$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a4b01b35-57f9-3d91-ba76-7a0e27d24f89.roa File: a4b01b35-57f9-3d91-ba76-7a0e27d24f89.roa (raw, json) Hash identifier: mtpnJ8LJzb9rJwhVT0AzOYfKl8A8b9VVHGO4VAbQWrU= Subject key identifier: C2:65:6E:70:C2:F8:C3:A6:B9:8E:37:94:3E:55:46:47:FA:41:5F:88 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F17323DAD511884A975996680 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a4b01b35-57f9-3d91-ba76-7a0e27d24f89.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 398465 IP address blocks: 208.52.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3d:ad:51:18:84:a9:75:99:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=32ee99ae-9269-405b-90ce-bace88b1aa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:ad:6e:29:42:67:65:92:9b:0e:be:fe:22: 8c:7d:be:90:f4:f9:84:51:13:18:d9:0a:bc:5b:81: f4:ad:e9:f1:7b:3d:1b:e4:6a:44:b3:61:f5:0f:a4: c3:0d:d1:4e:fe:93:f3:56:b6:7e:33:42:15:ce:b4: 72:36:39:87:56:58:48:3d:7a:a8:84:f5:27:8e:00: 97:36:c9:83:72:0f:89:e0:0f:47:96:8f:6b:bb:15: af:4d:89:64:58:02:4e:50:ab:3f:f5:fd:ab:b2:d2: bb:48:7c:dc:31:04:5f:7d:39:19:27:65:f1:01:d9: f3:af:cb:82:e5:56:d6:77:6f:44:b3:4a:fa:8c:35: dd:e7:a0:1f:06:9b:7a:2b:0b:c9:e7:a7:04:a4:8b: 39:0a:df:40:8a:db:d1:c9:07:e2:04:0e:0c:88:ca: ff:d9:23:7e:ad:57:2a:dc:db:53:d0:23:6c:15:ab: 69:1a:1c:61:d6:23:8b:55:ef:bb:a2:d7:f6:3c:73: cd:ac:6d:6d:e2:fd:d2:e0:ac:0f:1f:44:c0:2f:39: 0c:a1:0a:4a:d2:b0:fb:9e:38:b1:1f:da:19:09:94: 39:6b:4c:20:70:ce:95:69:16:35:0b:68:21:1d:82: e6:af:63:fa:61:19:89:d1:f0:d8:17:52:f4:8d:e8: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:65:6E:70:C2:F8:C3:A6:B9:8E:37:94:3E:55:46:47:FA:41:5F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a4b01b35-57f9-3d91-ba76-7a0e27d24f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 208.52.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f8:bf:b9:29:20:5c:04:9a:62:4f:2c:a9:0f:4d:e2:00:74: 37:18:96:9c:dc:3e:a4:8d:a8:7a:7e:fc:95:2f:63:de:3d:ff: de:f7:9a:24:8c:22:2c:20:bc:3e:76:b6:31:f1:21:0a:e2:e6: 95:f4:32:bb:61:b3:17:42:f2:44:bd:7e:7a:72:78:be:6d:7a: 43:53:7b:af:e4:e4:56:7b:ac:b3:5c:7c:5b:d0:ab:ea:49:aa: dd:f1:91:30:6f:f9:84:e6:cc:80:44:7c:e6:e0:65:2b:30:b6: de:1b:f5:33:be:73:10:88:b6:08:2c:bc:82:95:a8:91:8b:c7: e7:87:0b:d9:d1:1a:b7:96:a6:dd:aa:d9:a3:f3:50:1c:6c:70: 7b:30:4c:0e:96:2f:19:a8:f3:b3:45:cc:c8:bc:1e:00:ec:c5: 25:d5:5d:d9:57:d8:7e:a2:ee:89:17:e2:d0:bf:3c:69:f8:fd: 87:45:01:cc:d5:6f:c6:b9:33:c9:56:71:38:0e:60:24:c1:94: 3f:75:ab:73:78:07:c7:4f:43:ee:57:cb:43:ca:ef:bd:1e:79: a0:f0:c6:6d:ca:69:f8:7e:50:04:e9:e5:64:07:78:2b:cd:1a: b0:15:ba:55:7f:50:48:63:80:ec:0d:10:f8:2b:12:86:99:68: 39:92:c7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj2tURiEqXWZZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MzJlZTk5YWUtOTI2OS00MDViLTkwY2UtYmFjZTg4YjFhYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1etbilCZ2WSmw6+/iKMfb6Q9PmEURMY2Qq8 W4H0renxez0b5GpEs2H1D6TDDdFO/pPzVrZ+M0IVzrRyNjmHVlhIPXqohPUnjgCX NsmDcg+J4A9Hlo9ruxWvTYlkWAJOUKs/9f2rstK7SHzcMQRffTkZJ2XxAdnzr8uC 5VbWd29Es0r6jDXd56AfBpt6KwvJ56cEpIs5Ct9AitvRyQfiBA4MiMr/2SN+rVcq 3NtT0CNsFatpGhxh1iOLVe+7otf2PHPNrG1t4v3S4KwPH0TALzkMoQpK0rD7njix H9oZCZQ5a0wgcM6VaRY1C2ghHYLmr2P6YRmJ0fDYF1L0jej4EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJlbnDC+MOmuY43lD5VRkf6QV+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYTRiMDFiMzUtNTdmOS0z ZDkxLWJhNzYtN2EwZTI3ZDI0Zjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH74v7kpIFwEmmJPLKkPTeIAdDcYlpzcPqSNqHp+/JUvY949/973miSM IiwgvD52tjHxIQri5pX0MrthsxdC8kS9fnpyeL5tekNTe6/k5FZ7rLNcfFvQq+pJ qt3xkTBv+YTmzIBEfObgZSswtt4b9TO+cxCItggsvIKVqJGLx+eHC9nRGreWpt2q 2aPzUBxscHswTA6WLxmo87NFzMi8HgDsxSXVXdlX2H6i7okX4tC/PGn4/YdFAczV b8a5M8lWcTgOYCTBlD91q3N4B8dPQ+5Xy0PK770eeaDwxm3Kafh+UATp5WQHeCvN GrAVulV/UEhjgOwNEPgrEoaZaDmSx4I= -----END CERTIFICATE-----Generated at Tue Sep 29 03:35:57 2026 by rpki-client