$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa File: d903b056-4c7c-3152-8cd6-9f46941388c8.roa (raw, json) Hash identifier: wxhaKuNWw9YSRZkHDpJuLfKo0a8rLz+yYAJ8Nx6tqhA= Subject key identifier: 31:6A:78:D4:ED:67:58:DF:9C:60:2E:45:AC:50:D3:91:2F:E4:31:2B Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD1DBE30314E40E06937500 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 6079 IP address blocks: 209.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:db:e3:03:14:e4:0e:06:93:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=c49823b9-bffc-42e9-bfe9-e568242f3f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:51:f8:6e:96:3a:fd:f3:78:18:af:9d:65: e6:3b:5a:5a:89:69:04:54:e7:94:35:68:6e:f3:23: 44:c2:7f:59:3e:df:c5:d7:59:c4:bf:d1:eb:7f:ba: 2a:73:5f:f6:1e:0b:2f:8d:07:51:68:d2:3f:bf:87: f5:5c:17:13:11:eb:03:d1:e5:4d:e1:b1:b2:e2:ff: 66:1b:7b:0f:c0:07:fa:23:ea:43:cd:15:84:0e:3b: 05:50:c9:5f:34:5c:39:fd:fc:9f:f5:6b:69:b8:3c: 38:aa:8f:5a:29:df:01:0f:d3:33:6e:80:26:b3:42: 3b:e2:c9:6d:ee:4b:9e:72:1f:81:61:35:b0:fe:a5: 6f:e2:23:71:b9:17:19:1d:a1:2e:f0:4b:bf:28:c5: 01:5e:fd:aa:d5:a8:75:ef:a1:29:22:1c:b5:c2:b2: 9e:25:05:35:34:82:87:7b:25:50:e7:1d:59:bd:40: e5:32:04:6a:c5:6d:50:1f:13:8a:ce:79:e8:f5:26: 1d:e1:f2:e6:35:1b:6e:15:76:53:ee:28:05:34:ce: 65:06:0d:2d:d1:1d:2a:33:dd:a5:19:49:35:cd:7f: ab:18:9d:dd:da:11:76:ae:23:7c:9f:22:b8:0e:23: 4d:e8:a9:d1:61:db:a4:84:55:8d:ab:c8:f0:a5:72: e5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6A:78:D4:ED:67:58:DF:9C:60:2E:45:AC:50:D3:91:2F:E4:31:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d903b056-4c7c-3152-8cd6-9f46941388c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bb:f3:59:1e:4f:46:ca:c0:53:86:5e:37:f9:70:62:aa:5c: 18:b5:95:7e:4f:4d:1b:e5:fe:b3:3f:aa:6a:4e:b3:77:cc:37: 78:e8:82:0d:fe:2b:29:fb:28:b1:9c:7b:48:72:87:2b:02:96: ce:97:50:f7:6e:c1:91:f5:ca:4a:94:ab:2e:e0:39:43:c8:15: 07:f1:96:43:1e:86:71:ac:80:ff:d1:cb:f3:6c:84:4a:02:fd: 91:dd:51:f9:0b:5f:1d:a2:a8:84:f3:38:88:19:cc:fb:d1:3c: e7:e7:d7:82:0f:ef:6b:2e:9a:04:dd:2c:98:34:3a:08:93:d2: 9c:92:73:4a:c0:db:57:ec:9a:11:ec:42:48:87:05:35:84:85: 00:ec:ea:9f:01:25:09:9f:82:a7:14:05:7c:d6:db:d6:81:05: a5:f1:6e:ad:97:0f:52:e1:e0:88:e4:74:bc:57:9f:33:b9:a2: 87:bf:19:ba:47:c2:c5:08:3c:91:8f:ae:e4:ae:a8:f3:eb:fa: e9:9c:c0:57:0d:9e:ba:16:5d:73:87:00:4b:c0:c5:1b:23:55: df:92:66:2d:59:a6:5d:e5:6b:1f:e4:63:0a:5c:9d:7c:91:46: e4:12:95:ba:3f:18:3b:c2:99:b6:52:42:4d:12:a5:f9:4e:b4: 03:ab:e7:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0dvjAxTkDgaTdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YzQ5ODIzYjktYmZmYy00MmU5LWJmZTktZTU2ODI0MmYzZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis5R+G6WOv3zeBivnWXmO1paiWkEVOeUNWhu 8yNEwn9ZPt/F11nEv9Hrf7oqc1/2HgsvjQdRaNI/v4f1XBcTEesD0eVN4bGy4v9m G3sPwAf6I+pDzRWEDjsFUMlfNFw5/fyf9WtpuDw4qo9aKd8BD9MzboAms0I74slt 7kuech+BYTWw/qVv4iNxuRcZHaEu8Eu/KMUBXv2q1ah176EpIhy1wrKeJQU1NIKH eyVQ5x1ZvUDlMgRqxW1QHxOKznno9SYd4fLmNRtuFXZT7igFNM5lBg0t0R0qM92l GUk1zX+rGJ3d2hF2riN8nyK4DiNN6KnRYdukhFWNq8jwpXLlJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFqeNTtZ1jfnGAuRaxQ05Ev5DErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZDkwM2IwNTYtNGM3Yy0z MTUyLThjZDYtOWY0Njk0MTM4OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG781keT0bKwFOGXjf5cGKqXBi1lX5PTRvl/rM/qmpOs3fMN3jogg3+ Kyn7KLGce0hyhysCls6XUPduwZH1ykqUqy7gOUPIFQfxlkMehnGsgP/Ry/NshEoC /ZHdUfkLXx2iqITzOIgZzPvRPOfn14IP72sumgTdLJg0OgiT0pySc0rA21fsmhHs QkiHBTWEhQDs6p8BJQmfgqcUBXzW29aBBaXxbq2XD1Lh4IjkdLxXnzO5ooe/GbpH wsUIPJGPruSuqPPr+umcwFcNnroWXXOHAEvAxRsjVd+SZi1Zpl3lax/kYwpcnXyR RuQSlbo/GDvCmbZSQk0SpflOtAOr57c= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:35 2025 by rpki-client