$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa File: 3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa (raw, json) Hash identifier: izZam9BMyICsaSg+YvTOnS+bzdG02DxkPwI7p+PihO0= Subject key identifier: FF:DB:3E:6B:47:13:15:4F:AC:B7:5E:57:B2:3B:BC:D7:9A:87:04:1B Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D975571E796D1D756ED9E0D00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 14315 IP address blocks: 108.59.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:71:e7:96:d1:d7:56:ed:9e:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=9ac38e5c-8a17-4b4d-b688-0b1743ca610d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:d1:af:b1:c7:3b:10:b1:23:76:d5:19:56: e8:c5:a3:53:87:ad:3b:f6:0b:f9:b8:84:a4:27:5d: 10:8e:36:1c:2e:40:85:e1:d0:e4:af:9f:f7:bf:fa: ee:6c:f2:08:24:48:03:a6:a2:15:b6:39:1d:6c:1c: 63:f8:7b:9f:48:f2:7a:41:9b:73:c9:14:7d:38:ce: 5f:6e:9f:60:d1:09:e3:26:98:19:48:97:5a:2e:13: e5:0d:7e:e5:47:67:50:85:aa:09:7a:2b:c8:bf:7e: 36:a0:f3:d7:60:90:41:73:80:4a:24:97:4c:e0:ea: f1:e4:45:0d:1a:5c:e1:66:9e:de:b2:0a:f0:60:5b: f8:c0:96:77:70:10:8b:36:4c:df:64:d6:66:63:cb: 4c:47:12:5d:0e:1e:86:e7:f2:65:60:12:18:78:df: ab:f8:8c:59:0d:fe:11:c1:03:f2:f2:ec:8c:64:e8: 57:b0:18:21:5c:4e:df:15:33:4c:78:27:89:ed:c4: f8:f7:d0:54:ce:e6:fe:8c:f6:7b:8d:9b:69:fe:63: 24:9e:10:68:f7:ea:21:52:d6:01:62:a3:ff:9c:27: 32:ca:eb:d0:70:1c:e3:88:57:9d:6d:c7:d1:21:ab: 49:a3:00:e1:00:04:5b:a4:1b:97:cf:ec:7f:bc:d6: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:3E:6B:47:13:15:4F:AC:B7:5E:57:B2:3B:BC:D7:9A:87:04:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3b:6f:c9:b2:87:4c:be:97:ea:e0:b5:f2:68:3e:5c:be:df: ec:5f:b7:4c:b5:c2:62:64:2e:f7:c8:76:a0:a3:ae:9b:9f:80: 08:91:4b:59:8a:ca:1a:45:13:22:7d:14:22:e7:a8:9b:1b:66: da:5f:73:97:8f:e2:d6:d3:84:0c:9e:10:36:5d:77:2d:d3:59: b4:37:69:83:db:a7:71:eb:44:a7:d0:66:e7:21:00:d1:cd:6c: 0f:a3:25:1e:5c:c2:5d:83:c3:5b:94:63:95:cd:2a:b1:d8:23: 37:65:61:ca:79:8f:97:53:68:67:ff:9f:a2:7b:c1:7d:75:60: bb:99:b1:4f:0f:12:9e:ea:7e:34:6c:53:5b:1d:a3:e0:b1:da: 84:34:5e:d4:6f:dc:3c:90:97:da:88:fd:53:a1:ba:0d:bc:9f: 18:d5:3c:79:63:bf:d0:97:72:e4:62:66:e2:23:dc:db:66:d9: 10:ca:04:52:86:36:ef:f0:e2:3d:62:a7:21:00:bc:00:29:c6: 23:13:4e:b5:62:b5:1e:fd:9b:33:f4:de:28:97:f9:64:20:51: d8:79:e5:a3:c4:24:8b:f8:3e:e1:ef:f1:cc:bd:8a:70:83:80: 19:d4:1d:ee:f7:ac:f5:0f:de:d6:93:db:92:74:6e:ae:05:7d: 1f:09:37:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVXHnltHXVu2eDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk OWFjMzhlNWMtOGExNy00YjRkLWI2ODgtMGIxNzQzY2E2MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qfRr7HHOxCxI3bVGVboxaNTh6079gv5uISk J10QjjYcLkCF4dDkr5/3v/rubPIIJEgDpqIVtjkdbBxj+HufSPJ6QZtzyRR9OM5f bp9g0QnjJpgZSJdaLhPlDX7lR2dQhaoJeivIv342oPPXYJBBc4BKJJdM4Orx5EUN GlzhZp7esgrwYFv4wJZ3cBCLNkzfZNZmY8tMRxJdDh6G5/JlYBIYeN+r+IxZDf4R wQPy8uyMZOhXsBghXE7fFTNMeCeJ7cT499BUzub+jPZ7jZtp/mMknhBo9+ohUtYB YqP/nCcyyuvQcBzjiFedbcfRIatJowDhAARbpBuXz+x/vNY7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/bPmtHExVPrLdeV7I7vNeahwQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2Y4ZWQ1YTEtMWIyZS0z NzVjLWE3YWQtYzhkYmI3M2IzNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY7b8myh0y+l+rgtfJoPly+3+xft0y1wmJkLvfIdqCjrpufgAiRS1mK yhpFEyJ9FCLnqJsbZtpfc5eP4tbThAyeEDZddy3TWbQ3aYPbp3HrRKfQZuchANHN bA+jJR5cwl2Dw1uUY5XNKrHYIzdlYcp5j5dTaGf/n6J7wX11YLuZsU8PEp7qfjRs U1sdo+Cx2oQ0XtRv3DyQl9qI/VOhug28nxjVPHljv9CXcuRiZuIj3Ntm2RDKBFKG Nu/w4j1ipyEAvAApxiMTTrVitR79mzP03iiX+WQgUdh55aPEJIv4PuHv8cy9inCD gBnUHe73rPUP3taT25J0bq4FfR8JN/Y= -----END CERTIFICATE-----Generated at Wed May 13 10:40:52 2026 by rpki-client