$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa File: bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa (raw, json) Hash identifier: bTRUEY3whBTrI/5VhZkBZDMYh/rQNMaxeWQPJSlCAiI= Subject key identifier: 96:11:7B:0C:98:FF:71:B2:72:DD:8A:6B:E4:8E:41:52:85:39:9D:74 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D1F4A35E0C7F50603FF228180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 6079 IP address blocks: 209.236.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:35:e0:c7:f5:06:03:ff:22:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=ffdad7d0-6e76-451c-904c-d1cca6b360e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b1:c0:91:5a:b0:b3:15:07:68:8f:cc:ed:a8: 27:2f:09:e3:f0:af:cd:d5:be:62:b2:3f:90:8d:0d: 42:b0:99:a0:79:e0:df:d2:ea:89:44:a1:2b:59:cc: b1:94:ea:f2:b1:96:74:f9:64:d8:c8:fc:1e:c9:1e: 91:14:7c:29:50:d4:ec:4a:8c:2e:53:16:cf:cf:bb: c3:c6:61:f3:bc:26:84:1a:87:df:8c:0f:87:45:7c: 44:38:73:0f:cf:0f:51:1c:32:02:f1:84:a2:08:41: 00:b1:b4:70:23:a3:4f:4d:b0:99:8a:b9:0d:31:ce: 6f:2e:f1:6a:af:29:13:c8:5a:57:53:37:d9:ff:73: 1a:88:c5:fd:bc:8c:24:b3:46:b1:ba:0c:23:d4:94: 80:f0:be:4d:69:4d:2b:9b:dd:62:5e:cf:f8:79:6d: c8:ed:0f:46:fb:65:87:0c:ae:5c:68:01:35:a9:3f: 4c:25:86:a6:a0:bf:92:ee:0d:67:62:2e:04:39:4a: b5:c3:55:f0:2b:da:ed:94:ee:40:40:b7:db:43:cb: ab:86:6d:23:9a:c1:53:29:95:94:c5:1f:2b:13:e5: d9:04:92:4c:5b:ce:fc:82:e8:bb:e5:7f:85:5b:46: bb:45:b4:80:29:37:8a:94:8e:62:4c:fc:46:d2:57: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:7B:0C:98:FF:71:B2:72:DD:8A:6B:E4:8E:41:52:85:39:9D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:57:3e:0e:da:3e:b0:09:94:37:6e:75:31:e7:85:ef:15:de: ae:da:b5:cc:89:9a:ab:39:d6:82:6b:a9:01:7f:82:23:66:38: 87:ac:ef:38:56:5a:78:69:83:c0:69:df:3b:b4:d1:50:a7:e4: cb:94:5c:a9:36:8f:c2:fc:21:c3:0a:6b:8a:4b:42:6e:5e:c4: 1b:0e:0a:f1:90:56:e0:e5:e3:d9:ac:19:79:55:c8:32:b7:89: bb:0f:93:ff:9c:c6:bb:05:18:9d:cd:e4:9c:43:9e:05:e3:11: c3:73:15:8b:5e:1b:f3:5a:eb:6a:89:07:9b:a4:8d:f2:0d:57: b6:e2:76:01:5f:79:64:54:92:55:98:8c:6d:20:68:e5:16:2f: cd:be:26:d8:39:db:b7:9a:37:50:da:12:b2:92:36:5e:05:2b: 11:58:51:3b:34:dc:3e:31:a9:fb:16:79:a8:64:8d:d9:ec:11: 71:40:df:92:4f:06:00:79:95:5a:d8:f1:d7:21:b6:f7:fe:21: 3e:fe:ae:8a:7e:bc:3e:7e:3d:1a:f7:d5:20:eb:d7:70:45:18: 0e:e4:e9:ef:15:45:a3:c5:fa:77:bc:43:ce:2f:0b:65:31:75: 83:6c:95:96:f1:2a:aa:af:af:4c:ed:c8:67:2e:6f:07:5e:3c: c7:a8:31:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjXgx/UGA/8igYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZmZkYWQ3ZDAtNmU3Ni00NTFjLTkwNGMtZDFjY2E2YjM2MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLHAkVqwsxUHaI/M7agnLwnj8K/N1b5isj+Q jQ1CsJmgeeDf0uqJRKErWcyxlOrysZZ0+WTYyPweyR6RFHwpUNTsSowuUxbPz7vD xmHzvCaEGoffjA+HRXxEOHMPzw9RHDIC8YSiCEEAsbRwI6NPTbCZirkNMc5vLvFq rykTyFpXUzfZ/3MaiMX9vIwks0axugwj1JSA8L5NaU0rm91iXs/4eW3I7Q9G+2WH DK5caAE1qT9MJYamoL+S7g1nYi4EOUq1w1XwK9rtlO5AQLfbQ8urhm0jmsFTKZWU xR8rE+XZBJJMW878gui75X+FW0a7RbSAKTeKlI5iTPxG0ldvPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYRewyY/3Gyct2Ka+SOQVKFOZ10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmNlZjEzYjEtZDQ3NS0z NGZlLTkzZjQtYmRlMmRiMWM3NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFXPg7aPrAJlDdudTHnhe8V3q7atcyJmqs51oJrqQF/giNmOIes7zhW Wnhpg8Bp3zu00VCn5MuUXKk2j8L8IcMKa4pLQm5exBsOCvGQVuDl49msGXlVyDK3 ibsPk/+cxrsFGJ3N5JxDngXjEcNzFYteG/Na62qJB5ukjfINV7bidgFfeWRUklWY jG0gaOUWL82+Jtg527eaN1DaErKSNl4FKxFYUTs03D4xqfsWeahkjdnsEXFA35JP BgB5lVrY8dchtvf+IT7+rop+vD5+PRr31SDr13BFGA7k6e8VRaPF+ne8Q84vC2Ux dYNslZbxKqqvr0ztyGcubwdePMeoMT4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:30 2026 by rpki-client