$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa File: ba6a2a50-610d-30d5-92b0-69d079d11724.roa (raw, json) Hash identifier: nZ9nqTKbgdj7fTfUdu4AZ0ZBfYDYGirsbkOpyohov0U= Subject key identifier: 63:AD:FC:DC:68:54:68:CA:39:80:5E:47:A5:0F:EF:CE:3A:E9:24:4D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E0006253153FD0E53C28BF1C0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 6079 IP address blocks: 209.236.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:25:31:53:fd:0e:53:c2:8b:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=61387b10-ef68-40e1-869c-bce3213ee3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:f3:56:64:61:de:e8:f7:bb:99:87:c2:bc: a2:9f:d2:18:7d:fa:63:e7:93:56:5a:73:ef:53:91: f4:4d:cb:a6:76:38:60:9b:ea:0f:10:fb:4e:a0:ba: 40:81:b5:b6:37:40:77:fb:1d:6d:31:b8:69:57:69: 52:64:fa:2b:99:24:bf:84:49:e1:b0:89:3c:1d:28: d8:e0:96:fc:04:d3:13:37:e6:12:94:4a:51:55:e4: 89:40:c9:bf:86:1b:e6:67:90:24:73:96:b2:22:4e: 35:40:37:bf:00:c9:16:d5:36:24:38:58:82:2a:d7: 6a:d1:73:5f:6c:0a:f8:fb:ba:d7:1a:0c:13:a5:0f: 93:bb:4e:5a:a1:e9:9e:82:4a:a9:f9:fb:f4:a3:4f: a9:40:82:3a:d3:8e:22:ff:b6:b9:fe:4d:db:2c:98: 9f:cb:50:2f:9c:cf:d0:6c:50:bb:df:fa:f0:dc:f1: e7:88:b0:18:81:86:8d:a4:bc:d0:da:11:6f:e9:61: 1f:2d:58:eb:fe:11:ea:b8:3f:e7:55:c6:ac:0f:00: fc:ed:02:f2:69:91:e4:c4:5c:46:67:74:dc:04:6c: af:bb:63:5a:89:88:e6:58:45:ce:1d:43:69:74:4c: 68:7c:d9:4b:53:b7:9b:36:8d:54:48:56:24:80:6a: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:FC:DC:68:54:68:CA:39:80:5E:47:A5:0F:EF:CE:3A:E9:24:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6b:be:57:0c:54:2c:54:b4:f2:f4:97:ce:c3:17:2f:c7:8c: 04:e7:91:db:ec:b4:ec:e0:3f:3a:aa:e6:b7:fb:82:43:07:5f: f7:4c:c3:35:5d:bd:f9:b2:91:04:60:58:c5:94:92:b8:f6:5f: bc:61:6c:d8:8c:9b:3c:7f:aa:1c:be:89:af:0b:8d:c5:21:d9: d0:fc:4a:59:57:18:2b:f0:8f:d9:ba:f4:1e:f5:79:4c:ff:66: f1:99:e8:8f:06:9e:bb:31:7a:2f:eb:84:ab:ad:53:29:72:da: fe:e7:62:88:30:e0:05:c0:ea:20:29:34:15:ff:c0:3e:0e:b7: a7:1b:d3:06:47:19:bc:3f:70:f0:b3:59:b7:95:e6:56:d5:35: 93:8d:9d:ed:36:cc:e6:bc:6f:69:e6:59:d0:22:99:4f:f1:d9: c1:df:27:8b:00:5c:1b:8a:04:3b:64:4e:92:5a:fc:b4:9b:73: e8:72:40:6b:3c:af:10:fe:55:65:bc:4a:d6:fb:72:df:51:f6: 8f:90:c0:c9:67:16:7a:70:ce:26:a0:4e:1a:89:17:24:ce:ab: 8a:78:97:c3:90:d6:b2:91:d4:8d:4c:ba:4d:7e:b2:d7:92:0f: 37:2e:2e:96:f2:50:0c:5c:a7:c7:dd:67:d4:d2:50:8c:3e:59: ca:0d:a7:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABiUxU/0OU8KL8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NjEzODdiMTAtZWY2OC00MGUxLTg2OWMtYmNlMzIxM2VlM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVfzVmRh3uj3u5mHwryin9IYffpj55NWWnPv U5H0Tcumdjhgm+oPEPtOoLpAgbW2N0B3+x1tMbhpV2lSZPormSS/hEnhsIk8HSjY 4Jb8BNMTN+YSlEpRVeSJQMm/hhvmZ5Akc5ayIk41QDe/AMkW1TYkOFiCKtdq0XNf bAr4+7rXGgwTpQ+Tu05aoemegkqp+fv0o0+pQII6044i/7a5/k3bLJify1AvnM/Q bFC73/rw3PHniLAYgYaNpLzQ2hFv6WEfLVjr/hHquD/nVcasDwD87QLyaZHkxFxG Z3TcBGyvu2NaiYjmWEXOHUNpdExofNlLU7ebNo1USFYkgGpzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOt/NxoVGjKOYBeR6UP78466SRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmE2YTJhNTAtNjEwZC0z MGQ1LTkyYjAtNjlkMDc5ZDExNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNrvlcMVCxUtPL0l87DFy/HjATnkdvstOzgPzqq5rf7gkMHX/dMwzVd vfmykQRgWMWUkrj2X7xhbNiMmzx/qhy+ia8LjcUh2dD8SllXGCvwj9m69B71eUz/ ZvGZ6I8Gnrsxei/rhKutUyly2v7nYogw4AXA6iApNBX/wD4Ot6cb0wZHGbw/cPCz WbeV5lbVNZONne02zOa8b2nmWdAimU/x2cHfJ4sAXBuKBDtkTpJa/LSbc+hyQGs8 rxD+VWW8Stb7ct9R9o+QwMlnFnpwziagThqJFyTOq4p4l8OQ1rKR1I1Muk1+steS DzcuLpbyUAxcp8fdZ9TSUIw+WcoNp6A= -----END CERTIFICATE-----Generated at Thu Jun 4 10:13:41 2026 by rpki-client