$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa File: 916e3eba-989b-3327-9cfa-2307267e8513.roa (raw, json) Hash identifier: sT0p+byVV0G7ZrBVF2jhnDsJ0TNmZ6DJJzcYbyHa+xg= Subject key identifier: F7:B1:CC:45:3A:44:2A:65:FC:1B:41:B5:D8:09:EC:CA:E0:A7:2C:05 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F4972BB8A8130C501C4944BA0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 209.236.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:bb:8a:81:30:c5:01:c4:94:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1c71f96-29d2-4f95-a824-c053260c4172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:c9:4c:a8:48:4d:16:7f:1f:ae:85:69:f4: e6:47:da:ce:20:e9:17:24:fc:31:f2:b5:ee:47:36: f4:04:14:63:73:b6:c1:ff:08:90:05:54:76:5b:45: 31:65:ab:f5:a4:05:07:f5:bf:3d:ed:fb:be:05:ac: a9:96:5a:06:4d:f6:a6:96:a7:f4:d4:9f:15:5e:6a: 88:e7:0b:d2:f4:b4:cd:3b:c5:cf:e3:e6:63:1c:40: c7:1b:4e:02:00:2e:8c:98:87:2a:17:a7:8a:46:5e: 74:dc:c1:0d:88:ac:d6:d8:76:d2:74:1c:f7:e1:bb: bd:c7:13:7b:dd:99:1e:85:85:c9:41:c0:59:d4:7b: 7d:91:e4:73:71:56:62:d2:61:b2:5e:7b:7c:6e:f4: 32:eb:c9:b7:3a:e0:1a:22:8e:1d:7e:2c:e2:7b:4d: 8f:67:00:91:c9:bd:4a:99:e7:2f:9b:98:5b:6e:03: 9a:d8:7f:80:5b:76:8a:34:3a:28:e2:f4:8c:2f:54: 40:ab:1e:a4:d6:91:b2:4c:6a:33:5c:a0:49:72:6c: b8:c1:31:94:ab:93:3b:23:01:4f:6f:15:37:79:d9: c9:e1:45:d4:e1:30:f3:12:17:3e:e1:d9:b9:80:f6: b2:fe:f8:e0:cf:1a:ab:ff:c8:8f:1e:93:b0:aa:2e: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:CC:45:3A:44:2A:65:FC:1B:41:B5:D8:09:EC:CA:E0:A7:2C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:50:ba:3d:1e:43:eb:7e:bc:13:a0:5a:b5:3c:d2:bd:11:0c: e6:26:eb:2b:8f:2c:ca:eb:ed:8e:ad:c3:b5:d3:b1:66:8d:c5: ab:20:79:92:39:f4:f1:c3:9f:d9:d1:09:ce:9a:b1:52:a2:9e: 1b:d3:5e:0c:bc:7b:3a:6b:23:ed:35:98:5b:81:66:62:c4:2e: 6b:fe:0f:e9:d6:d8:51:ce:06:bb:c9:55:48:9a:02:58:50:37: cb:f8:25:2e:47:ec:0f:a2:2f:7a:db:2d:35:b9:ea:8e:2f:6d: b5:d4:ba:4e:3e:77:c3:3a:1d:da:f7:14:9c:4b:da:c7:9e:1d: 55:77:d5:95:8c:ce:84:0d:7c:8e:68:66:54:8e:40:a3:66:84: d1:9f:37:36:a7:71:b0:ef:29:c7:79:a3:44:62:0c:8f:19:14: 71:a0:2a:30:3b:7b:33:11:c9:75:ec:60:75:36:d9:9c:51:89: a1:d6:2f:88:c3:93:20:f3:52:da:8c:31:90:ea:81:dc:cc:56: c3:f9:d3:4c:ee:7d:51:f5:45:3e:91:9a:53:c8:dc:56:ec:a2: fb:28:3b:94:c9:a8:fe:d9:b3:2c:36:e9:db:a9:ff:c3:4a:6e: 25:e9:07:b7:90:10:12:51:3d:bd:c3:49:6e:d9:16:6c:f3:ac: 61:72:75:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcruKgTDFAcSUS6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFjNzFmOTYtMjlkMi00Zjk1LWE4MjQtYzA1MzI2MGM0MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWXJTKhITRZ/H66FafTmR9rOIOkXJPwx8rXu Rzb0BBRjc7bB/wiQBVR2W0UxZav1pAUH9b897fu+BayplloGTfamlqf01J8VXmqI 5wvS9LTNO8XP4+ZjHEDHG04CAC6MmIcqF6eKRl503MENiKzW2HbSdBz34bu9xxN7 3ZkehYXJQcBZ1Ht9keRzcVZi0mGyXnt8bvQy68m3OuAaIo4dfizie02PZwCRyb1K mecvm5hbbgOa2H+AW3aKNDoo4vSML1RAqx6k1pGyTGozXKBJcmy4wTGUq5M7IwFP bxU3ednJ4UXU4TDzEhc+4dm5gPay/vjgzxqr/8iPHpOwqi76AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPexzEU6RCpl/BtBtdgJ7MrgpywFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTE2ZTNlYmEtOTg5Yi0z MzI3LTljZmEtMjMwNzI2N2U4NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJQuj0eQ+t+vBOgWrU80r0RDOYm6yuPLMrr7Y6tw7XTsWaNxasgeZI5 9PHDn9nRCc6asVKinhvTXgy8ezprI+01mFuBZmLELmv+D+nW2FHOBrvJVUiaAlhQ N8v4JS5H7A+iL3rbLTW56o4vbbXUuk4+d8M6Hdr3FJxL2seeHVV31ZWMzoQNfI5o ZlSOQKNmhNGfNzancbDvKcd5o0RiDI8ZFHGgKjA7ezMRyXXsYHU22ZxRiaHWL4jD kyDzUtqMMZDqgdzMVsP500zufVH1RT6RmlPI3FbsovsoO5TJqP7Zsyw26dup/8NK biXpB7eQEBJRPb3DSW7ZFmzzrGFydTo= -----END CERTIFICATE-----Generated at Sun Oct 4 22:50:47 2026 by rpki-client