$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa File: 3bc82832-766c-3b7f-8c81-125272a98e60.roa (raw, json) Hash identifier: Hdpxg9FmGr3sy/3MAI5Z81KrhSnGEmlnj75bHZiOcZI= Subject key identifier: 9E:34:8C:C3:93:32:74:FB:BB:B5:15:65:88:5F:8C:FC:63:99:69:E1 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E0005CE346207445DA2218100 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 6079 IP address blocks: 209.236.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:ce:34:62:07:44:5d:a2:21:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=5ff37fde-1f8c-4941-b516-688a9b6cdb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:68:8d:b0:7c:52:42:9e:63:5f:9a:06:c5: 1f:3b:96:69:64:fb:2f:c6:c5:84:c7:68:f7:58:64: 6d:82:09:fe:30:59:8f:3c:b0:85:32:cf:6a:7b:68: 03:ef:89:9c:0f:ca:8b:9f:ef:dd:86:41:f2:44:69: 1b:97:bf:55:a8:5e:7a:2f:e6:a7:ae:a2:51:e7:74: f1:f7:4e:20:c7:05:0e:37:a6:75:8d:86:fd:64:75: 64:fe:3e:ca:e2:cb:be:79:7d:b5:b3:16:0e:ec:46: 74:b7:dd:eb:b7:82:4d:e1:29:7b:14:9c:a2:41:ca: 9b:af:53:3a:b4:b1:2e:2a:9d:59:2e:53:ab:ec:89: 6e:10:ef:47:0e:b6:42:c9:08:ef:34:9a:d0:ee:ba: 0f:57:48:e4:bf:b9:d4:c3:7c:84:c6:89:8b:66:17: 52:08:e7:03:cf:45:82:08:5b:7b:c2:06:0d:3f:33: d6:a9:99:8e:dc:fd:5e:d4:0c:e0:59:ed:39:b7:fb: ea:82:6f:1e:4f:7c:3e:45:71:88:31:29:b1:c2:e7: b4:26:f0:b9:67:ae:ef:2c:2b:f4:bd:0e:13:98:13: 86:e4:d9:74:75:0d:e9:8d:15:f7:b8:be:39:1b:f7: 30:9d:7d:98:f9:90:43:01:87:6a:ea:ef:2f:6c:df: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:34:8C:C3:93:32:74:FB:BB:B5:15:65:88:5F:8C:FC:63:99:69:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3bc82832-766c-3b7f-8c81-125272a98e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:4a:5f:2a:92:2a:e5:73:6a:41:90:72:9e:4d:5f:95:5a: 30:23:b6:e4:24:00:f8:5f:7a:98:78:7d:e5:ef:a2:f1:de:2b: 9c:d8:77:21:83:ef:2a:d2:ee:1f:bc:00:57:3b:6f:42:12:d0: 62:9d:b7:81:3a:47:16:f3:2d:75:14:aa:5a:86:87:79:85:32: d4:63:77:90:53:7b:a2:63:dd:39:1e:43:38:a6:f4:c7:0e:00: 73:8b:7d:d5:fc:ec:74:21:a5:a5:ed:98:55:69:80:5a:60:7f: 24:48:1b:b0:14:4f:31:88:fd:59:65:99:0a:7d:90:89:45:db: 92:00:7a:99:46:20:ce:a0:7f:7d:d1:9a:95:bd:3d:f6:de:5f: 99:51:8d:0c:d7:49:d3:39:c4:56:7f:9d:c1:f7:b8:15:7d:79: 6f:f3:74:30:2a:c1:c0:be:81:f1:98:79:1e:5e:3b:fd:52:ce: 96:c1:22:c5:1e:c2:be:cb:85:e5:71:0a:6d:60:6c:f3:ef:fb: 15:62:7e:a5:0b:7b:93:2d:68:80:d4:7b:9a:6a:8e:ef:69:0a: 1f:ec:30:6c:38:7d:f1:d0:67:dd:7b:b0:58:eb:b4:1c:b8:38: 75:2b:f2:b5:9c:d9:dc:84:a3:01:67:5e:d4:df:48:a6:f3:9a: 56:8e:17:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABc40YgdEXaIhgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NWZmMzdmZGUtMWY4Yy00OTQxLWI1MTYtNjg4YTliNmNkYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ZojbB8UkKeY1+aBsUfO5ZpZPsvxsWEx2j3 WGRtggn+MFmPPLCFMs9qe2gD74mcD8qLn+/dhkHyRGkbl79VqF56L+anrqJR53Tx 904gxwUON6Z1jYb9ZHVk/j7K4su+eX21sxYO7EZ0t93rt4JN4Sl7FJyiQcqbr1M6 tLEuKp1ZLlOr7IluEO9HDrZCyQjvNJrQ7roPV0jkv7nUw3yExomLZhdSCOcDz0WC CFt7wgYNPzPWqZmO3P1e1AzgWe05t/vqgm8eT3w+RXGIMSmxwue0JvC5Z67vLCv0 vQ4TmBOG5Nl0dQ3pjRX3uL45G/cwnX2Y+ZBDAYdq6u8vbN/KIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ40jMOTMnT7u7UVZYhfjPxjmWnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2JjODI4MzItNzY2Yy0z YjdmLThjODEtMTI1MjcyYTk4ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkNSl8qkirlc2pBkHKeTV+VWjAjtuQkAPhfeph4feXvovHeK5zYdyGD 7yrS7h+8AFc7b0IS0GKdt4E6RxbzLXUUqlqGh3mFMtRjd5BTe6Jj3TkeQzim9McO AHOLfdX87HQhpaXtmFVpgFpgfyRIG7AUTzGI/VllmQp9kIlF25IAeplGIM6gf33R mpW9PfbeX5lRjQzXSdM5xFZ/ncH3uBV9eW/zdDAqwcC+gfGYeR5eO/1SzpbBIsUe wr7LheVxCm1gbPPv+xVifqULe5MtaIDUe5pqju9pCh/sMGw4ffHQZ917sFjrtBy4 OHUr8rWc2dyEowFnXtTfSKbzmlaOF+U= -----END CERTIFICATE-----Generated at Thu Jun 4 10:14:16 2026 by rpki-client