$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa File: 8caf9660-d639-3192-94c6-0908db45c913.roa (raw, json) Hash identifier: pg9yE1K821l6rHaEz5mf/o1LrJ8ndVDdB2ZA897JgNI= Subject key identifier: 04:39:A6:EA:48:80:08:EA:66:A4:DD:BE:A2:9E:71:E3:EF:2C:96:78 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584DE3216959D0586827B8A94600 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa Signing time: Tue 19 May 2026 16:37:23 +0000 ROA not before: Tue 19 May 2026 16:37:23 +0000 ROA not after: Mon 17 Aug 2026 16:37:23 +0000 asID: 29182 IP address blocks: 206.245.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e3:21:69:59:d0:58:68:27:b8:a9:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 19 16:37:23 2026 GMT Not After : Aug 17 16:37:23 2026 GMT Subject: CN=b3a5efb6-404d-4a1c-97ad-dc37bc4495ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:cd:b4:18:71:a7:52:68:88:f4:37:20:15: 0f:13:b8:36:f3:93:25:d7:7e:b6:29:54:b7:8d:55: 28:9d:f1:31:43:44:b0:58:a3:59:89:11:ee:44:d3: e2:1d:01:70:31:e1:0f:fe:e8:75:ff:ef:7e:6a:74: a2:60:ed:1d:cd:68:e2:64:92:54:e2:29:6b:11:90: 25:27:35:44:b3:69:14:3f:e7:db:80:27:12:9f:78: 6c:45:a5:ac:a9:ff:0e:67:a1:d6:dc:7a:c1:6d:42: ea:79:a6:1b:0f:56:36:f0:5f:0c:60:7f:30:85:47: 28:24:39:4d:b8:d2:59:b1:8e:a1:d7:4e:0a:39:48: 21:39:0b:6c:9d:d1:e6:2a:62:52:52:42:68:bf:c5: 71:f1:0e:91:2d:95:2f:81:0d:47:90:4f:86:96:3a: 9f:b8:ab:3f:3d:cd:51:77:95:b0:69:fc:6d:ba:aa: e6:d3:da:f7:67:ec:cd:89:6c:b7:96:70:1c:e7:43: 45:e5:54:6a:01:1c:e9:61:8f:68:e2:4d:5e:47:e2: 10:86:f3:b8:83:8f:94:91:21:46:9c:3d:99:f5:e0: 27:64:bb:15:5c:66:16:a6:28:62:80:27:ec:7c:9f: f9:09:5f:c2:e6:4c:32:92:89:84:a0:65:31:e0:e1: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:A6:EA:48:80:08:EA:66:A4:DD:BE:A2:9E:71:E3:EF:2C:96:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:87:1f:85:1d:f4:a6:83:e2:e6:ea:e0:e0:51:6b:28:98:a8: d6:eb:b8:f2:9f:6d:88:93:7a:fe:72:e7:c0:42:ef:e9:41:ce: 17:a3:23:43:51:98:35:2d:02:4e:bc:25:04:c0:17:1e:c7:94: 9b:86:d4:22:04:43:fc:57:46:d0:9a:29:ac:71:65:4b:f5:2a: 09:ec:06:9c:9f:cb:0e:01:af:a8:80:66:66:78:38:3e:ef:fe: 55:08:ca:e2:dd:fa:c8:7d:07:cc:a8:00:9e:cd:73:fd:7c:ec: fd:a9:0c:86:c7:e0:43:84:48:9e:9a:b6:36:12:c5:12:2a:91: a5:7c:67:57:67:04:8a:99:96:7d:9d:02:58:80:5b:71:71:31: 76:a5:06:4d:ec:e2:d3:a6:ca:85:e0:3d:7b:42:15:05:74:d3: 52:6f:0e:54:c9:ae:ef:62:a4:d2:ad:29:1a:b2:03:ce:76:0e: 61:62:5e:d3:9f:00:ac:01:82:71:03:14:1a:15:6c:c6:3f:18: 61:fc:28:3e:5b:e1:a9:5c:5e:f2:63:8f:6e:a3:51:c5:1b:39: ef:4d:52:f2:d0:b0:97:9f:af:24:2a:c3:c8:8a:ef:80:12:0f: 87:f4:32:f5:42:6a:b8:fd:26:18:17:61:d0:6f:fe:7c:11:1e: 1d:66:00:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3jIWlZ0FhoJ7ipRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUxOTE2MzcyM1oXDTI2MDgxNzE2MzcyM1owLzEtMCsGA1UEAxMk YjNhNWVmYjYtNDA0ZC00YTFjLTk3YWQtZGMzN2JjNDQ5NWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocrNtBhxp1JoiPQ3IBUPE7g285Ml1362KVS3 jVUonfExQ0SwWKNZiRHuRNPiHQFwMeEP/uh1/+9+anSiYO0dzWjiZJJU4ilrEZAl JzVEs2kUP+fbgCcSn3hsRaWsqf8OZ6HW3HrBbULqeaYbD1Y28F8MYH8whUcoJDlN uNJZsY6h104KOUghOQtsndHmKmJSUkJov8Vx8Q6RLZUvgQ1HkE+GljqfuKs/Pc1R d5Wwafxtuqrm09r3Z+zNiWy3lnAc50NF5VRqARzpYY9o4k1eR+IQhvO4g4+UkSFG nD2Z9eAnZLsVXGYWpihigCfsfJ/5CV/C5kwykomEoGUx4OHGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ5pupIgAjqZqTdvqKecePvLJZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOGNhZjk2NjAtZDYzOS0z MTkyLTk0YzYtMDkwOGRiNDVjOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaHH4Ud9KaD4ubq4OBRayiYqNbruPKfbYiTev5y58BC7+lBzhejI0NR mDUtAk68JQTAFx7HlJuG1CIEQ/xXRtCaKaxxZUv1KgnsBpyfyw4Br6iAZmZ4OD7v /lUIyuLd+sh9B8yoAJ7Nc/187P2pDIbH4EOESJ6atjYSxRIqkaV8Z1dnBIqZln2d AliAW3FxMXalBk3s4tOmyoXgPXtCFQV001JvDlTJru9ipNKtKRqyA852DmFiXtOf AKwBgnEDFBoVbMY/GGH8KD5b4alcXvJjj26jUcUbOe9NUvLQsJefryQqw8iK74AS D4f0MvVCarj9JhgXYdBv/nwRHh1mAE0= -----END CERTIFICATE-----Generated at Thu Jun 4 10:08:18 2026 by rpki-client