$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/951b734f-9000-33d9-b7e7-33451cee691f.roa File: 951b734f-9000-33d9-b7e7-33451cee691f.roa (raw, json) Hash identifier: q7li5+YFG3shTj6XJ3hZuFB7Cp4lSVVs7PyF4Cb5VEc= Subject key identifier: 91:CD:B1:E5:CF:88:90:28:11:92:36:C2:4A:73:8F:76:A8:39:65:33 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F4988498D53C599965A134940 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/951b734f-9000-33d9-b7e7-33451cee691f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29182 IP address blocks: 208.52.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:49:8d:53:c5:99:96:5a:13:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02ec2ada-6f8a-479b-97eb-09d6b7eb617b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:40:23:2a:fc:fd:22:e4:6a:6d:93:b5:3f:ab: 9e:b4:89:12:0b:6e:8a:54:71:08:82:cf:2a:00:f3: 75:8c:7e:85:33:01:60:43:7c:8b:d8:a3:1d:42:77: c4:24:cf:5f:5e:e3:75:ec:48:0b:8a:93:a5:ba:2e: a9:f0:1b:12:06:c2:f1:1e:ee:7e:a9:cc:8c:b7:49: cb:f6:9c:73:9c:40:36:a1:34:55:73:2c:f0:9c:84: bc:9f:c0:28:2a:de:0e:05:c2:e1:46:c5:34:e0:8b: 16:a8:a2:ea:98:5c:c7:c0:53:d0:20:a4:e8:4e:5d: 17:1a:fa:63:84:1b:f8:4a:b6:b7:5e:a0:96:70:c4: 71:4f:7b:d4:25:45:d2:7e:6d:40:e6:7d:51:4b:ef: 63:d2:94:74:c0:df:0a:c9:ca:08:9b:94:01:ce:8a: fd:22:65:c8:cc:d9:3a:99:4b:c2:ed:30:2d:a8:ca: 1d:f8:52:fd:33:30:fb:86:7a:d2:fb:23:33:5a:b3: 62:40:ad:a6:a4:4b:4b:41:7e:1e:df:26:d2:9d:28: 80:ac:08:84:ec:f8:a3:1c:16:93:89:d2:7b:50:c7: f8:0a:49:48:6c:f8:48:40:8f:7e:72:5d:8e:d1:3f: 9a:b3:dd:00:6e:ff:26:b2:64:87:65:c3:3a:27:c6: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:B1:E5:CF:88:90:28:11:92:36:C2:4A:73:8F:76:A8:39:65:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/951b734f-9000-33d9-b7e7-33451cee691f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 208.52.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:76:c9:b9:c0:98:a6:fe:46:00:d4:f4:8b:d7:54:75:7a:89: 02:54:be:e9:94:31:77:5a:4d:5f:f2:87:b8:c8:c0:88:7c:20: 99:be:71:42:6d:d9:1a:a9:9d:18:b9:d0:24:c0:b9:5b:fa:a8: 3b:85:cb:57:b5:09:38:b1:48:3f:66:6b:80:b2:be:27:e8:07: de:15:2a:e6:24:b2:ea:8e:13:bf:b7:06:82:04:63:49:b1:64: 91:70:af:43:c4:19:fe:67:e5:c4:bc:ef:c6:5c:98:fa:28:ce: aa:78:b2:22:d9:7d:94:db:6a:0e:b1:b3:76:90:69:76:62:62: 24:47:1c:50:29:c9:2d:35:7f:71:14:01:cd:fe:3b:2a:11:31: be:15:7a:64:9b:a9:41:af:3b:1d:fd:99:2b:68:42:fa:5d:d5: fa:d4:11:69:5e:a5:a0:64:f2:1a:b4:b1:f4:48:5f:56:4a:2b: 0d:0d:2a:f5:2b:a5:70:44:5b:18:f8:2c:10:14:3c:fc:bb:40: 8c:13:6a:05:3b:4a:7c:06:26:97:bc:33:09:dd:ce:a4:a2:8e: 22:bd:c7:05:78:8b:1e:bf:ea:82:60:80:77:7e:66:2c:93:7d: 75:88:6b:69:48:e9:d1:70:5e:7a:ff:47:65:86:af:dd:15:e5: c6:b4:89:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEmNU8WZlloTSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDJlYzJhZGEtNmY4YS00NzliLTk3ZWItMDlkNmI3ZWI2MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UAjKvz9IuRqbZO1P6uetIkSC26KVHEIgs8q APN1jH6FMwFgQ3yL2KMdQnfEJM9fXuN17EgLipOlui6p8BsSBsLxHu5+qcyMt0nL 9pxznEA2oTRVcyzwnIS8n8AoKt4OBcLhRsU04IsWqKLqmFzHwFPQIKToTl0XGvpj hBv4Sra3XqCWcMRxT3vUJUXSfm1A5n1RS+9j0pR0wN8KycoIm5QBzor9ImXIzNk6 mUvC7TAtqMod+FL9MzD7hnrS+yMzWrNiQK2mpEtLQX4e3ybSnSiArAiE7PijHBaT idJ7UMf4CklIbPhIQI9+cl2O0T+as90Abv8msmSHZcM6J8a6UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHNseXPiJAoEZI2wkpzj3aoOWUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTUxYjczNGYtOTAwMC0z M2Q5LWI3ZTctMzM0NTFjZWU2OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ2ybnAmKb+RgDU9IvXVHV6iQJUvumUMXdaTV/yh7jIwIh8IJm+cUJt 2RqpnRi50CTAuVv6qDuFy1e1CTixSD9ma4CyvifoB94VKuYksuqOE7+3BoIEY0mx ZJFwr0PEGf5n5cS878ZcmPoozqp4siLZfZTbag6xs3aQaXZiYiRHHFApyS01f3EU Ac3+OyoRMb4VemSbqUGvOx39mStoQvpd1frUEWlepaBk8hq0sfRIX1ZKKw0NKvUr pXBEWxj4LBAUPPy7QIwTagU7SnwGJpe8MwndzqSijiK9xwV4ix6/6oJggHd+ZiyT fXWIa2lI6dFwXnr/R2WGr90V5ca0iT4= -----END CERTIFICATE-----Generated at Sun Oct 4 08:39:30 2026 by rpki-client