqUAHktQqVpjotq3iQ= -----END CERTIFICATE-----Generated at Sun Oct 11 04:37:49 2026 by rpki-client