$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa File: cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa (raw, json) Hash identifier: AYUxLTgyO8RlUT65jwxXougxIT3wr5LjsaJbnAzn2Lc= Subject key identifier: 30:40:8E:AE:A0:DA:F5:52:F8:FF:E4:7F:B4:E6:C8:A6:88:F8:7F:6A Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F497438CDA5834075B6964200 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11426 IP address blocks: 206.245.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:38:cd:a5:83:40:75:b6:96:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1efdbd31-395d-450c-8540-de5625c36c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:23:48:19:c7:a7:98:b3:68:e1:22:54:0b:1c: bf:60:2c:56:b2:05:2d:10:93:a6:ff:6a:9e:92:4b: fe:82:e0:f9:1a:ec:b4:ad:85:8f:46:b9:10:4d:7d: 85:37:f5:22:b0:d7:73:e2:7d:73:ca:d6:77:92:3f: cd:c7:e5:b8:9d:91:65:dd:73:c0:a6:bb:3d:83:7c: ad:4a:47:c2:f0:2f:bf:f2:c1:f6:03:a3:de:1b:84: 27:2e:a9:66:15:89:e7:64:0d:da:c8:e6:38:1e:68: 56:d1:16:3b:69:44:48:68:20:88:cb:ae:5a:f2:c5: 2c:46:ee:a5:75:c6:98:59:8e:f5:a4:f7:48:98:22: f7:e4:f8:71:e0:99:c6:b1:af:31:32:d0:8a:a0:98: b8:16:e0:30:10:01:9a:61:39:bd:dd:a6:08:73:e7: b0:ae:e4:75:cd:96:c2:b4:77:87:68:ab:32:bc:49: 00:3a:60:ec:fd:f4:0b:05:61:74:a7:61:e3:02:07: 0e:8d:2c:71:8d:c8:9e:ac:a6:fe:14:84:a3:68:6a: e2:6a:16:05:23:98:e2:b5:85:85:12:a1:9b:86:82: d2:82:ec:4d:81:ca:30:67:ee:a8:55:cb:10:5d:e7: 42:c0:d4:55:32:1a:2d:d4:d9:3c:91:7b:ff:8d:10: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:40:8E:AE:A0:DA:F5:52:F8:FF:E4:7F:B4:E6:C8:A6:88:F8:7F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:77:ac:3a:2a:ed:81:2f:76:b1:8b:2b:ba:5a:dc:48:f5:7a: 99:24:ab:32:c0:30:43:bf:06:70:8c:8e:fb:eb:7a:5e:1c:f5: b5:ab:52:ab:e7:b1:0f:41:a8:bd:64:d5:f4:1c:e3:ee:19:18: 6c:ec:ec:67:72:dc:85:ce:79:05:cb:29:c6:c7:fe:e2:90:31: cc:b0:7c:c9:d9:77:e5:45:a8:6b:29:9e:f6:ca:c5:47:05:55: b0:c7:e1:22:ad:66:57:b8:da:93:f7:f2:bc:72:7f:d3:3f:fd: 2e:27:45:59:89:bb:bb:e7:1f:a3:2b:ae:80:7f:d0:3c:87:25: 23:c1:36:b4:62:1e:c0:7c:6d:d1:aa:bc:d6:f6:73:90:2d:b9: 67:e4:76:62:0c:2c:b8:22:5f:63:3e:8c:4b:8a:ec:fb:fa:84: 59:3a:34:01:54:61:c8:8f:b0:8c:08:59:6e:56:f1:cd:f9:c8: d0:31:fe:ba:79:01:3f:8d:9a:e4:c0:fe:2f:44:f6:f5:bb:b9: f6:5e:67:fb:ae:a0:c1:ae:f8:a9:75:8a:08:63:86:ac:fc:b4: 5d:1c:59:68:88:4b:dd:14:88:aa:f2:52:5d:db:39:08:5e:89: ca:f6:75:cb:e9:3b:1b:ac:96:ce:2a:27:c4:94:06:bd:c1:b0: 66:42:2a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDjNpYNAdbaWQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWVmZGJkMzEtMzk1ZC00NTBjLTg1NDAtZGU1NjI1YzM2Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSNIGcenmLNo4SJUCxy/YCxWsgUtEJOm/2qe kkv+guD5Guy0rYWPRrkQTX2FN/UisNdz4n1zytZ3kj/Nx+W4nZFl3XPAprs9g3yt SkfC8C+/8sH2A6PeG4QnLqlmFYnnZA3ayOY4HmhW0RY7aURIaCCIy65a8sUsRu6l dcaYWY71pPdImCL35Phx4JnGsa8xMtCKoJi4FuAwEAGaYTm93aYIc+ewruR1zZbC tHeHaKsyvEkAOmDs/fQLBWF0p2HjAgcOjSxxjcierKb+FISjaGriahYFI5jitYWF EqGbhoLSguxNgcowZ+6oVcsQXedCwNRVMhot1Nk8kXv/jRCCiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBAjq6g2vVS+P/kf7TmyKaI+H9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2ZkOGY2ZjgtNTM3MS0z MDFkLTg5YTEtYTJiNWM2ZGNjY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ3rDoq7YEvdrGLK7pa3Ej1epkkqzLAMEO/BnCMjvvrel4c9bWrUqvn sQ9BqL1k1fQc4+4ZGGzs7Gdy3IXOeQXLKcbH/uKQMcywfMnZd+VFqGspnvbKxUcF VbDH4SKtZle42pP38rxyf9M//S4nRVmJu7vnH6MrroB/0DyHJSPBNrRiHsB8bdGq vNb2c5AtuWfkdmIMLLgiX2M+jEuK7Pv6hFk6NAFUYciPsIwIWW5W8c35yNAx/rp5 AT+NmuTA/i9E9vW7ufZeZ/uuoMGu+Kl1ighjhqz8tF0cWWiIS90UiKryUl3bOQhe icr2dcvpOxusls4qJ8SUBr3BsGZCKsM= -----END CERTIFICATE-----Generated at Mon Sep 28 16:44:46 2026 by rpki-client