$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa File: 2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa (raw, json) Hash identifier: fgajgO3xs2EY1c1J5jJNYX+cqjvtWg1AIMtjVvcwnwQ= Subject key identifier: 3C:2B:7C:B7:A1:05:84:E6:79:FA:E8:B8:73:76:9D:3D:63:52:9A:24 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E89BF926E99D2D6FC73110980 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 2914 IP address blocks: 108.59.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:92:6e:99:d2:d6:fc:73:11:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=981637ba-fef6-49ea-803e-c9958733c573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:a6:d0:2c:a6:6c:96:9a:8c:a0:fe:ed:fa: ab:b4:18:98:3d:a4:fa:d5:de:25:4d:35:9f:e0:01: ad:ef:58:72:17:4e:7a:c4:07:d4:77:c7:04:57:56: d6:28:2d:3c:db:c3:74:bf:4c:78:d5:eb:d9:a3:48: c6:ba:81:6e:0f:b4:50:1f:46:be:df:82:8c:8b:e2: ff:26:d6:5c:9f:d7:c2:04:82:ee:cf:d4:7b:94:04: 02:36:fc:62:b3:45:f8:cf:85:8e:1c:f7:27:1c:18: 9b:93:b4:89:54:37:39:51:d0:0e:fc:db:63:a5:52: 25:9e:69:e6:ae:fd:4f:0c:27:ab:3b:19:23:8b:b6: 33:b5:ad:8d:3e:c9:9d:14:25:c5:36:7b:21:71:51: 62:34:2d:17:14:07:08:e7:93:01:ec:3c:e0:65:4c: de:6f:5e:01:91:76:ba:d6:d2:27:b2:f7:17:46:f2: 66:a8:36:ac:48:38:56:b7:c3:39:ce:f2:ce:c7:64: 55:9b:2e:f1:9c:f8:4a:96:81:35:55:1c:4f:0d:3a: 91:e5:56:cd:c9:60:d0:84:07:e7:03:5d:f3:7f:df: b3:72:85:55:e3:85:64:2f:15:27:e8:39:66:ca:06: 48:9c:40:93:c9:c4:8d:88:15:a6:83:b4:53:e1:3f: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:7C:B7:A1:05:84:E6:79:FA:E8:B8:73:76:9D:3D:63:52:9A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2a67213c-5d7b-3438-b3b6-6bc6f835d11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d0:5f:89:3e:a5:5a:c5:ce:b5:41:c4:f3:14:4a:b5:36:d7: ad:1d:1b:fc:6f:33:f4:44:65:be:17:c6:c1:22:a9:f5:ed:41: 02:c5:65:10:1b:e0:e9:83:89:50:23:71:e3:5b:9e:ec:ff:92: 84:0d:57:b6:72:35:b3:bd:65:96:37:e9:32:51:87:a3:19:22: 0f:2a:32:0b:9a:a6:93:12:80:be:d0:e0:4e:23:04:47:d5:d5: ac:a3:0a:9e:bb:2c:6f:aa:0a:48:d5:2b:6e:b6:7f:d8:31:aa: 2e:88:cb:d4:f6:a2:08:23:2b:cc:08:76:9c:25:9e:b4:1d:bf: 93:43:ee:1c:d1:11:4d:ed:22:13:56:98:bc:b6:de:53:33:52: 12:3e:9a:7e:a7:41:16:66:dd:99:90:3f:31:a0:17:ed:70:6d: 90:70:e4:dc:a3:b7:4e:93:e4:9f:a2:f5:ff:e4:3b:71:f2:75: 65:81:83:f4:a3:ee:2d:81:fd:a7:26:ff:53:d1:4c:46:b8:dc: 15:d0:2e:be:42:cf:96:65:40:2e:ea:52:38:70:3f:8b:0a:ec: e2:0f:aa:ae:16:57:01:4a:eb:f4:b1:b8:6f:41:e4:08:8c:5c: c0:e3:3f:2d:f2:65:ce:13:8c:db:b5:22:95:c1:dd:1c:4e:04: 29:27:7d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Jv5JumdLW/HMRCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk OTgxNjM3YmEtZmVmNi00OWVhLTgwM2UtYzk5NTg3MzNjNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvSm0CymbJaajKD+7fqrtBiYPaT61d4lTTWf 4AGt71hyF056xAfUd8cEV1bWKC0828N0v0x41evZo0jGuoFuD7RQH0a+34KMi+L/ JtZcn9fCBILuz9R7lAQCNvxis0X4z4WOHPcnHBibk7SJVDc5UdAO/NtjpVIlnmnm rv1PDCerOxkji7Yzta2NPsmdFCXFNnshcVFiNC0XFAcI55MB7DzgZUzeb14BkXa6 1tInsvcXRvJmqDasSDhWt8M5zvLOx2RVmy7xnPhKloE1VRxPDTqR5VbNyWDQhAfn A13zf9+zcoVV44VkLxUn6DlmygZInECTycSNiBWmg7RT4T/LLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwrfLehBYTmefrouHN2nT1jUpokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMmE2NzIxM2MtNWQ3Yi0z NDM4LWIzYjYtNmJjNmY4MzVkMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnQX4k+pVrFzrVBxPMUSrU2160dG/xvM/REZb4XxsEiqfXtQQLFZRAb 4OmDiVAjceNbnuz/koQNV7ZyNbO9ZZY36TJRh6MZIg8qMguappMSgL7Q4E4jBEfV 1ayjCp67LG+qCkjVK262f9gxqi6Iy9T2oggjK8wIdpwlnrQdv5ND7hzREU3tIhNW mLy23lMzUhI+mn6nQRZm3ZmQPzGgF+1wbZBw5Nyjt06T5J+i9f/kO3HydWWBg/Sj 7i2B/acm/1PRTEa43BXQLr5Cz5ZlQC7qUjhwP4sK7OIPqq4WVwFK6/SxuG9B5AiM XMDjPy3yZc4TjNu1IpXB3RxOBCknfQE= -----END CERTIFICATE-----Generated at Tue Jul 21 11:19:44 2026 by rpki-client