$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa File: c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa (raw, json) Hash identifier: bxuZGNr6Ua06wRoZVfIEsn3b0W10hMXKO3EiO23oktk= Subject key identifier: F6:35:3A:A9:63:C3:AF:B8:05:58:5C:3A:3E:A2:36:93:03:90:74:F7 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B3126FA915F62BF9AD3710580 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 2914 IP address blocks: 108.59.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:fa:91:5f:62:bf:9a:d3:71:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=3b9385c1-e4e5-4ee4-a2ec-cd69ff4226cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:8a:ee:da:03:4a:85:09:22:a8:18:9b:62: 59:32:70:04:2a:58:04:1f:00:9b:91:83:0c:ee:57: 67:38:80:22:d6:51:6e:5f:cb:61:de:12:f7:7c:c2: c2:83:23:1b:ce:b9:88:b6:03:ab:8b:b5:ce:c1:49: 53:3c:5e:e8:e6:ac:a7:11:45:6b:d2:a2:47:4a:f2: b4:96:3e:f3:90:72:97:a7:14:a4:6c:1c:d7:03:0c: dd:54:77:d2:29:86:a3:22:f3:74:5a:88:e4:ba:4f: ff:91:4a:45:ee:8b:49:f9:69:0a:a0:15:cc:fa:85: de:6d:3e:bf:f1:71:a4:45:bf:a1:11:f2:31:68:76: de:0f:c2:56:28:77:58:76:21:ef:64:25:b2:25:1d: 03:94:fa:ec:94:17:74:f0:65:5c:16:20:45:55:f0: e7:b3:00:45:55:51:60:9f:53:c7:fc:cb:9a:d7:4d: fe:7a:be:f5:7a:d8:65:40:8b:06:c4:48:47:83:64: 8e:66:87:e5:de:b3:4f:c6:d6:e1:cc:14:e2:78:fd: cb:9a:a6:75:f5:3e:68:33:67:e2:43:90:1a:de:77: 61:67:c0:bf:3b:39:9e:2c:a3:5c:17:44:b1:a9:59: bc:cb:18:03:fc:b5:e7:c7:ae:74:5d:95:87:80:88: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:35:3A:A9:63:C3:AF:B8:05:58:5C:3A:3E:A2:36:93:03:90:74:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5a:7c:aa:5b:be:ed:a7:17:d0:ef:69:e9:a5:dc:48:85:5a: d0:43:8d:fb:8f:be:47:1b:4f:96:b7:38:1f:df:43:d1:0a:5b: 4c:1b:a5:b0:a4:e6:ab:c5:02:b5:47:17:e1:1d:42:8b:7f:ea: 91:ab:38:bc:ad:2d:95:a4:63:a1:6a:83:f0:80:3a:a0:cc:92: 56:a0:81:72:27:ae:aa:c6:d7:a2:89:9d:e5:e9:d5:b6:7f:69: 18:9b:fc:9e:3b:db:25:7b:eb:71:5b:c3:01:94:34:fe:36:d4: 34:6a:4d:d7:6d:e4:76:5f:f7:0b:5a:ba:4b:d2:00:a0:37:e3: 46:f5:88:cb:1d:7c:86:e3:bc:10:88:6b:57:9a:e4:b3:3d:72: db:2a:00:4d:44:4f:27:19:2c:cb:db:e2:14:47:73:6e:20:19: 1c:1e:7e:02:3a:ec:fa:d7:c7:74:50:79:17:99:88:f6:9a:35: af:25:5d:e0:f6:88:de:a0:3f:df:3b:c0:71:1e:ff:03:05:e5: bf:28:47:e5:fb:d1:b9:b9:34:4a:99:46:ba:35:fd:a1:bb:ac: 26:df:98:9c:66:66:ed:4a:e1:1e:79:17:63:d1:1d:6e:59:06: a3:21:c3:1c:27:cc:bd:ca:c2:3e:45:2b:e0:09:c6:7e:78:d2: 5c:aa:ad:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvqRX2K/mtNxBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk M2I5Mzg1YzEtZTRlNS00ZWU0LWEyZWMtY2Q2OWZmNDIyNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtOK7toDSoUJIqgYm2JZMnAEKlgEHwCbkYMM 7ldnOIAi1lFuX8th3hL3fMLCgyMbzrmItgOri7XOwUlTPF7o5qynEUVr0qJHSvK0 lj7zkHKXpxSkbBzXAwzdVHfSKYajIvN0Wojkuk//kUpF7otJ+WkKoBXM+oXebT6/ 8XGkRb+hEfIxaHbeD8JWKHdYdiHvZCWyJR0DlPrslBd08GVcFiBFVfDnswBFVVFg n1PH/Mua103+er71ethlQIsGxEhHg2SOZofl3rNPxtbhzBTieP3LmqZ19T5oM2fi Q5Aa3ndhZ8C/OzmeLKNcF0SxqVm8yxgD/LXnx650XZWHgIjNowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY1Oqljw6+4BVhcOj6iNpMDkHT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYzQwZDU2YTQtNTk5MS0z MGIwLTllNzQtZjFhNmYzODlmYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxafKpbvu2nF9Dvaeml3EiFWtBDjfuPvkcbT5a3OB/fQ9EKW0wbpbCk 5qvFArVHF+EdQot/6pGrOLytLZWkY6Fqg/CAOqDMklaggXInrqrG16KJneXp1bZ/ aRib/J472yV763FbwwGUNP421DRqTddt5HZf9wtaukvSAKA340b1iMsdfIbjvBCI a1ea5LM9ctsqAE1ETycZLMvb4hRHc24gGRwefgI67PrXx3RQeReZiPaaNa8lXeD2 iN6gP987wHEe/wMF5b8oR+X70bm5NEqZRro1/aG7rCbfmJxmZu1K4R55F2PRHW5Z BqMhwxwnzL3Kwj5FK+AJxn540lyqrTQ= -----END CERTIFICATE-----Generated at Wed Oct 8 11:58:04 2025 by rpki-client