$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa File: bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa (raw, json) Hash identifier: Kb+t5LQNznM5EzfV78c0rkv69IYhkbTnThMnKHIdxQA= Subject key identifier: 90:90:67:91:3E:A1:47:CA:95:85:3B:00:83:4A:C8:6E:FD:B5:99:3D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F498823F22247ABEC6AAF5A30 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 209.236.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:23:f2:22:47:ab:ec:6a:af:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e27ee745-dc0e-40df-8ddc-bdd58263c4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:9e:6e:81:01:e3:35:92:b6:6e:b6:b1:1f: c7:2e:a2:79:5e:02:68:1f:f6:f8:e4:b8:bb:09:21: 25:4b:d0:0e:29:6a:ef:90:62:f5:83:cd:96:39:d6: e3:b4:81:35:e6:a5:e3:08:b4:9c:5b:2d:fc:d0:25: f2:b8:c2:27:a7:ac:89:4c:1b:64:85:c9:9b:b3:df: 12:6e:29:21:73:62:bc:43:1d:cf:d9:ff:fc:99:cc: e4:05:9d:fb:86:24:0a:0d:b5:38:8a:6e:b9:81:1a: eb:1e:6a:08:a3:4c:c0:9b:dd:d6:ba:8f:2b:b5:6d: 70:da:98:d7:c7:72:3a:90:95:79:a3:14:ff:d5:a0: d6:bd:8e:6b:99:d6:ac:4a:d2:f4:12:db:2c:f9:40: 5e:9b:e1:5d:ff:a0:83:49:30:ed:83:71:c2:66:f5: 3a:f9:2a:32:f2:03:1f:b1:23:73:75:3f:3f:00:c7: 68:23:52:67:89:60:90:63:c8:11:d3:a1:c6:07:ac: 0f:10:57:6e:48:05:0b:e7:c1:a7:98:a2:57:8d:7f: 59:d0:47:99:90:ac:d5:cb:a9:6d:4a:14:ae:1c:20: ea:4c:d4:ad:dc:6e:a4:19:39:a7:69:f9:36:f3:22: 13:83:76:51:d9:65:bf:ae:e6:27:7b:86:d2:85:25: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:90:67:91:3E:A1:47:CA:95:85:3B:00:83:4A:C8:6E:FD:B5:99:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:fa:43:aa:65:3b:9e:43:98:33:6b:ef:dd:da:ed:89:bd:4e: 0c:7a:d5:e6:21:52:a1:c6:1a:fb:83:dc:5a:34:f9:4a:c6:21: 1a:53:94:c2:8d:b0:2c:1c:84:2c:7b:01:be:f9:ab:c3:22:3e: bc:98:30:69:28:be:4d:79:e7:25:5b:ae:51:fd:78:c2:fc:1c: a3:da:36:37:31:44:1b:bd:6a:30:8f:57:b5:b6:7b:1b:64:42: 1e:44:b6:1c:78:30:dc:dd:c7:22:06:27:6e:8c:74:1c:41:d9: c3:33:cc:d9:df:7a:d0:95:71:8d:24:11:71:1c:b8:0e:39:d0: 4e:fa:b2:1a:04:71:14:23:94:36:bd:56:60:27:f5:70:29:77: 07:89:86:33:be:8f:b8:b6:fb:26:95:91:62:99:98:d7:ce:18: 69:2b:18:d2:f0:78:a9:56:08:ed:cb:50:ec:1c:f7:db:ff:47: a2:2b:a8:3c:3a:de:ed:68:ed:89:61:23:57:94:69:52:df:d9: c0:70:f4:f9:46:d4:9e:3b:44:eb:4f:11:3f:1c:87:ee:d6:6a: 4a:07:c7:46:a9:19:64:6b:1c:f5:27:14:87:67:ad:a8:e8:7b: 78:94:6a:09:37:6c:8c:2d:4a:75:e7:82:d1:b1:15:6c:6c:d0: 92:49:28:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCPyIker7GqvWjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTI3ZWU3NDUtZGMwZS00MGRmLThkZGMtYmRkNTgyNjNjNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gOeboEB4zWStm62sR/HLqJ5XgJoH/b45Li7 CSElS9AOKWrvkGL1g82WOdbjtIE15qXjCLScWy380CXyuMInp6yJTBtkhcmbs98S bikhc2K8Qx3P2f/8mczkBZ37hiQKDbU4im65gRrrHmoIo0zAm93Wuo8rtW1w2pjX x3I6kJV5oxT/1aDWvY5rmdasStL0Etss+UBem+Fd/6CDSTDtg3HCZvU6+Soy8gMf sSNzdT8/AMdoI1JniWCQY8gR06HGB6wPEFduSAUL58GnmKJXjX9Z0EeZkKzVy6lt ShSuHCDqTNSt3G6kGTmnafk28yITg3ZR2WW/ruYne4bShSXS/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCQZ5E+oUfKlYU7AINKyG79tZk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmNlZjEzYjEtZDQ3NS0z NGZlLTkzZjQtYmRlMmRiMWM3NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv6Q6plO55DmDNr793a7Ym9Tgx61eYhUqHGGvuD3Fo0+UrGIRpTlMKN sCwchCx7Ab75q8MiPryYMGkovk155yVbrlH9eML8HKPaNjcxRBu9ajCPV7W2extk Qh5Ethx4MNzdxyIGJ26MdBxB2cMzzNnfetCVcY0kEXEcuA450E76shoEcRQjlDa9 VmAn9XApdweJhjO+j7i2+yaVkWKZmNfOGGkrGNLweKlWCO3LUOwc99v/R6IrqDw6 3u1o7YlhI1eUaVLf2cBw9PlG1J47ROtPET8ch+7WakoHx0apGWRrHPUnFIdnrajo e3iUagk3bIwtSnXngtGxFWxs0JJJKI4= -----END CERTIFICATE-----Generated at Sun Sep 27 04:41:51 2026 by rpki-client