$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa File: 960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa (raw, json) Hash identifier: dp2mg80JRvLwiNDl/6TUcmBgPTM5zC3Q5KtAqufyRew= Subject key identifier: 8E:7F:DA:0C:C4:F9:BF:18:20:1C:A0:68:28:74:9A:0B:36:3A:00:54 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D1F4A3A53BB8AAD34A5308180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 11404 IP address blocks: 209.236.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:3a:53:bb:8a:ad:34:a5:30:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=fce6a5c8-96f3-475b-8eff-0c3ab01eb488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:f7:dc:5f:d3:0a:50:4f:a6:81:13:df:1d: 32:1e:d5:c7:a0:9b:ea:00:e9:1f:d6:90:d7:6e:14: f3:1f:ae:bd:97:cc:8e:99:f8:0e:44:9b:16:24:7c: b3:77:f3:1d:82:d0:b8:c8:58:cf:44:ea:bb:25:15: c4:da:f6:f9:19:5c:6d:34:23:cf:04:f6:d8:e5:51: 02:d7:dc:75:7a:b1:0a:02:77:38:36:53:25:31:d2: 4b:e9:c7:c8:52:6f:73:e2:b9:94:7c:31:44:6c:aa: 17:80:dd:e1:ec:e7:f7:9e:f9:35:d7:62:03:d8:17: 6d:24:70:ee:83:ae:74:62:1d:37:5f:0a:e9:ae:f5: e7:ee:b0:4f:08:62:ef:bf:80:77:41:04:ff:dc:c4: 34:67:63:94:f9:98:db:69:76:fe:e5:a9:61:26:9e: a1:24:2e:c1:dd:5f:8a:6c:a5:b9:2d:9f:d6:78:d9: ef:b1:92:36:b5:8f:8d:ea:9d:3a:b4:47:d8:79:58: 35:a4:86:e9:80:ea:35:54:95:cb:68:2e:42:5b:3a: 7c:50:a1:a0:06:96:14:38:91:44:5d:5f:b7:d2:e5: 73:c0:78:2a:88:ad:fe:34:55:32:08:6c:14:7c:a6: bb:67:65:ed:f9:a7:62:28:a8:bb:1c:e5:55:da:2f: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7F:DA:0C:C4:F9:BF:18:20:1C:A0:68:28:74:9A:0B:36:3A:00:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f9:f8:0c:e7:87:14:a1:a9:b7:dd:ba:b3:ad:1b:5d:b1:ba: e1:ce:0a:0d:a9:c6:c4:fb:ad:b4:e3:3c:89:b7:0c:9f:fd:76: 5c:2f:ac:03:e1:c2:db:96:f1:45:4f:e9:0d:44:3e:32:1f:a4: 4a:20:62:72:e7:87:5d:81:0f:e5:8f:20:fc:f2:95:9a:8c:c7: f5:0e:9f:8f:cc:1b:40:19:dc:18:1a:23:02:3d:d1:13:28:71: c2:e1:73:8d:38:e5:09:9f:b5:6a:09:45:d0:ff:19:e6:6b:b4: b7:0f:df:29:ab:50:f8:7a:8f:4e:be:54:36:77:cc:a8:0d:cc: 68:b8:44:1d:ab:65:be:fb:0e:6f:ef:42:c4:c8:a5:81:ba:2d: 37:f2:30:09:8a:bb:9a:71:d9:91:43:28:5c:36:4a:ec:72:a8: 37:27:c3:ce:94:c3:fe:bb:a5:15:1f:9e:24:58:a0:36:8c:67: a9:a0:2e:04:bc:a7:00:57:58:7a:49:f6:1b:24:47:54:94:f1: d9:bd:79:78:36:bf:55:23:20:d1:5e:c4:89:fc:c8:6a:18:51: 0d:6a:c6:8f:1c:ba:ff:aa:23:23:cc:77:ad:b3:e2:49:77:b5: 76:cb:8d:ea:27:b6:05:32:1b:74:6a:0f:eb:21:03:b3:5b:41: 4f:99:08:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjpTu4qtNKUwgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmNlNmE1YzgtOTZmMy00NzViLThlZmYtMGMzYWIwMWViNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6P33F/TClBPpoET3x0yHtXHoJvqAOkf1pDX bhTzH669l8yOmfgORJsWJHyzd/MdgtC4yFjPROq7JRXE2vb5GVxtNCPPBPbY5VEC 19x1erEKAnc4NlMlMdJL6cfIUm9z4rmUfDFEbKoXgN3h7Of3nvk112ID2BdtJHDu g650Yh03XwrprvXn7rBPCGLvv4B3QQT/3MQ0Z2OU+ZjbaXb+5alhJp6hJC7B3V+K bKW5LZ/WeNnvsZI2tY+N6p06tEfYeVg1pIbpgOo1VJXLaC5CWzp8UKGgBpYUOJFE XV+30uVzwHgqiK3+NFUyCGwUfKa7Z2Xt+adiKKi7HOVV2i+N7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5/2gzE+b8YIBygaCh0mgs2OgBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTYwYzE1ZDItOTZjNC0z YmQzLThjMmQtNWZmYjdmNTM0N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj5+AznhxShqbfdurOtG12xuuHOCg2pxsT7rbTjPIm3DJ/9dlwvrAPh wtuW8UVP6Q1EPjIfpEogYnLnh12BD+WPIPzylZqMx/UOn4/MG0AZ3BgaIwI90RMo ccLhc4045QmftWoJRdD/GeZrtLcP3ymrUPh6j06+VDZ3zKgNzGi4RB2rZb77Dm/v QsTIpYG6LTfyMAmKu5px2ZFDKFw2SuxyqDcnw86Uw/67pRUfniRYoDaMZ6mgLgS8 pwBXWHpJ9hskR1SU8dm9eXg2v1UjINFexIn8yGoYUQ1qxo8cuv+qIyPMd62z4kl3 tXbLjeontgUyG3RqD+shA7NbQU+ZCMU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:37 2026 by rpki-client