$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa File: 960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa (raw, json) Hash identifier: Sat9+HMzRFTBLr8koBkiaW3FNkirtdb/NVrwJaoaER0= Subject key identifier: D0:85:21:4D:E7:30:BC:94:E7:B0:B0:C6:22:70:EB:C1:00:B0:2A:E9 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD20C04EF82985363EE2460 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 11404 IP address blocks: 209.236.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:0c:04:ef:82:98:53:63:ee:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=a3d7928c-aa73-43b0-a121-53a324c7eebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:33:5e:43:7e:c6:68:2e:3f:68:6f:cd:3c:3e: b9:7d:93:d2:e6:cf:0a:5a:18:de:81:b3:a1:cf:4a: 26:0d:fd:8e:75:5b:a3:23:1d:ac:f3:27:ea:5c:3f: 07:8f:ef:7f:17:37:3a:0f:57:2a:bd:06:a2:ba:75: cf:ea:90:c2:55:6a:6e:7d:17:6f:bf:ae:79:39:77: da:77:5d:b5:44:fc:cf:a1:da:e8:dc:94:1f:f6:df: d7:08:af:44:92:9f:ac:f6:33:bc:0b:55:37:9f:38: 95:93:6e:61:e8:5b:0c:86:ec:76:0e:30:73:7f:aa: 83:63:da:d6:ee:4f:df:a8:60:0d:8e:b4:4e:49:ba: fe:c2:60:d8:20:72:b6:ba:df:89:6f:ce:92:a6:27: 72:4e:ef:4d:6d:6f:45:c5:b7:73:80:da:a7:4c:4c: 96:7d:dc:ee:39:c7:6b:c6:3f:80:46:53:8e:08:40: 18:60:38:3c:ac:2e:db:44:25:b7:d2:13:34:81:b8: 2c:c2:da:1d:18:b1:1e:6a:3f:0e:b0:9d:66:dd:33: f8:89:a8:2d:da:48:d2:43:ae:d6:81:9a:85:d2:ad: aa:90:3c:44:72:86:d8:03:e7:78:98:0a:44:07:5f: d4:53:1f:8c:e3:db:66:5f:ff:f9:41:9f:c7:f4:36: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:85:21:4D:E7:30:BC:94:E7:B0:B0:C6:22:70:EB:C1:00:B0:2A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/960c15d2-96c4-3bd3-8c2d-5ffb7f5347fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:76:32:59:73:43:2d:e9:1b:ee:97:73:06:4f:04:91:88:6e: 1b:27:33:e3:15:b9:87:f3:8c:c6:96:26:2f:3c:54:65:b0:f5: e0:18:53:8e:1d:21:78:23:b6:8c:76:6d:0f:86:7e:c0:80:ea: 78:a9:80:43:c3:22:0f:ee:8f:93:00:c0:a1:d6:ed:52:a4:3f: b5:41:30:94:b8:0a:4b:f8:e0:a0:11:ab:e6:57:f3:b1:20:c5: 56:bb:e2:5f:25:eb:c5:df:c5:e9:d1:1c:cb:c0:95:e8:3b:34: 2f:59:01:aa:86:ec:6a:7d:47:5f:fa:f3:50:6d:ee:21:73:25: 88:48:66:11:5d:a4:6a:d6:53:f1:f3:2f:c0:a5:18:f2:05:2d: 0c:32:61:b3:01:8c:ca:cc:e0:32:65:52:3c:d2:cf:b6:8e:bc: b0:a9:c8:ad:02:84:a9:95:7f:b0:b6:77:90:13:ed:6f:33:f9: 41:96:41:dc:58:17:f9:58:fe:c5:8d:ae:c3:75:56:01:5f:bf: ea:8a:43:72:1b:d1:4a:f1:8f:5b:96:99:90:46:24:29:3f:5d: 5e:17:c4:ce:08:5c:22:da:8d:fc:3e:8f:53:ac:fd:a6:b5:fa: eb:9f:9a:9a:f5:e9:3f:1f:67:bb:36:9e:fd:10:47:f8:a7:ed: 54:e0:74:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gwE74KYU2PuJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YTNkNzkyOGMtYWE3My00M2IwLWExMjEtNTNhMzI0YzdlZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTNeQ37GaC4/aG/NPD65fZPS5s8KWhjegbOh z0omDf2OdVujIx2s8yfqXD8Hj+9/Fzc6D1cqvQaiunXP6pDCVWpufRdvv655OXfa d121RPzPodro3JQf9t/XCK9Ekp+s9jO8C1U3nziVk25h6FsMhux2DjBzf6qDY9rW 7k/fqGANjrROSbr+wmDYIHK2ut+Jb86SpidyTu9NbW9FxbdzgNqnTEyWfdzuOcdr xj+ARlOOCEAYYDg8rC7bRCW30hM0gbgswtodGLEeaj8OsJ1m3TP4iagt2kjSQ67W gZqF0q2qkDxEcobYA+d4mApEB1/UUx+M49tmX//5QZ/H9DY37QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCFIU3nMLyU57CwxiJw68EAsCrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTYwYzE1ZDItOTZjNC0z YmQzLThjMmQtNWZmYjdmNTM0N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh2MllzQy3pG+6XcwZPBJGIbhsnM+MVuYfzjMaWJi88VGWw9eAYU44d IXgjtox2bQ+GfsCA6nipgEPDIg/uj5MAwKHW7VKkP7VBMJS4Ckv44KARq+ZX87Eg xVa74l8l68XfxenRHMvAleg7NC9ZAaqG7Gp9R1/681Bt7iFzJYhIZhFdpGrWU/Hz L8ClGPIFLQwyYbMBjMrM4DJlUjzSz7aOvLCpyK0ChKmVf7C2d5AT7W8z+UGWQdxY F/lY/sWNrsN1VgFfv+qKQ3Ib0Urxj1uWmZBGJCk/XV4XxM4IXCLajfw+j1Os/aa1 +uufmpr16T8fZ7s2nv0QR/in7VTgdMM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:26 2025 by rpki-client