$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa File: b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa (raw, json) Hash identifier: yo66eUa76C7Et5AcbDSNUORDL9X8/7DkRt1JzBZo3G0= Subject key identifier: 10:14:7B:AF:FC:CB:42:B6:BB:94:4B:52:26:5C:9C:B9:87:35:B2:CC Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E0005CBDB2ED6CD2F6B5BD280 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 11404 IP address blocks: 209.236.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:cb:db:2e:d6:cd:2f:6b:5b:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=8fc18217-b6a1-4e0e-93b0-a82a9d1036fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:b6:70:8a:46:65:d8:d2:87:0d:d6:c0:19: c6:1f:73:64:ee:22:e5:81:3d:38:d2:e0:26:11:a3: d2:b2:37:bd:87:96:46:93:60:ba:db:3e:91:8c:5e: dd:a2:98:73:f2:5b:47:1c:62:20:74:db:f0:48:83: dd:1a:a0:5b:7a:be:20:8e:35:f6:b0:36:45:34:3d: d0:bc:a7:df:8f:41:5f:af:68:34:11:ed:8d:5e:34: 96:d0:39:21:72:08:ee:ba:ad:8f:47:67:02:1f:66: 0b:ee:a2:a8:6e:f5:a3:63:1d:3a:8c:ef:dc:7c:4b: 54:48:61:71:e3:f4:c8:19:e9:e9:7e:c5:09:ce:80: e2:d9:11:fd:59:c8:0d:9e:b6:b3:e8:bf:f1:68:09: 7e:f7:43:bf:1a:31:b6:86:8a:b7:b0:96:cc:e9:15: dc:f3:87:8b:d0:c0:34:4e:6c:06:9c:39:cf:80:a9: c3:fe:15:61:85:78:9f:a8:88:cd:5b:2e:08:0f:eb: 68:97:fd:b8:15:e6:0c:c9:0e:79:a0:11:7a:aa:71: 9d:75:bd:65:b5:c7:78:c9:5f:28:40:3c:1d:fb:0c: 6e:1c:08:68:43:77:7d:c4:bc:53:dd:2a:60:d0:69: ec:1b:c0:37:21:7e:d1:1d:2b:18:ea:43:5d:a6:f9: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:7B:AF:FC:CB:42:B6:BB:94:4B:52:26:5C:9C:B9:87:35:B2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f8:c5:01:48:37:5f:8b:22:dc:9e:e6:3e:ea:cf:82:58:c3: a5:83:10:4a:a9:cf:1b:23:29:a0:7e:40:1b:08:ed:a3:01:66: ab:29:58:85:f7:0a:12:98:43:5e:89:d3:96:ca:bc:4e:a7:1c: d3:ce:36:ca:b3:33:c5:f6:08:c3:57:74:aa:b0:48:b7:20:84: dc:c9:d6:87:59:74:5c:83:9f:28:ae:2c:7c:9e:5b:b9:43:1b: b0:e2:f5:bb:00:11:7a:65:05:2d:46:11:d0:56:89:49:05:9a: 14:b3:a6:d1:b2:11:89:b8:46:fb:e0:da:ae:f3:6f:b1:38:1c: a0:ec:f0:4e:db:f5:94:84:7f:5f:5e:29:76:b8:1b:a3:f4:5d: 6a:18:3e:82:ab:98:14:f0:2e:39:44:ee:37:a4:ac:cf:90:2d: 88:31:91:9d:41:5c:81:fc:48:ce:60:5b:2a:e2:fc:00:8f:61: f7:b2:06:af:1a:ab:96:b2:c0:44:6b:1f:0d:71:a2:9a:a2:bd: 94:af:45:0b:37:b7:a7:2b:19:2f:30:74:3d:c2:bf:52:3a:56: 0a:75:6f:61:d4:af:93:bc:dd:ff:2a:76:5a:32:dd:cf:db:f8: ed:d6:c9:10:ad:cc:db:75:c4:35:4d:e2:a4:cb:f1:88:96:dc: 9b:ca:1e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABcvbLtbNL2tb0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OGZjMTgyMTctYjZhMS00ZTBlLTkzYjAtYTgyYTlkMTAzNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj22cIpGZdjShw3WwBnGH3Nk7iLlgT040uAm EaPSsje9h5ZGk2C62z6RjF7dophz8ltHHGIgdNvwSIPdGqBber4gjjX2sDZFND3Q vKffj0Ffr2g0Ee2NXjSW0Dkhcgjuuq2PR2cCH2YL7qKobvWjYx06jO/cfEtUSGFx 4/TIGenpfsUJzoDi2RH9WcgNnraz6L/xaAl+90O/GjG2hoq3sJbM6RXc84eL0MA0 TmwGnDnPgKnD/hVhhXifqIjNWy4ID+tol/24FeYMyQ55oBF6qnGddb1ltcd4yV8o QDwd+wxuHAhoQ3d9xLxT3Spg0GnsG8A3IX7RHSsY6kNdpvkBnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAUe6/8y0K2u5RLUiZcnLmHNbLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYjZiNDUzZTctNWQyZi0z N2ZjLTkzYmEtZGFjOTY3ODFkMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH4xQFIN1+LItye5j7qz4JYw6WDEEqpzxsjKaB+QBsI7aMBZqspWIX3 ChKYQ16J05bKvE6nHNPONsqzM8X2CMNXdKqwSLcghNzJ1odZdFyDnyiuLHyeW7lD G7Di9bsAEXplBS1GEdBWiUkFmhSzptGyEYm4Rvvg2q7zb7E4HKDs8E7b9ZSEf19e KXa4G6P0XWoYPoKrmBTwLjlE7jekrM+QLYgxkZ1BXIH8SM5gWyri/ACPYfeyBq8a q5aywERrHw1xopqivZSvRQs3t6crGS8wdD3Cv1I6Vgp1b2HUr5O83f8qdloy3c/b +O3WyRCtzNt1xDVN4qTL8YiW3JvKHi0= -----END CERTIFICATE-----Generated at Thu Jun 4 11:23:50 2026 by rpki-client