$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa File: a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa (raw, json) Hash identifier: +fAzKxXd7+9/4kq/kyWSeQ5njh9HjWr9NiqjSh6HzGE= Subject key identifier: 18:F0:49:09:AC:CE:9C:93:03:15:D1:74:1C:52:69:0C:05:C7:74:E8 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E0006279E08A9485E04243440 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 11404 IP address blocks: 209.236.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:27:9e:08:a9:48:5e:04:24:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=15a6ff40-2346-42ba-a365-38a0d62d1b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:84:0c:62:6b:76:06:95:9e:c3:76:e5:b1: 8e:3f:05:73:8e:53:81:6b:da:e2:3e:2a:16:a4:0f: 7c:9f:cc:7f:4b:de:8e:91:fb:de:a1:9f:2b:1f:d3: 64:bf:bd:6e:6c:45:97:3a:2f:37:36:90:92:c6:ca: e8:ce:da:21:7e:21:c5:e7:65:1d:5e:5a:25:5e:b0: e2:af:e6:1e:00:ac:a8:b2:bf:9f:48:81:0a:5b:5d: 62:d2:1b:19:de:f8:46:96:f9:d5:d6:78:9e:cd:32: 1f:a2:22:2f:61:ba:9a:6c:3d:d7:d0:dd:13:1a:5d: 62:9b:8a:e9:15:aa:45:db:1d:93:36:92:29:c8:5c: 4d:f0:72:c5:d0:05:19:a7:0d:10:7d:ef:48:78:9f: 2f:f1:a6:98:9b:5d:48:86:54:6f:5c:c5:44:c9:0f: 85:7e:6c:3c:fa:85:e9:94:e1:7f:67:dd:e6:fb:44: 09:c9:4a:d9:0c:8a:67:66:56:53:f7:53:06:6a:f7: b6:c2:d5:93:ed:50:41:06:80:f0:58:6c:53:3d:f9: 13:8d:8b:ee:c4:4e:20:ee:3b:6b:a8:bb:b5:d3:16: ab:22:f2:7f:ab:96:0b:a5:87:e3:86:09:5b:d9:3d: 7f:ac:f1:cf:ad:e1:6b:86:43:ea:e8:a4:dd:76:a4: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:49:09:AC:CE:9C:93:03:15:D1:74:1C:52:69:0C:05:C7:74:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:86:40:31:4e:1e:fe:e6:09:05:9c:3b:bf:66:60:c4:e0:84: 86:e5:50:5d:96:ee:82:d7:60:28:e1:a5:9c:9c:a3:3e:12:1a: 88:9c:5f:e8:af:5f:52:aa:58:ec:55:aa:99:33:67:12:76:43: 0f:4b:13:28:6d:7a:6a:88:57:b4:af:fa:44:1e:c7:8e:f4:9e: 86:3b:01:d8:aa:a9:2f:b6:f7:66:be:94:69:a3:7b:cb:07:84: fa:c1:80:c9:c3:b3:29:a5:d9:57:45:30:54:f8:8b:9b:76:54: 76:ef:22:a3:c3:f9:d0:31:9b:75:93:8d:c5:de:8b:11:24:ce: 32:7e:61:bc:6c:2a:0f:02:e6:e8:92:89:25:a8:8c:8e:73:79: 0d:16:21:1f:6d:78:5e:78:d5:b1:de:56:fc:dd:01:04:42:54: 0c:24:87:8e:09:c9:5b:3b:93:72:e6:21:df:27:9f:17:50:05: f1:7a:e9:3d:37:f2:f4:ac:d6:0e:30:05:69:62:ee:76:a5:11: 65:01:d2:24:83:54:4e:62:7d:c0:05:ef:c1:28:88:0c:56:28: fe:59:90:ff:1a:b6:a0:a1:36:3b:a2:55:e8:d8:6b:c4:2e:27: db:90:ee:5b:6a:16:8b:65:f5:de:db:10:21:f0:1e:8d:b0:b9: c5:98:0a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABieeCKlIXgQkNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MTVhNmZmNDAtMjM0Ni00MmJhLWEzNjUtMzhhMGQ2MmQxYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqEDGJrdgaVnsN25bGOPwVzjlOBa9riPioW pA98n8x/S96OkfveoZ8rH9Nkv71ubEWXOi83NpCSxsroztohfiHF52UdXlolXrDi r+YeAKyosr+fSIEKW11i0hsZ3vhGlvnV1niezTIfoiIvYbqabD3X0N0TGl1im4rp FapF2x2TNpIpyFxN8HLF0AUZpw0Qfe9IeJ8v8aaYm11IhlRvXMVEyQ+Ffmw8+oXp lOF/Z93m+0QJyUrZDIpnZlZT91MGave2wtWT7VBBBoDwWGxTPfkTjYvuxE4g7jtr qLu10xarIvJ/q5YLpYfjhglb2T1/rPHPreFrhkPq6KTddqT+AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjwSQmszpyTAxXRdBxSaQwFx3ToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYThjNTExZjMtZTNkOC0z MDU4LTk5OTEtNjBhODlkMmRkMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaGQDFOHv7mCQWcO79mYMTghIblUF2W7oLXYCjhpZycoz4SGoicX+iv X1KqWOxVqpkzZxJ2Qw9LEyhtemqIV7Sv+kQex470noY7AdiqqS+292a+lGmje8sH hPrBgMnDsyml2VdFMFT4i5t2VHbvIqPD+dAxm3WTjcXeixEkzjJ+YbxsKg8C5uiS iSWojI5zeQ0WIR9teF541bHeVvzdAQRCVAwkh44JyVs7k3LmId8nnxdQBfF66T03 8vSs1g4wBWli7nalEWUB0iSDVE5ifcAF78EoiAxWKP5ZkP8atqChNjuiVejYa8Qu J9uQ7ltqFotl9d7bECHwHo2wucWYCiA= -----END CERTIFICATE-----Generated at Thu Jun 4 11:23:59 2026 by rpki-client