$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa File: d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa (raw, json) Hash identifier: eBinqmS6V+VLUDIyy38LKEc5jNo6MfNbUwYitvP3OOE= Subject key identifier: D5:43:7E:6B:95:14:EB:21:77:AE:B7:7E:77:55:97:81:36:CF:BE:51 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD208A55E79D12C5A5326C0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 6079 IP address blocks: 209.236.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:08:a5:5e:79:d1:2c:5a:53:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ce37fa79-e16f-4ded-8dfc-2f80aad410c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:5c:07:6a:6f:8a:ee:ff:7e:b2:e1:ce:17: 05:6b:da:ee:ec:20:05:89:5f:36:20:5f:a1:3f:95: df:12:21:79:ef:ac:a7:e0:a8:5c:0e:56:ac:2a:91: cc:67:15:55:44:69:94:9e:ed:63:a4:b0:d0:a3:cd: b7:b9:dc:37:c8:42:4f:8e:3b:5e:81:f7:07:a5:93: a4:7f:09:b7:58:64:07:a6:0c:88:bf:4a:bd:f5:6d: 06:bd:c7:d0:0b:ef:90:78:10:93:04:ab:e0:4b:1a: 34:23:9b:a7:33:4f:46:21:2e:8e:08:f4:6f:02:94: da:4e:61:4c:bd:e5:f9:22:43:7e:98:dd:df:8c:b0: a2:20:f1:ca:a0:6e:38:03:56:70:2d:f1:b7:32:5a: c7:f6:81:d0:31:8e:f9:b0:9e:10:e7:54:fe:dc:c5: ee:87:3b:3c:7f:71:ee:ef:45:f9:55:2f:4a:de:e4: 07:6e:a9:f9:de:25:5f:38:47:27:a8:67:95:83:7d: 79:34:7d:da:7b:3b:33:b0:62:56:f5:e1:89:69:8f: 09:cd:e3:c6:85:b3:62:0b:52:8f:62:b3:82:d0:09: f9:c4:39:f8:4b:ac:c4:38:0d:54:45:c6:a0:85:71: 08:2b:7a:2c:56:33:5d:ee:99:2e:52:77:44:d8:b1: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:7E:6B:95:14:EB:21:77:AE:B7:7E:77:55:97:81:36:CF:BE:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d8882e92-c1ec-3e3b-8ebc-6c5deabece37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b8:dd:ec:f8:36:b4:55:f5:ca:38:5d:ba:c5:ed:68:6e:8d: 67:4d:86:06:9f:84:d2:60:43:ac:46:ef:8c:30:3a:54:8f:af: d9:1d:03:fe:2b:b1:67:e1:d0:17:a3:e6:7c:b6:84:ad:a4:47: 79:9e:fd:25:f4:ad:fb:a4:f0:22:38:23:9a:82:d4:4a:fb:5a: 03:77:fe:8f:7d:fb:91:e3:40:d2:71:9a:13:bc:d3:75:32:f5: cf:38:7c:55:ec:9e:99:45:f6:a2:ad:d2:13:c2:9e:17:74:7c: 31:0e:51:77:35:14:a1:ae:72:1f:11:92:80:3b:65:26:14:58: 94:a1:5f:4d:e3:03:53:be:f7:6b:1b:ce:b2:31:ab:da:a1:3c: 6a:df:cd:c4:2e:32:7a:57:e0:db:9c:10:f3:3e:f9:10:cc:b2: f1:29:28:b6:e2:7b:90:60:ff:aa:ea:0a:03:9e:0e:99:f0:2f: 39:66:6e:39:f7:52:5d:a4:c9:b4:0d:4d:a9:d1:67:ef:54:9f: f6:55:e5:5f:3f:a9:19:b7:b8:d8:7c:40:e0:28:fc:a0:4e:e9: 08:65:ff:d6:90:bd:6d:e7:6b:a5:91:ee:59:0b:90:58:fd:54: ea:b9:4d:ac:6c:ae:90:6f:49:23:ae:ce:bb:96:49:73:b4:2e: 9b:45:89:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gilXnnRLFpTJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2UzN2ZhNzktZTE2Zi00ZGVkLThkZmMtMmY4MGFhZDQxMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4JcB2pviu7/frLhzhcFa9ru7CAFiV82IF+h P5XfEiF576yn4KhcDlasKpHMZxVVRGmUnu1jpLDQo823udw3yEJPjjtegfcHpZOk fwm3WGQHpgyIv0q99W0GvcfQC++QeBCTBKvgSxo0I5unM09GIS6OCPRvApTaTmFM veX5IkN+mN3fjLCiIPHKoG44A1ZwLfG3MlrH9oHQMY75sJ4Q51T+3MXuhzs8f3Hu 70X5VS9K3uQHbqn53iVfOEcnqGeVg315NH3aezszsGJW9eGJaY8JzePGhbNiC1KP YrOC0An5xDn4S6zEOA1URcaghXEIK3osVjNd7pkuUndE2LGQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVDfmuVFOshd663fndVl4E2z75RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDg4ODJlOTItYzFlYy0z ZTNiLThlYmMtNmM1ZGVhYmVjZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe43ez4NrRV9co4XbrF7WhujWdNhgafhNJgQ6xG74wwOlSPr9kdA/4r sWfh0Bej5ny2hK2kR3me/SX0rfuk8CI4I5qC1Er7WgN3/o99+5HjQNJxmhO803Uy 9c84fFXsnplF9qKt0hPCnhd0fDEOUXc1FKGuch8RkoA7ZSYUWJShX03jA1O+92sb zrIxq9qhPGrfzcQuMnpX4NucEPM++RDMsvEpKLbie5Bg/6rqCgOeDpnwLzlmbjn3 Ul2kybQNTanRZ+9Un/ZV5V8/qRm3uNh8QOAo/KBO6Qhl/9aQvW3na6WR7lkLkFj9 VOq5TaxsrpBvSSOuzruWSXO0LptFidQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:17 2025 by rpki-client