$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa File: 22885b19-ffae-32cf-b022-3d5558dc4f90.roa (raw, json) Hash identifier: QknVkDZ4vdm4A/7GW9UKnmxi+r95f2/7BjANGQt5uoQ= Subject key identifier: 29:D0:D0:F0:9F:A6:E4:2A:4C:76:74:C9:22:D2:59:43:8D:2A:A1:23 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D905A9F9EFBFC5AE00C0B8980 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 206.245.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:9e:fb:fc:5a:e0:0c:0b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=c6bb41be-63e2-4ed0-b5e6-ab3c3b157ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:65:7b:06:74:24:a1:83:00:e4:b7:a1:14: c7:46:47:7c:23:41:98:cc:a1:54:a5:10:ad:28:37: 44:3f:8b:41:9d:f1:eb:de:f3:67:d0:7b:84:4c:6c: 20:6e:3d:73:f6:0e:79:18:c4:20:78:a7:52:77:93: 74:ee:3d:ce:10:f2:05:5c:3a:c5:13:85:50:62:b6: a7:2d:44:13:0b:cd:fa:4b:6d:e3:21:48:7c:78:c1: 5e:2e:8e:fc:88:de:a7:ec:9c:75:75:78:63:b9:ce: d9:f2:80:c1:2f:63:0b:e7:6a:00:24:ff:bf:14:d7: 41:cc:20:64:6c:b2:8b:ee:3f:fb:a7:eb:d6:39:3e: c9:ca:02:bb:b8:48:c1:5a:4b:41:46:9f:9d:e2:9f: c1:66:52:bc:4a:11:db:59:5f:13:b7:f5:41:16:a0: 14:c6:e5:59:f1:5b:80:12:b0:00:cc:9f:71:40:19: b6:62:0f:0c:f9:6e:bf:55:bc:a2:e5:e2:12:29:76: ae:d1:a6:73:54:6b:f2:44:73:9a:f5:4d:f9:9a:0f: 69:4d:6f:6e:c2:ad:02:7c:5d:66:a1:78:08:d9:94: 46:bb:b6:5f:8d:4d:50:86:0f:01:20:96:25:e2:7a: b8:68:87:7a:ff:c2:80:0e:3b:03:fb:ac:24:3f:1e: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D0:D0:F0:9F:A6:E4:2A:4C:76:74:C9:22:D2:59:43:8D:2A:A1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/22885b19-ffae-32cf-b022-3d5558dc4f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:17:69:1f:dd:74:6b:10:57:ff:cf:43:2c:cb:03:42:f7:b5: 3e:d1:db:bb:6d:a2:f6:c7:31:76:63:51:1c:d1:ac:3d:d0:0c: 19:3c:ff:dd:70:05:1d:65:e1:3d:1e:77:a7:17:14:a3:b9:79: fc:2e:12:25:2c:b0:68:c8:53:c9:e2:da:16:59:11:68:96:0a: fe:52:ad:c7:ca:07:9b:22:5f:71:5c:ae:9e:46:07:bf:46:b8: 69:e1:0d:a8:f4:88:70:96:85:7b:47:d2:f3:0a:21:dc:b6:1b: 40:bc:18:7a:7c:1e:a2:e7:aa:a1:cb:e1:10:da:f4:ba:02:48: fe:ce:5e:41:68:34:2a:ac:2d:32:0b:ed:95:fb:bb:fc:78:12: c4:a9:15:58:08:02:49:b6:ac:36:c9:72:d3:f7:b3:1b:55:bf: 87:2f:97:0f:e9:7a:b4:0f:24:77:e3:5f:78:35:79:81:9b:22: 8f:9f:59:66:96:da:12:dd:a4:b0:01:b7:57:97:7b:54:1c:07: 93:ac:d7:cc:dd:de:b3:52:ab:49:46:28:be:9c:1a:56:45:7e: 3f:e4:a7:c8:d5:67:60:e3:42:d0:80:4b:c7:53:c8:07:74:a7: f3:8d:b1:de:69:21:5e:d2:f4:32:3a:7f:18:dd:be:6c:a9:f1: 51:d3:90:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWp+e+/xa4AwLiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YzZiYjQxYmUtNjNlMi00ZWQwLWI1ZTYtYWIzYzNiMTU3Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGxlewZ0JKGDAOS3oRTHRkd8I0GYzKFUpRCt KDdEP4tBnfHr3vNn0HuETGwgbj1z9g55GMQgeKdSd5N07j3OEPIFXDrFE4VQYran LUQTC836S23jIUh8eMFeLo78iN6n7Jx1dXhjuc7Z8oDBL2ML52oAJP+/FNdBzCBk bLKL7j/7p+vWOT7JygK7uEjBWktBRp+d4p/BZlK8ShHbWV8Tt/VBFqAUxuVZ8VuA ErAAzJ9xQBm2Yg8M+W6/Vbyi5eISKXau0aZzVGvyRHOa9U35mg9pTW9uwq0CfF1m oXgI2ZRGu7ZfjU1Qhg8BIJYl4nq4aId6/8KADjsD+6wkPx4SywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnQ0PCfpuQqTHZ0ySLSWUONKqEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMjI4ODViMTktZmZhZS0z MmNmLWIwMjItM2Q1NTU4ZGM0ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzvWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQXaR/ddGsQV//PQyzLA0L3tT7R27ttovbHMXZjURzRrD3QDBk8/91w BR1l4T0ed6cXFKO5efwuEiUssGjIU8ni2hZZEWiWCv5SrcfKB5siX3Fcrp5GB79G uGnhDaj0iHCWhXtH0vMKIdy2G0C8GHp8HqLnqqHL4RDa9LoCSP7OXkFoNCqsLTIL 7ZX7u/x4EsSpFVgIAkm2rDbJctP3sxtVv4cvlw/perQPJHfjX3g1eYGbIo+fWWaW 2hLdpLABt1eXe1QcB5Os18zd3rNSq0lGKL6cGlZFfj/kp8jVZ2DjQtCAS8dTyAd0 p/ONsd5pIV7S9DI6fxjdvmyp8VHTkCc= -----END CERTIFICATE-----Generated at Mon Apr 20 05:06:54 2026 by rpki-client