$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa File: c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa (raw, json) Hash identifier: ttf72GiaxbuXFWlb1eYBFdV8kwJl/T7Bw1Yk1eBfJ2I= Subject key identifier: 50:7B:72:84:81:58:36:07:EE:5F:B7:5C:06:D0:76:75:02:54:99:9C Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F49749507C71CD3BAA8D51980 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 108.59.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:95:07:c7:1c:d3:ba:a8:d5:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bdc908d-26a2-4b1b-9caa-b57d6858f78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:fc:3a:e9:5c:b2:99:6f:fe:4e:41:d8:49: 83:d6:1b:95:cb:71:2b:5b:e8:cf:51:0f:ae:dc:05: aa:e2:45:a3:6b:28:91:d5:c1:c1:7d:76:0c:1c:f8: d9:43:39:50:5d:79:83:d1:b0:a9:90:42:0e:3e:44: eb:41:4a:8b:58:02:15:b7:5f:76:22:6c:fd:72:e1: b9:a6:89:4c:f7:0f:13:63:3a:7f:07:19:dc:22:dc: a9:17:c7:60:f5:b3:3d:ef:b7:1b:49:37:7c:90:39: 7d:d9:19:d5:f9:76:2b:32:8e:4a:c1:c9:cd:43:a2: fa:2b:64:9c:39:26:b2:be:eb:01:b7:ea:1d:db:44: f0:04:b7:21:2f:5e:2f:59:07:7d:45:68:d8:e6:3a: d0:9c:a5:80:52:8c:2b:66:05:db:ba:b5:4b:60:25: ae:49:59:80:a0:61:10:fc:ee:87:b8:56:97:f3:cf: 18:e2:c7:ec:af:0f:d2:7e:4a:21:40:9b:c0:7d:8d: 75:f6:04:3d:4f:6b:76:af:11:7c:64:62:de:2c:63: ca:b4:c7:72:5b:3d:a8:ac:7f:26:5b:6a:a9:39:e7: bd:15:f5:7b:c1:41:ca:66:e5:a6:f7:5a:62:d1:77: 8c:db:33:3f:c1:55:aa:0d:c2:1a:92:79:8b:20:ce: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7B:72:84:81:58:36:07:EE:5F:B7:5C:06:D0:76:75:02:54:99:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0f:dc:c4:94:c5:d3:33:71:83:b5:55:3b:3a:ce:c1:ba:ec: 42:58:50:49:ff:50:d0:a4:2b:9a:66:df:d4:d5:2e:79:2e:b2: f9:7a:09:6e:cc:c9:b4:58:bd:e2:bc:14:6f:92:e6:e3:cb:e5: 79:c7:16:74:14:de:f3:85:32:86:01:c4:ea:8d:72:24:8b:0c: 4b:c5:17:f5:09:c6:f1:c5:3a:7a:86:99:74:08:c0:4c:47:0a: fa:a6:e8:f5:3f:a2:17:2a:76:c7:4d:8d:09:2a:cf:42:89:d9: 52:c1:92:0d:ee:f3:4c:97:28:67:2b:39:38:c2:c0:15:0c:39: 81:22:e8:04:71:2f:75:ec:73:94:05:2b:4e:13:16:fb:d6:37: a4:e7:c4:5c:47:db:a2:08:92:cd:3f:a2:50:7e:93:81:76:43: e4:8d:f9:de:54:9f:53:95:56:34:09:27:16:be:17:47:d6:f5: 91:69:b7:ce:b8:01:03:e1:2b:72:d1:e7:57:78:12:dc:56:94: e6:70:d6:b9:68:6a:0e:f5:5e:cb:b6:e0:b3:c5:fa:6f:80:39: b9:88:12:b8:bf:4d:7e:ef:8b:e4:e4:1a:23:b7:7a:4c:ea:4a: 70:45:69:d4:41:4c:9f:7e:6d:09:71:e4:32:74:fb:5d:17:08: c1:f0:29:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJUHxxzTuqjVGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJkYzkwOGQtMjZhMi00YjFiLTljYWEtYjU3ZDY4NThmNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg38Oulcsplv/k5B2EmD1huVy3ErW+jPUQ+u 3AWq4kWjayiR1cHBfXYMHPjZQzlQXXmD0bCpkEIOPkTrQUqLWAIVt192Imz9cuG5 polM9w8TYzp/BxncItypF8dg9bM977cbSTd8kDl92RnV+XYrMo5KwcnNQ6L6K2Sc OSayvusBt+od20TwBLchL14vWQd9RWjY5jrQnKWAUowrZgXburVLYCWuSVmAoGEQ /O6HuFaX888Y4sfsrw/SfkohQJvAfY119gQ9T2t2rxF8ZGLeLGPKtMdyWz2orH8m W2qpOee9FfV7wUHKZuWm91pi0XeM2zM/wVWqDcIaknmLIM51HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB7coSBWDYH7l+3XAbQdnUCVJmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYzQwZDU2YTQtNTk5MS0z MGIwLTllNzQtZjFhNmYzODlmYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAP3MSUxdMzcYO1VTs6zsG67EJYUEn/UNCkK5pm39TVLnkusvl6CW7M ybRYveK8FG+S5uPL5XnHFnQU3vOFMoYBxOqNciSLDEvFF/UJxvHFOnqGmXQIwExH Cvqm6PU/ohcqdsdNjQkqz0KJ2VLBkg3u80yXKGcrOTjCwBUMOYEi6ARxL3Xsc5QF K04TFvvWN6TnxFxH26IIks0/olB+k4F2Q+SN+d5Un1OVVjQJJxa+F0fW9ZFpt864 AQPhK3LR51d4EtxWlOZw1rloag71Xsu24LPF+m+AObmIEri/TX7vi+TkGiO3ekzq SnBFadRBTJ9+bQlx5DJ0+10XCMHwKfQ= -----END CERTIFICATE-----Generated at Mon Oct 12 19:56:21 2026 by rpki-client