$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa File: 81fd3d75-f499-398e-be0f-478cd3ebb591.roa (raw, json) Hash identifier: M7ZFYbFo4RG+NfAlK6Erw5qCV4x3jIUq3p9wz5gkJzY= Subject key identifier: A6:3D:A6:14:B6:25:CE:DF:EC:92:40:96:3C:73:34:37:A8:CC:C3:90 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD20C468EA1331634A3C200 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11404 IP address blocks: 209.236.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:0c:46:8e:a1:33:16:34:a3:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=7759880e-8e8e-495a-b463-cc32f6a213b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:42:54:55:b5:e2:99:f4:83:01:7d:1f:46: e9:78:8a:95:a3:a5:7a:a1:56:e4:56:2f:cb:2a:df: de:fa:30:fd:b1:5d:66:ad:9b:ea:4a:a6:64:92:ce: f2:e0:54:1b:31:ac:c6:2f:b5:ea:99:a4:4c:fd:5a: 3a:6c:01:34:c4:1f:2d:d2:e9:c8:55:e2:13:9d:38: cd:b7:5f:38:56:a1:85:c6:00:c3:ef:75:e4:ba:9d: e8:e1:46:58:41:3e:b5:d1:4e:f1:b9:16:ff:56:d4: 1d:44:d4:f5:55:47:6d:12:11:73:8d:aa:de:fc:a1: b3:3a:a1:36:2a:84:86:f2:e7:35:29:4c:df:e4:88: 56:65:be:16:e1:9a:47:72:9c:96:04:78:19:c7:00: 1a:58:a4:cd:43:1e:a7:e7:72:fd:cb:a7:a4:0d:cb: 73:5a:f4:35:7d:e0:f3:3e:d8:4b:f4:6d:70:9f:df: d6:92:b6:05:3a:2a:0c:2d:0b:0a:5b:46:7e:72:ef: 41:1d:76:d6:aa:91:ce:97:83:c6:3b:55:87:04:4d: 21:08:ad:62:d5:31:38:88:d4:2d:66:96:5d:7e:af: 26:59:fa:85:fd:c8:2a:21:5d:4f:67:2f:17:53:7d: e6:3b:c5:5d:6b:da:1b:72:ee:4b:5c:13:8a:cf:bc: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3D:A6:14:B6:25:CE:DF:EC:92:40:96:3C:73:34:37:A8:CC:C3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/81fd3d75-f499-398e-be0f-478cd3ebb591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3c:2f:e2:1d:1f:a5:eb:77:7d:a0:99:84:41:19:00:b4:6e: 0f:3d:e3:1d:ce:32:9f:7f:19:b6:40:19:20:f1:1e:16:a5:f1: 64:b8:54:d5:53:0d:4a:56:96:04:9d:93:9c:e1:ee:10:5f:46: 9f:de:c3:16:81:c9:18:51:e6:00:de:71:8b:fb:64:59:dc:7f: fb:a1:ca:54:da:cd:0c:58:31:44:77:0f:d8:11:6d:f0:41:93: 77:09:7f:51:b8:96:96:7a:da:dc:6a:54:cd:6d:d3:5a:f7:f3: d4:a2:f8:19:b1:31:f8:64:81:b4:52:c5:7e:d0:95:48:a0:b0: 51:44:f0:31:46:bb:6c:93:4f:65:4a:a8:43:ad:73:ee:c9:44: cd:ac:31:6f:2a:b5:78:1f:6c:a5:a9:e7:27:a2:81:7a:08:3c: df:f9:01:5e:a9:8e:66:6c:1f:ec:34:7f:0a:02:75:29:86:9e: ea:e5:44:85:4f:34:77:cc:bc:44:2f:ae:14:7d:e4:b3:0a:d9: 64:5d:b9:e1:20:44:58:3a:82:27:8a:6f:30:5b:07:09:cf:ba: b6:e6:21:4e:89:7c:22:bc:16:dc:b6:1e:02:46:59:c3:5b:1f: 9c:02:90:b5:0a:b1:bc:de:06:f3:36:71:29:14:1f:de:2f:9a: b1:07:02:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gxGjqEzFjSjwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Nzc1OTg4MGUtOGU4ZS00OTVhLWI0NjMtY2MzMmY2YTIxM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66xCVFW14pn0gwF9H0bpeIqVo6V6oVbkVi/L Kt/e+jD9sV1mrZvqSqZkks7y4FQbMazGL7XqmaRM/Vo6bAE0xB8t0unIVeITnTjN t184VqGFxgDD73Xkup3o4UZYQT610U7xuRb/VtQdRNT1VUdtEhFzjare/KGzOqE2 KoSG8uc1KUzf5IhWZb4W4ZpHcpyWBHgZxwAaWKTNQx6n53L9y6ekDctzWvQ1feDz PthL9G1wn9/WkrYFOioMLQsKW0Z+cu9BHXbWqpHOl4PGO1WHBE0hCK1i1TE4iNQt ZpZdfq8mWfqF/cgqIV1PZy8XU33mO8Vda9obcu5LXBOKz7wUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY9phS2Jc7f7JJAljxzNDeozMOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvODFmZDNkNzUtZjQ5OS0z OThlLWJlMGYtNDc4Y2QzZWJiNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs8L+IdH6Xrd32gmYRBGQC0bg894x3OMp9/GbZAGSDxHhal8WS4VNVT DUpWlgSdk5zh7hBfRp/ewxaByRhR5gDecYv7ZFncf/uhylTazQxYMUR3D9gRbfBB k3cJf1G4lpZ62txqVM1t01r389Si+BmxMfhkgbRSxX7QlUigsFFE8DFGu2yTT2VK qEOtc+7JRM2sMW8qtXgfbKWp5yeigXoIPN/5AV6pjmZsH+w0fwoCdSmGnurlRIVP NHfMvEQvrhR95LMK2WRdueEgRFg6gieKbzBbBwnPurbmIU6JfCK8Fty2HgJGWcNb H5wCkLUKsbzeBvM2cSkUH94vmrEHAnk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:42 2025 by rpki-client