$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa File: ce3af1c7-43c9-367b-a21d-717aaaf44463.roa (raw, json) Hash identifier: jl8fBxELeeD4GsPWQzQJtzDXVetNTktNMi6//jzwSjA= Subject key identifier: BB:4A:D0:F3:41:E7:1D:D1:D0:8F:70:E4:3F:15:25:CA:C5:36:AB:C2 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D1F4A3AF28D56E0F4AE3F6340 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 209.236.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:3a:f2:8d:56:e0:f4:ae:3f:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c60677d1-ba7b-40eb-a5ca-6e8fbfb31ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:8b:c0:f1:9b:e7:d1:7e:1c:c6:c2:e1:5a: 12:6d:eb:1a:73:b1:53:4f:f1:dc:7c:4c:5a:a0:3f: 7e:c2:13:28:86:db:ab:f9:b8:b2:c9:e2:3d:98:34: 0a:49:aa:35:07:c8:2f:e6:6a:c7:83:9d:5b:ef:98: e5:d3:20:5a:28:5a:48:99:71:30:43:04:84:50:ec: 1a:16:86:3e:8e:7f:bd:8e:34:33:a1:ef:b7:ee:07: 79:24:32:5f:70:34:32:c7:f7:52:5d:c5:15:17:17: dd:7d:f6:e2:a7:ae:1a:6b:52:ed:03:32:2f:76:2a: 47:44:ad:9f:a0:7c:1d:e1:a7:c0:a8:cd:af:96:23: b4:37:71:94:33:bf:7c:7a:41:be:cc:b3:20:fa:98: c1:ec:3d:63:b6:47:53:00:c4:f7:4a:02:5f:44:46: c0:87:d9:e1:38:d0:5a:e3:a8:ad:7d:4d:b4:8f:ee: 9c:2f:31:e2:de:2e:52:03:a8:aa:32:fe:6d:17:c2: 00:04:74:74:d2:3b:31:ad:09:07:60:af:fe:44:85: 71:c2:28:a5:a1:c6:a5:6a:57:c1:c0:46:05:3f:34: 72:8f:09:01:3e:cc:d7:df:d7:f3:bd:23:cd:af:ed: f4:b3:e7:c2:0b:be:0a:6f:4e:b0:15:18:9b:72:c8: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:D0:F3:41:E7:1D:D1:D0:8F:70:E4:3F:15:25:CA:C5:36:AB:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:31:a5:fa:0c:94:20:9b:98:57:e5:48:49:51:fb:1b:93:b6: 11:65:c1:2a:8f:43:d3:2b:cd:ff:be:d2:5c:ca:d1:16:d2:06: 50:7a:64:01:d8:67:5d:af:00:24:70:3c:76:b5:a1:80:5f:6a: 4d:85:bb:21:5b:aa:b8:37:33:88:69:a3:67:bd:c3:a4:1c:9e: f4:e8:3e:b8:79:06:b4:8b:49:74:34:f4:04:a6:bb:8d:26:b8: 03:0c:22:51:44:61:c9:95:50:20:97:38:18:4a:04:9f:38:52: 15:31:2b:81:2c:56:95:d5:ad:23:8f:d1:ed:8e:41:29:b6:d7: 10:3a:0d:20:a8:eb:62:9f:fb:21:d4:e1:bd:cc:5f:83:cc:c1: 55:bc:65:27:0d:2f:34:37:60:6e:22:07:82:74:57:5c:fa:2a: 76:6d:81:e5:32:d9:20:9b:c7:aa:8c:39:45:92:8a:83:70:cf: a2:e8:9f:e7:11:07:f9:fc:93:37:70:6b:a4:cf:20:58:7b:a5: 5f:0b:d8:0d:7b:2e:f2:29:f6:3b:cd:c4:04:97:18:7c:d3:84: 5b:97:71:e5:de:87:88:5b:22:e5:e4:5c:fc:69:8d:30:d3:c8: 54:d6:b4:26:f2:89:e1:40:ee:8a:2a:a7:e0:f5:93:c3:60:ea: d8:ed:4e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjryjVbg9K4/Y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzYwNjc3ZDEtYmE3Yi00MGViLWE1Y2EtNmU4ZmJmYjMxZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBeLwPGb59F+HMbC4VoSbesac7FTT/HcfExa oD9+whMohtur+biyyeI9mDQKSao1B8gv5mrHg51b75jl0yBaKFpImXEwQwSEUOwa FoY+jn+9jjQzoe+37gd5JDJfcDQyx/dSXcUVFxfdffbip64aa1LtAzIvdipHRK2f oHwd4afAqM2vliO0N3GUM798ekG+zLMg+pjB7D1jtkdTAMT3SgJfREbAh9nhONBa 46itfU20j+6cLzHi3i5SA6iqMv5tF8IABHR00jsxrQkHYK/+RIVxwiilocalalfB wEYFPzRyjwkBPszX39fzvSPNr+30s+fCC74Kb06wFRibcsjoXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtK0PNB5x3R0I9w5D8VJcrFNqvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2UzYWYxYzctNDNjOS0z NjdiLWEyMWQtNzE3YWFhZjQ0NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUxpfoMlCCbmFflSElR+xuTthFlwSqPQ9Mrzf++0lzK0RbSBlB6ZAHY Z12vACRwPHa1oYBfak2FuyFbqrg3M4hpo2e9w6QcnvToPrh5BrSLSXQ09ASmu40m uAMMIlFEYcmVUCCXOBhKBJ84UhUxK4EsVpXVrSOP0e2OQSm21xA6DSCo62Kf+yHU 4b3MX4PMwVW8ZScNLzQ3YG4iB4J0V1z6KnZtgeUy2SCbx6qMOUWSioNwz6Lon+cR B/n8kzdwa6TPIFh7pV8L2A17LvIp9jvNxASXGHzThFuXceXeh4hbIuXkXPxpjTDT yFTWtCbyieFA7ooqp+D1k8Ng6tjtTq8= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:32 2026 by rpki-client