$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa File: 98cb527c-fba2-31d8-a87a-d8791809c167.roa (raw, json) Hash identifier: 0JGlJMkzIK+bVZYJJw61iZqPMCQ9lUGbThD4T5FNILU= Subject key identifier: 7F:B2:B8:A5:A2:B9:4B:DA:83:0C:C0:69:CA:A4:7C:C0:20:2B:E8:9E Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F4974FD217F4D9A8EE23F0000 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 209.236.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:fd:21:7f:4d:9a:8e:e2:3f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5875a262-266c-4265-81e8-c50d74662fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:35:5d:56:79:e2:da:42:93:bf:af:37:17: d0:17:cd:91:f5:fb:7f:f4:d6:cb:2c:97:da:01:cb: 30:f4:3f:36:76:ab:52:84:04:af:81:52:0b:2a:45: 16:5f:cf:8c:1b:2b:2f:a8:67:e1:b7:f7:f9:fd:b5: 19:a3:79:77:9d:2b:43:1b:2b:fb:5f:e0:80:c8:ad: 57:f0:d5:e0:b4:b8:45:df:fa:4e:68:6f:32:7e:79: 9e:a4:56:52:3c:28:5d:9e:d9:ff:aa:c7:05:2b:87: 4a:5f:85:3c:5d:66:fc:c7:13:85:e7:8c:ed:0d:18: 30:fc:87:50:6b:df:81:be:28:c9:f5:3b:20:b2:d4: fc:08:60:2d:14:c3:e8:7b:2b:f8:dd:22:16:49:ee: df:8c:a1:ef:ad:96:d8:c2:2e:4a:b8:ec:fe:fb:9d: 5d:c5:c3:a1:e1:f1:6d:f3:81:ee:ad:2a:b4:6c:45: ec:cd:3b:df:16:fc:09:ff:c2:92:2a:a5:67:27:83: 8a:9b:13:d4:91:4d:57:78:f8:e5:35:e0:36:66:7e: 72:2d:0d:9a:1f:52:2e:ed:e2:66:1a:08:6b:25:15: c5:43:a2:f2:60:ae:ad:65:3a:6d:65:de:12:d9:be: 01:6f:23:93:1f:7e:5a:82:a1:d9:c0:d7:35:15:23: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:B8:A5:A2:B9:4B:DA:83:0C:C0:69:CA:A4:7C:C0:20:2B:E8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/98cb527c-fba2-31d8-a87a-d8791809c167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d2:71:27:ce:6a:d5:79:d3:be:f2:7f:87:fc:ab:a9:8f:c1: 04:49:63:ae:10:67:68:6d:b0:01:ef:56:2a:36:ee:b1:73:55: f0:66:05:bd:3c:57:52:70:37:9d:1d:b1:5c:b6:91:da:57:7c: 81:f9:13:39:f6:37:f5:60:62:ed:78:ae:e4:c7:30:bc:1c:d1: 1b:b6:74:84:f3:65:e9:b5:46:4e:61:d6:7b:5d:02:07:ca:9e: bd:25:c5:6e:67:ff:9b:cf:7c:d8:59:62:c4:4b:23:9c:0d:78: 24:22:65:e7:6f:b6:2d:86:26:09:67:01:8c:17:cb:fc:a5:8b: 83:8a:ee:f3:e1:ae:20:82:39:be:6c:67:bf:ff:40:e1:b6:a8: 46:56:f8:cc:1d:8f:43:6d:6a:12:b0:6c:b2:a5:89:1d:1b:c5: 37:1c:92:42:fb:74:d1:03:c3:b1:d4:52:ea:fb:83:b0:41:7e: d9:20:21:c7:b4:ed:42:8a:53:b6:99:bf:56:9c:ed:8c:33:b9: b7:1d:b4:3b:3a:17:10:ba:79:8d:d5:75:39:a2:98:77:8c:3e: 1b:00:00:47:68:a2:2e:f8:97:96:51:8c:22:b7:ec:ee:5a:f0: bc:11:f4:75:12:f2:c3:05:45:5f:31:d1:ad:f2:ac:f6:e8:1e: 6e:05:35:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdP0hf02ajuI/AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTg3NWEyNjItMjY2Yy00MjY1LTgxZTgtYzUwZDc0NjYyZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBE1XVZ54tpCk7+vNxfQF82R9ft/9NbLLJfa Acsw9D82dqtShASvgVILKkUWX8+MGysvqGfht/f5/bUZo3l3nStDGyv7X+CAyK1X 8NXgtLhF3/pOaG8yfnmepFZSPChdntn/qscFK4dKX4U8XWb8xxOF54ztDRgw/IdQ a9+BvijJ9TsgstT8CGAtFMPoeyv43SIWSe7fjKHvrZbYwi5KuOz++51dxcOh4fFt 84HurSq0bEXszTvfFvwJ/8KSKqVnJ4OKmxPUkU1XePjlNeA2Zn5yLQ2aH1Iu7eJm GghrJRXFQ6LyYK6tZTptZd4S2b4BbyOTH35agqHZwNc1FSOGEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+yuKWiuUvagwzAacqkfMAgK+ieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOThjYjUyN2MtZmJhMi0z MWQ4LWE4N2EtZDg3OTE4MDljMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTScSfOatV5077yf4f8q6mPwQRJY64QZ2htsAHvVio27rFzVfBmBb08 V1JwN50dsVy2kdpXfIH5Ezn2N/VgYu14ruTHMLwc0Ru2dITzZem1Rk5h1ntdAgfK nr0lxW5n/5vPfNhZYsRLI5wNeCQiZedvti2GJglnAYwXy/yli4OK7vPhriCCOb5s Z7//QOG2qEZW+Mwdj0NtahKwbLKliR0bxTcckkL7dNEDw7HUUur7g7BBftkgIce0 7UKKU7aZv1ac7YwzubcdtDs6FxC6eY3VdTmimHeMPhsAAEdooi74l5ZRjCK37O5a 8LwR9HUS8sMFRV8x0a3yrPboHm4FNRw= -----END CERTIFICATE-----Generated at Sun Oct 11 11:02:23 2026 by rpki-client