$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa File: ba6a2a50-610d-30d5-92b0-69d079d11724.roa (raw, json) Hash identifier: dRYwHnZVJWO2gRKFP6vAXFxyohrhI1zaQeU+rjOg8wQ= Subject key identifier: B3:96:31:25:54:DF:56:AB:17:D8:D7:64:E8:C2:B9:72:FA:15:56:D0 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F4986EEEA17D089E4BF8A40C0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 209.236.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ee:ea:17:d0:89:e4:bf:8a:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec23e257-d99d-4a1f-ba17-1c7d72532f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:43:dc:f7:59:0f:04:57:e2:b2:9f:fb:06: be:12:92:7e:1f:cd:87:f2:4c:8c:fd:52:b4:61:3b: 7e:0f:ab:55:02:c3:0a:8d:aa:71:85:ef:c8:16:21: 02:15:fc:1e:65:ef:1a:94:27:e9:3b:ea:f4:b3:55: 00:ac:a9:b0:34:75:90:9f:f8:73:e8:d4:00:87:c7: d8:c0:9a:08:53:bd:da:fa:1f:3b:93:df:60:88:42: 9c:19:1e:62:de:67:3e:27:bb:e5:03:47:c6:aa:cb: 74:1d:de:9d:9f:29:2d:a9:1a:85:84:c4:3f:74:dc: 05:22:c4:c5:b2:99:76:4a:39:ce:5c:af:93:ea:aa: 59:7a:7d:27:15:06:72:cf:7f:b1:e3:1b:06:6b:7e: f7:85:ba:10:df:8d:b8:b8:3b:35:de:23:13:81:ec: cb:98:13:83:d1:7b:95:2a:1d:6f:5a:3e:3f:0d:5b: d1:e0:94:bd:d8:5d:d7:8f:7c:ca:db:0b:6e:e2:70: 34:9c:6c:8c:15:7b:ea:46:bc:00:7e:77:ff:68:0f: 12:ae:56:ee:07:bc:aa:00:6f:a0:4f:15:1d:83:69: ba:f3:6a:99:78:f6:c9:21:4e:15:34:ac:b6:0d:60: bc:21:a5:01:70:84:9a:8a:7e:fc:48:a2:05:3a:24: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:31:25:54:DF:56:AB:17:D8:D7:64:E8:C2:B9:72:FA:15:56:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:56:31:8f:bf:6c:30:22:ca:3c:67:d6:66:88:d9:cf:62:20: a6:6d:f7:d2:cd:ea:7a:86:46:ef:49:dc:51:7a:8e:c2:d7:50: df:f8:67:00:cb:21:96:90:0b:d7:d5:f8:71:a4:05:c7:88:a3: 50:11:27:92:2b:99:63:1a:13:ae:6a:7a:25:fa:bd:95:f3:66: ea:30:37:c1:94:93:ef:78:76:08:3d:8c:9c:1e:87:5c:5c:a8: a0:c1:7b:ed:11:a1:63:89:17:7d:de:d4:67:ec:4f:86:a5:2d: a5:41:93:fd:06:35:bc:0e:9d:61:ae:93:9d:09:4d:82:87:1f: 6a:64:1a:13:8e:e7:17:3b:7e:17:d8:32:aa:25:6a:90:53:45: 60:ca:17:6b:e9:a8:f6:de:c7:0a:cf:6c:c2:14:6d:2d:d8:67: c2:5b:ff:c4:ac:ea:2d:2d:36:fe:aa:a6:e0:ed:ff:7d:55:cc: e1:a2:d4:a7:04:ad:99:68:86:0c:04:44:36:4e:63:ef:9f:86: 01:63:ba:be:16:48:c0:c1:bc:cc:17:98:85:b9:ee:75:1b:0a: 5f:9f:c8:22:7a:55:2b:32:f5:85:2d:56:6f:fe:67:0f:ff:17: 87:2d:a2:88:d7:e0:c8:da:b2:2e:9c:e8:47:61:80:58:f2:ee: 20:a8:ab:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhu7qF9CJ5L+KQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWMyM2UyNTctZDk5ZC00YTFmLWJhMTctMWM3ZDcyNTMyZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf5D3PdZDwRX4rKf+wa+EpJ+H82H8kyM/VK0 YTt+D6tVAsMKjapxhe/IFiECFfweZe8alCfpO+r0s1UArKmwNHWQn/hz6NQAh8fY wJoIU73a+h87k99giEKcGR5i3mc+J7vlA0fGqst0Hd6dnyktqRqFhMQ/dNwFIsTF spl2SjnOXK+T6qpZen0nFQZyz3+x4xsGa373hboQ3424uDs13iMTgezLmBOD0XuV Kh1vWj4/DVvR4JS92F3Xj3zK2wtu4nA0nGyMFXvqRrwAfnf/aA8SrlbuB7yqAG+g TxUdg2m682qZePbJIU4VNKy2DWC8IaUBcISain78SKIFOiRWHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOWMSVU31arF9jXZOjCuXL6FVbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmE2YTJhNTAtNjEwZC0z MGQ1LTkyYjAtNjlkMDc5ZDExNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVWMY+/bDAiyjxn1maI2c9iIKZt99LN6nqGRu9J3FF6jsLXUN/4ZwDL IZaQC9fV+HGkBceIo1ARJ5IrmWMaE65qeiX6vZXzZuowN8GUk+94dgg9jJweh1xc qKDBe+0RoWOJF33e1GfsT4alLaVBk/0GNbwOnWGuk50JTYKHH2pkGhOO5xc7fhfY MqolapBTRWDKF2vpqPbexwrPbMIUbS3YZ8Jb/8Ss6i0tNv6qpuDt/31VzOGi1KcE rZlohgwERDZOY++fhgFjur4WSMDBvMwXmIW57nUbCl+fyCJ6VSsy9YUtVm/+Zw// F4ctoojX4Mjasi6c6EdhgFjy7iCoq6A= -----END CERTIFICATE-----Generated at Sun Sep 27 05:57:02 2026 by rpki-client