$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/aa5a5ee6-7d5e-3181-9496-14141425bdba.roa File: aa5a5ee6-7d5e-3181-9496-14141425bdba.roa (raw, json) Hash identifier: ndj0Xv/6rvN72VRVqR5UXMOzu2SIkmGmfAv3oSz3TyA= Subject key identifier: 40:13:36:D8:89:F0:5B:26:F4:C7:E0:25:4A:D8:69:AF:CD:97:31:6D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584D905AA32F52ABB8994D746980 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/aa5a5ee6-7d5e-3181-9496-14141425bdba.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 205220 IP address blocks: 206.245.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a3:2f:52:ab:b8:99:4d:74:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=a80a0334-ec92-4a70-a761-f5ad81be0098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:9d:9c:1a:4b:2b:45:ed:10:24:88:34:87: 81:9c:2e:66:47:f6:8f:03:9c:c8:53:ec:31:65:3e: 4b:d1:60:f6:64:02:ca:e1:69:88:6d:83:a8:f1:b5: 84:8c:4d:ad:2a:41:5b:a5:18:70:23:d0:ac:78:d0: a8:2d:ec:19:01:ca:db:a6:91:e8:6d:66:9a:91:1e: a4:19:b0:7e:bf:37:d8:d4:72:7c:6c:95:35:fd:5f: 8e:0a:7a:50:0c:ba:ad:55:11:e6:ff:79:c6:3e:95: 7c:42:da:dd:e9:87:38:66:f6:86:aa:ff:37:5c:1e: a0:8b:fc:40:91:27:c5:0a:6c:0a:67:72:f5:8e:25: d3:d8:74:f8:8b:ed:55:73:8d:ee:17:79:51:3e:3a: 97:c0:11:dd:bb:c3:6d:19:31:ad:35:70:5a:8e:38: 96:64:e4:19:08:7b:b1:c3:96:bd:bd:b8:37:98:db: be:63:00:53:43:46:77:eb:d4:f5:74:a3:cb:19:ad: 9e:92:cb:a5:56:25:a5:5d:d1:62:dd:03:ae:ef:01: 64:14:81:d0:8c:3f:22:8b:d7:df:7a:3e:ef:be:0f: b1:47:38:b4:54:4f:34:84:84:05:46:70:9a:5d:a3: b6:39:ae:ce:6e:53:8a:56:c4:9e:94:56:31:60:34: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:36:D8:89:F0:5B:26:F4:C7:E0:25:4A:D8:69:AF:CD:97:31:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/aa5a5ee6-7d5e-3181-9496-14141425bdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:21:54:74:9c:93:3e:81:52:cc:bd:7b:37:7e:3a:67:28:78: b5:e9:b4:17:9d:ec:ed:47:83:1f:4e:2b:7d:10:6b:b8:48:b3: a7:91:b0:4f:c6:8c:da:ab:dc:28:b4:7e:35:a1:61:f0:64:b5: 23:0a:3d:c0:09:5a:fc:d6:99:56:6d:7f:47:85:c2:a5:ec:5f: 7e:e8:6c:d9:7d:34:6c:89:12:fc:30:7f:e0:cd:97:cf:db:49: ee:62:a4:49:3e:6b:e9:02:55:3f:e4:8f:4f:39:ed:ed:c8:74: 04:d9:65:3a:5a:ae:6b:84:49:c5:d8:bc:93:04:bd:f4:49:53: 9a:f8:19:a1:34:1f:75:9c:df:58:80:b7:33:7d:3f:91:bf:f8: c9:cd:a5:56:fb:35:d2:95:68:36:b8:cb:ff:46:3b:b4:7a:6c: de:e3:61:20:28:5f:cd:3d:50:bf:d2:3f:c5:59:ce:55:2a:c8: b8:64:bc:34:d0:54:3c:33:93:02:5f:48:e1:10:b1:33:2b:e7: 4b:3c:fd:4c:2f:f7:f6:8b:95:99:37:16:13:30:55:d6:9f:de: 56:d8:e0:d9:5d:1d:09:e7:df:b8:02:d4:bb:d0:3d:53:0b:84: 01:1e:ee:b1:7f:bc:1b:5f:a7:dc:21:5a:80:ed:5e:15:e8:2f: de:41:fd:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqMvUqu4mU10aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk YTgwYTAzMzQtZWM5Mi00YTcwLWE3NjEtZjVhZDgxYmUwMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbednBpLK0XtECSINIeBnC5mR/aPA5zIU+wx ZT5L0WD2ZALK4WmIbYOo8bWEjE2tKkFbpRhwI9CseNCoLewZAcrbppHobWaakR6k GbB+vzfY1HJ8bJU1/V+OCnpQDLqtVRHm/3nGPpV8Qtrd6Yc4ZvaGqv83XB6gi/xA kSfFCmwKZ3L1jiXT2HT4i+1Vc43uF3lRPjqXwBHdu8NtGTGtNXBajjiWZOQZCHux w5a9vbg3mNu+YwBTQ0Z369T1dKPLGa2eksulViWlXdFi3QOu7wFkFIHQjD8ii9ff ej7vvg+xRzi0VE80hIQFRnCaXaO2Oa7OblOKVsSelFYxYDQmhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEATNtiJ8Fsm9MfgJUrYaa/NlzFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYWE1YTVlZTYtN2Q1ZS0z MTgxLTk0OTYtMTQxNDE0MjViZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAhVHSckz6BUsy9ezd+OmcoeLXptBed7O1Hgx9OK30Qa7hIs6eRsE/G jNqr3Ci0fjWhYfBktSMKPcAJWvzWmVZtf0eFwqXsX37obNl9NGyJEvwwf+DNl8/b Se5ipEk+a+kCVT/kj0857e3IdATZZTparmuEScXYvJMEvfRJU5r4GaE0H3Wc31iA tzN9P5G/+MnNpVb7NdKVaDa4y/9GO7R6bN7jYSAoX809UL/SP8VZzlUqyLhkvDTQ VDwzkwJfSOEQsTMr50s8/Uwv9/aLlZk3FhMwVdaf3lbY4NldHQnn37gC1LvQPVML hAEe7rF/vBtfp9whWoDtXhXoL95B/Yg= -----END CERTIFICATE-----Generated at Mon Apr 20 05:06:44 2026 by rpki-client