$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/41afd753-52c6-37e2-8bda-0a3b001bbce3.roa File: 41afd753-52c6-37e2-8bda-0a3b001bbce3.roa (raw, json) Hash identifier: eo1Mq8ZL+ECy+luN23H9ZaBdQVkZrd2cp1T5Us//bZ0= Subject key identifier: 79:F6:71:E1:47:D5:94:7E:34:2E:80:4D:7B:D8:CB:80:60:76:A7:63 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F3243C8BDEE3F69528CB43D80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/41afd753-52c6-37e2-8bda-0a3b001bbce3.roa Signing time: Wed 16 Sep 2026 17:42:27 +0000 ROA not before: Wed 16 Sep 2026 17:42:27 +0000 ROA not after: Tue 15 Dec 2026 18:42:27 +0000 asID: 218700 IP address blocks: 108.59.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:43:c8:bd:ee:3f:69:52:8c:b4:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 16 17:42:27 2026 GMT Not After : Dec 15 18:42:27 2026 GMT Subject: CN=22f3c640-a77c-4083-9e8e-e8be3b97ac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3b:bd:bd:d8:b9:86:52:15:64:cb:da:78:85: 9a:4a:3e:2d:02:4e:ac:26:c6:c3:9b:00:93:67:68: 26:93:22:72:0e:11:a7:57:a6:49:da:a2:9e:dc:0f: 2f:c9:66:9b:3b:a8:8b:73:3f:37:44:8b:df:f0:56: b2:8e:bf:06:5d:d1:0a:21:48:fb:4c:de:6f:ae:cd: 76:4c:ce:37:a2:e9:cd:18:2b:3e:f3:cb:24:0d:8f: 35:f6:b4:4b:ea:ca:55:99:f5:03:e7:bc:4c:1c:a2: 79:6e:56:11:31:63:ca:48:b7:b4:78:eb:f7:5b:ca: cd:ee:05:2f:4b:dc:05:21:8b:51:bc:48:5c:8c:1e: 02:18:e9:6c:db:43:b8:83:29:54:14:50:2e:f1:81: b2:50:8b:92:0c:2f:52:52:77:42:02:69:c4:85:da: 8c:47:b2:87:6c:1d:80:54:7e:2d:ea:b4:11:ed:67: b4:4b:fa:3d:d6:75:fe:2d:85:bd:c2:e0:1e:e6:30: 5a:48:4f:d5:d3:4e:0d:83:20:c0:4d:ca:5a:7d:7d: c1:0e:72:34:ed:1d:b2:86:da:39:16:42:3a:14:e6: 51:03:ca:07:3d:8f:44:63:26:d2:2d:4c:00:a2:d3: 29:3c:d7:e6:2d:8d:23:2c:4b:d4:db:21:c3:19:77: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F6:71:E1:47:D5:94:7E:34:2E:80:4D:7B:D8:CB:80:60:76:A7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/41afd753-52c6-37e2-8bda-0a3b001bbce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ca:78:d8:66:39:b7:de:12:17:f1:5e:60:bf:4e:cf:c2:27: 5f:5d:f3:30:c0:a3:12:37:4b:9e:f7:24:46:15:ad:b5:f8:d1: 19:af:7f:8d:fb:ac:fb:9a:69:d5:24:c2:db:57:4c:3a:2f:7b: b6:a5:b8:c5:22:2c:cc:c7:80:ce:70:4b:7f:5c:cb:7f:a7:8b: 45:43:1f:ee:46:f3:19:48:a1:5f:0c:eb:41:47:19:7c:94:e5: c8:a6:21:5e:b9:e7:13:0e:1f:54:a0:82:e8:fe:af:4a:03:e3: 6d:7f:0d:f8:17:33:a1:47:ef:ee:d4:db:17:d8:47:6b:64:f7: 5d:3f:8e:f3:ae:0d:94:99:ef:d5:bc:dc:2a:aa:09:68:b2:8e: 56:54:48:2e:c3:83:c8:75:11:b6:8b:ab:27:6d:d8:55:eb:40: b0:10:e2:17:86:b2:7e:27:80:61:8a:3a:49:b9:ea:29:96:cf: 25:15:a3:eb:2c:ed:f9:c4:c8:26:10:b2:4d:c0:d1:fa:9f:76: 20:25:38:68:55:a8:ea:d7:96:14:23:0c:cb:99:7b:f5:ae:fe: ab:ed:33:fa:f8:f4:c5:7f:61:99:7c:27:3c:26:3e:ee:da:52: 5f:6e:3b:de:18:f9:7c:ef:83:51:25:01:5b:6b:c9:b1:c3:49: 9e:6e:bb:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8yQ8i97j9pUoy0PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkxNjE3NDIyN1oXDTI2MTIxNTE4NDIyN1owLzEtMCsGA1UEAxMk MjJmM2M2NDAtYTc3Yy00MDgzLTllOGUtZThiZTNiOTdhYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ju9vdi5hlIVZMvaeIWaSj4tAk6sJsbDmwCT Z2gmkyJyDhGnV6ZJ2qKe3A8vyWabO6iLcz83RIvf8Fayjr8GXdEKIUj7TN5vrs12 TM43ounNGCs+88skDY819rRL6spVmfUD57xMHKJ5blYRMWPKSLe0eOv3W8rN7gUv S9wFIYtRvEhcjB4CGOls20O4gylUFFAu8YGyUIuSDC9SUndCAmnEhdqMR7KHbB2A VH4t6rQR7We0S/o91nX+LYW9wuAe5jBaSE/V004NgyDATcpafX3BDnI07R2yhto5 FkI6FOZRA8oHPY9EYybSLUwAotMpPNfmLY0jLEvU2yHDGXdmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn2ceFH1ZR+NC6ATXvYy4BgdqdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvNDFhZmQ3NTMtNTJjNi0z N2UyLThiZGEtMGEzYjAwMWJiY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXKeNhmObfeEhfxXmC/Ts/CJ19d8zDAoxI3S573JEYVrbX40Rmvf437 rPuaadUkwttXTDove7aluMUiLMzHgM5wS39cy3+ni0VDH+5G8xlIoV8M60FHGXyU 5cimIV655xMOH1Sgguj+r0oD421/DfgXM6FH7+7U2xfYR2tk910/jvOuDZSZ79W8 3CqqCWiyjlZUSC7Dg8h1EbaLqydt2FXrQLAQ4heGsn4ngGGKOkm56imWzyUVo+ss 7fnEyCYQsk3A0fqfdiAlOGhVqOrXlhQjDMuZe/Wu/qvtM/r49MV/YZl8JzwmPu7a Ul9uO94Y+Xzvg1ElAVtrybHDSZ5uu8k= -----END CERTIFICATE-----Generated at Mon Sep 28 07:20:40 2026 by rpki-client