$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa File: ba6a2a50-610d-30d5-92b0-69d079d11724.roa (raw, json) Hash identifier: 37y+2A3RglNm4rpZnKi7luMu4V75D+QLBlnEDLb0G4s= Subject key identifier: F4:A2:35:5C:E8:5D:80:21:72:C4:6F:AC:5B:5B:43:44:68:53:76:8C Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D1F4A34220E257AC5E08B8AA0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 6079 IP address blocks: 209.236.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:34:22:0e:25:7a:c5:e0:8b:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c917fd12-7d59-4753-a071-98c7334b38aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:7e:3a:b1:f9:cb:a0:9e:2a:e8:5f:79:ea: 7b:73:b7:5f:c6:1a:9b:68:01:5d:ca:66:ca:7d:0b: 54:74:14:6a:8d:53:45:55:47:e1:18:6e:dc:bc:47: b8:61:04:8c:39:25:37:86:d3:ae:c2:0d:36:b4:71: 84:77:55:c6:52:3c:67:52:a9:f8:5c:83:d4:81:5b: 00:fd:6e:e6:a9:a0:d9:55:b9:21:ba:13:7a:a7:bd: 29:0c:4a:1c:fd:19:06:82:90:89:a2:20:7f:f8:10: f6:38:ad:b1:21:3f:0a:ff:64:f8:d6:1e:03:59:8c: e9:9a:b3:6f:73:a1:43:83:50:8e:e8:68:78:f3:15: 16:8e:ba:d4:35:82:5d:b9:18:ed:ba:a1:f9:7b:7b: 17:cb:ad:e0:93:64:8a:77:65:06:0f:80:dc:dc:8a: a9:13:00:74:6d:96:b5:b4:65:22:8e:e0:e0:16:06: 41:9f:6b:cb:73:9a:33:07:2d:8a:f4:72:80:9c:e8: 1b:5e:99:d1:22:12:79:0d:5a:5b:f8:8a:c2:bd:fa: 87:41:e5:03:b7:04:ad:bc:e5:31:98:ec:8d:9f:92: 77:1c:f6:f6:4d:4f:1e:8f:07:84:83:42:ce:1f:81: a7:20:c3:e6:73:2a:e0:f3:1b:10:1b:bd:cf:2b:28: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:35:5C:E8:5D:80:21:72:C4:6F:AC:5B:5B:43:44:68:53:76:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:eb:91:67:4f:27:96:e1:de:5f:6a:48:4b:6c:42:0c:37:74: 1d:81:30:8c:a6:18:db:4c:62:ec:fc:d0:ea:44:62:e1:f9:42: 78:f4:79:52:7b:36:22:1c:c1:82:25:22:29:d6:3c:4f:3a:a0: 9d:00:21:14:13:89:34:86:e2:46:3b:5b:9f:69:df:ba:2e:28: 4f:3e:f2:10:6a:30:be:0d:03:03:0d:e2:13:04:e0:4a:3a:5f: 91:06:7b:4e:ff:f1:ad:1b:ac:d3:ce:df:ef:44:b2:8a:27:94: da:23:9b:46:dd:23:8e:55:f3:46:0c:52:b4:27:33:c4:b9:7f: 81:b0:c3:72:90:8c:4b:a2:df:32:ac:dc:b4:25:b4:70:c1:c0: c3:32:91:f5:0a:12:15:e0:6a:d1:ff:c4:f8:29:bb:dd:e0:89: ac:84:9e:99:5e:bd:4d:10:b2:8f:4f:2e:ef:2f:c6:dc:1f:ab: 3c:39:eb:57:48:8d:e1:ed:84:d7:25:e7:94:89:34:19:01:41: 95:13:0b:38:af:1e:13:6c:39:04:19:e4:44:53:61:e8:c4:9f: 1d:09:88:c9:9c:76:e4:19:dd:9c:f9:e3:27:36:fe:62:05:ab: d9:f9:96:9e:9f:23:7a:f9:8d:18:90:4b:b8:7e:7f:79:9f:fb: 4f:66:1f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjQiDiV6xeCLiqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzkxN2ZkMTItN2Q1OS00NzUzLWEwNzEtOThjNzMzNGIzOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9x+OrH5y6CeKuhfeep7c7dfxhqbaAFdymbK fQtUdBRqjVNFVUfhGG7cvEe4YQSMOSU3htOuwg02tHGEd1XGUjxnUqn4XIPUgVsA /W7mqaDZVbkhuhN6p70pDEoc/RkGgpCJoiB/+BD2OK2xIT8K/2T41h4DWYzpmrNv c6FDg1CO6Gh48xUWjrrUNYJduRjtuqH5e3sXy63gk2SKd2UGD4Dc3IqpEwB0bZa1 tGUijuDgFgZBn2vLc5ozBy2K9HKAnOgbXpnRIhJ5DVpb+IrCvfqHQeUDtwStvOUx mOyNn5J3HPb2TU8ejweEg0LOH4GnIMPmcyrg8xsQG73PKyj/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSiNVzoXYAhcsRvrFtbQ0RoU3aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmE2YTJhNTAtNjEwZC0z MGQ1LTkyYjAtNjlkMDc5ZDExNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXrkWdPJ5bh3l9qSEtsQgw3dB2BMIymGNtMYuz80OpEYuH5Qnj0eVJ7 NiIcwYIlIinWPE86oJ0AIRQTiTSG4kY7W59p37ouKE8+8hBqML4NAwMN4hME4Eo6 X5EGe07/8a0brNPO3+9EsoonlNojm0bdI45V80YMUrQnM8S5f4Gww3KQjEui3zKs 3LQltHDBwMMykfUKEhXgatH/xPgpu93giayEnplevU0Qso9PLu8vxtwfqzw561dI jeHthNcl55SJNBkBQZUTCzivHhNsOQQZ5ERTYejEnx0JiMmcduQZ3Zz54yc2/mIF q9n5lp6fI3r5jRiQS7h+f3mf+09mH9U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:00 2026 by rpki-client