$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa File: bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa (raw, json) Hash identifier: bOSX1+Pa9re3JPgfhaXgktszg9jyAmnlNcfCYo9Qxfs= Subject key identifier: FE:81:C4:AA:4C:2C:CA:4B:92:74:A5:2B:FF:8F:A5:02:C2:C5:17:DB Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD208867E653948227EC800 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 6079 IP address blocks: 209.236.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:08:86:7e:65:39:48:22:7e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=76c3b53c-23c4-44a4-b017-fe84bbb060aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:74:bb:b6:16:87:39:30:8a:aa:c1:21:9c: d9:2d:ac:39:34:89:40:2f:c0:5b:f6:41:72:78:45: 11:6c:ec:4b:7b:6e:25:f5:36:39:7a:2a:20:34:cd: 33:69:24:a6:27:40:c1:41:11:b5:35:ee:2a:d7:67: cc:46:0c:0f:e8:eb:ea:ad:7d:47:de:b5:3e:23:f7: a7:d9:42:7b:f0:82:a4:d0:ff:27:36:ac:0c:2c:be: f4:b3:2a:84:a7:87:b5:35:44:1d:00:34:74:15:5b: 1a:5e:46:0a:12:89:f1:6e:f9:90:dc:f8:46:40:d6: 59:85:98:8b:b0:58:85:a1:2e:70:39:95:56:3d:ef: 95:69:51:62:84:75:83:16:13:e9:3e:06:50:4d:23: 8f:23:a9:6f:0d:ff:76:dd:42:3b:9c:1f:da:ae:03: af:59:cf:cb:e0:e1:b5:04:c3:2e:26:88:f2:2a:60: 20:6c:d9:b6:93:6a:35:2b:5a:75:6d:a3:70:08:c2: 54:b6:fb:72:1e:0e:44:91:0f:4f:51:69:fb:3a:bb: 54:66:17:cd:e1:93:b7:9d:24:5e:6f:1c:d3:93:00: c7:d9:c2:45:e7:4f:ae:d1:d9:93:a0:db:7a:40:74: fa:40:d7:ad:d1:42:64:e6:25:4b:68:db:7c:16:fb: 59:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:81:C4:AA:4C:2C:CA:4B:92:74:A5:2B:FF:8F:A5:02:C2:C5:17:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c1:e1:b3:6b:68:2e:d8:d1:cd:be:69:8e:28:bb:69:fb:64: a3:b9:b4:80:bd:d6:a7:b5:98:ab:08:4c:9f:63:61:98:bf:f4: 51:7d:5b:06:08:7d:9e:13:ce:ff:7c:02:f4:90:69:15:35:48: f3:9f:ad:80:1d:94:88:46:e1:fa:54:b2:59:1e:e9:c4:c7:6b: 2c:ea:70:6b:2a:4c:b5:01:ed:0b:7a:22:98:b6:52:c9:31:f9: 55:b5:8a:70:df:92:66:a9:a1:1b:7b:59:6d:62:9c:9f:2e:19: 13:cd:54:91:31:01:8d:71:89:50:f3:a5:66:b9:27:3d:f9:b8: 74:8a:b7:6f:8d:c4:a3:fa:9a:df:8c:1f:3d:20:32:1e:88:46: f3:3a:02:cf:2c:07:7f:50:9e:f6:9f:5b:4f:71:c0:f2:b7:77: d9:b0:54:56:42:2b:55:4e:9a:4e:85:53:bf:72:aa:6d:9d:7c: ec:cd:97:68:33:db:d0:e8:75:0e:1f:52:5e:11:16:2a:3f:9b: ad:da:52:6a:d7:db:c8:a2:77:ae:98:01:8b:7a:d0:38:7b:41: c8:81:0b:48:f6:00:6c:6e:8d:cb:8f:01:f1:b7:f0:78:72:dd: 68:77:71:ea:a1:60:66:37:a4:ba:d9:d4:d8:fc:3e:db:c8:d9: d5:15:b3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0giGfmU5SCJ+yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NzZjM2I1M2MtMjNjNC00NGE0LWIwMTctZmU4NGJiYjA2MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcF0u7YWhzkwiqrBIZzZLaw5NIlAL8Bb9kFy eEURbOxLe24l9TY5eiogNM0zaSSmJ0DBQRG1Ne4q12fMRgwP6OvqrX1H3rU+I/en 2UJ78IKk0P8nNqwMLL70syqEp4e1NUQdADR0FVsaXkYKEonxbvmQ3PhGQNZZhZiL sFiFoS5wOZVWPe+VaVFihHWDFhPpPgZQTSOPI6lvDf923UI7nB/argOvWc/L4OG1 BMMuJojyKmAgbNm2k2o1K1p1baNwCMJUtvtyHg5EkQ9PUWn7OrtUZhfN4ZO3nSRe bxzTkwDH2cJF50+u0dmToNt6QHT6QNet0UJk5iVLaNt8FvtZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6BxKpMLMpLknSlK/+PpQLCxRfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmNlZjEzYjEtZDQ3NS0z NGZlLTkzZjQtYmRlMmRiMWM3NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/B4bNraC7Y0c2+aY4ou2n7ZKO5tIC91qe1mKsITJ9jYZi/9FF9WwYI fZ4Tzv98AvSQaRU1SPOfrYAdlIhG4fpUslke6cTHayzqcGsqTLUB7Qt6Ipi2Uskx +VW1inDfkmapoRt7WW1inJ8uGRPNVJExAY1xiVDzpWa5Jz35uHSKt2+NxKP6mt+M Hz0gMh6IRvM6As8sB39QnvafW09xwPK3d9mwVFZCK1VOmk6FU79yqm2dfOzNl2gz 29DodQ4fUl4RFio/m63aUmrX28iid66YAYt60Dh7QciBC0j2AGxujcuPAfG38Hhy 3Wh3ceqhYGY3pLrZ1Nj8PtvI2dUVs2k= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:01 2025 by rpki-client