$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa File: d903b056-4c7c-3152-8cd6-9f46941388c8.roa (raw, json) Hash identifier: 9L3Hvir7Stx7vNpEMXOBMw8Sb6rZDCcHQMMb42136z8= Subject key identifier: F5:A8:09:A7:AC:44:E2:C0:32:50:56:3F:2B:B7:E2:3C:F4:D2:80:65 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F49733ECD36E6306C00249200 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 209.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3e:cd:36:e6:30:6c:00:24:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d04afabc-bb45-42f8-99f6-523163caebe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:1c:f1:34:9a:8e:dc:05:9f:3f:0f:14:8c: 3d:90:ab:a6:85:38:3c:48:51:6a:f9:3f:30:a6:27: 91:c2:2c:9a:af:71:b6:35:e7:53:52:a5:bc:a0:7f: 29:48:45:ea:66:33:06:a2:a5:aa:54:56:92:ea:6b: 3f:b2:9b:25:05:78:ae:ba:70:d9:83:df:6a:c2:c8: ea:12:b5:77:a3:42:82:38:f5:ca:05:5f:0f:e2:75: de:3c:75:04:73:a2:61:d6:20:21:21:f4:16:f0:b8: 09:09:06:ed:ba:63:c3:9e:3a:dc:58:08:41:90:63: 53:c9:35:82:67:a5:74:42:01:61:e5:ed:ba:48:24: 3f:2d:8d:6b:98:46:b5:1c:e6:02:53:99:89:e9:71: 40:65:9b:e4:5b:00:6c:39:a8:2e:b0:f3:63:da:b1: 2f:91:69:80:7a:26:6f:17:b8:c8:c6:aa:cc:37:ce: 1f:7f:bf:fc:fd:5a:7d:82:0d:d2:03:fa:c2:1d:5d: a2:bf:f7:3a:29:d2:5c:44:55:aa:df:d3:f6:2e:19: f8:29:85:25:38:55:61:87:54:90:8c:51:ca:eb:1a: da:e1:fd:51:b2:de:73:ec:95:ed:d1:94:0e:97:16: f0:71:92:78:26:da:b7:88:8c:15:9e:34:bd:a7:5d: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A8:09:A7:AC:44:E2:C0:32:50:56:3F:2B:B7:E2:3C:F4:D2:80:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:95:80:4b:62:f8:56:4b:d6:a7:90:f5:f4:01:fa:60:91:2d: 4f:e9:3a:46:8e:79:df:4e:2c:7f:14:99:2f:c6:87:de:a0:68: a3:35:73:7b:6e:32:fc:17:9a:21:c9:31:0d:13:e3:3a:0c:17: 3c:39:5a:ef:b5:59:38:42:31:c5:85:43:d2:e8:4b:be:a9:73: a9:cb:24:95:05:d8:19:fe:25:b8:03:b7:7a:d6:50:88:67:fc: 29:62:fb:ce:5e:4c:08:de:1a:91:fd:cd:57:f0:24:aa:bc:10: 94:b8:1a:0a:0b:de:de:72:68:aa:03:3e:64:99:f1:2d:75:55: fa:aa:6c:dd:1e:cf:49:77:f5:79:73:bf:7c:a6:af:05:63:cf: b4:7a:82:6f:06:83:e8:80:ba:53:2b:a0:dd:9c:e1:2f:23:22: 10:ef:0d:91:af:33:e9:12:54:2c:36:d7:bd:0f:0b:28:18:06: 88:b7:e1:21:f4:ec:7c:c2:86:67:a7:c7:3a:64:30:10:f5:88: b5:0c:8c:42:22:ff:78:d9:74:d3:33:f9:83:4b:1a:d7:26:cc: f9:fe:b9:12:03:43:c3:3d:51:9b:0f:da:b5:34:08:6d:a0:db: 0c:6c:53:aa:85:ed:a0:78:8d:67:c6:d5:06:92:23:ba:5d:87: 2c:50:04:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcz7NNuYwbAAkkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDA0YWZhYmMtYmI0NS00MmY4LTk5ZjYtNTIzMTYzY2FlYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwc8TSajtwFnz8PFIw9kKumhTg8SFFq+T8w pieRwiyar3G2NedTUqW8oH8pSEXqZjMGoqWqVFaS6ms/spslBXiuunDZg99qwsjq ErV3o0KCOPXKBV8P4nXePHUEc6Jh1iAhIfQW8LgJCQbtumPDnjrcWAhBkGNTyTWC Z6V0QgFh5e26SCQ/LY1rmEa1HOYCU5mJ6XFAZZvkWwBsOagusPNj2rEvkWmAeiZv F7jIxqrMN84ff7/8/Vp9gg3SA/rCHV2iv/c6KdJcRFWq39P2Lhn4KYUlOFVhh1SQ jFHK6xra4f1Rst5z7JXt0ZQOlxbwcZJ4Jtq3iIwVnjS9p10UpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWoCaesROLAMlBWPyu34jz00oBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDkwM2IwNTYtNGM3Yy0z MTUyLThjZDYtOWY0Njk0MTM4OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGVgEti+FZL1qeQ9fQB+mCRLU/pOkaOed9OLH8UmS/Gh96gaKM1c3tu MvwXmiHJMQ0T4zoMFzw5Wu+1WThCMcWFQ9LoS76pc6nLJJUF2Bn+JbgDt3rWUIhn /Cli+85eTAjeGpH9zVfwJKq8EJS4GgoL3t5yaKoDPmSZ8S11VfqqbN0ez0l39Xlz v3ymrwVjz7R6gm8Gg+iAulMroN2c4S8jIhDvDZGvM+kSVCw2170PCygYBoi34SH0 7HzChmenxzpkMBD1iLUMjEIi/3jZdNMz+YNLGtcmzPn+uRIDQ8M9UZsP2rU0CG2g 2wxsU6qF7aB4jWfG1QaSI7pdhyxQBKI= -----END CERTIFICATE-----Generated at Sun Sep 27 05:59:32 2026 by rpki-client