$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa File: ba6a2a50-610d-30d5-92b0-69d079d11724.roa (raw, json) Hash identifier: 9Kv3Es0eJUTVoOHGKdYqfTx86rcJmjLM05zFiO3Wzns= Subject key identifier: 17:8D:9C:19:7C:6D:06:2F:C9:A7:2F:4B:88:02:8A:54:1A:BC:B1:C5 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584EA79B1EE0F0B7526403FDB280 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6079 IP address blocks: 209.236.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:1e:e0:f0:b7:52:64:03:fd:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=49c44439-836a-4dbd-a585-50998f12a39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:63:52:8b:98:13:52:be:ab:c5:fc:1d:c9: 10:4d:34:e9:f8:f9:7c:12:a9:9c:02:2b:0e:f8:e8: 91:f7:0c:b5:17:98:e5:45:9d:b8:59:b3:d7:37:dc: 3b:71:2f:6f:7b:fb:e1:33:7e:05:93:9c:8e:3e:9b: f7:63:22:83:54:3a:9d:39:3f:92:4c:6e:de:12:6e: 91:5f:80:7b:fd:bf:1b:52:22:70:df:9c:86:c4:8f: f0:0e:18:e9:66:a8:ae:b3:23:87:df:6f:98:9c:3c: 03:b8:74:01:01:73:b5:4d:3a:a0:fd:c0:cd:26:76: 09:a5:94:4e:d0:35:09:cc:74:81:5b:cb:fa:e1:4d: 9b:a5:a4:07:72:45:00:9b:78:29:6c:e9:51:c1:8e: a0:5f:1a:6f:ca:d0:17:54:52:1c:6c:bf:d6:fd:0b: 53:d2:07:38:29:56:c3:b0:bf:15:05:6f:5f:c3:ce: b1:46:bb:13:8f:a4:77:d2:51:3c:fb:97:06:b2:63: ac:75:54:76:47:ce:35:82:25:cd:a2:f9:c2:61:ef: 74:f3:77:ac:26:d5:68:31:db:23:e1:2b:ff:42:e7: ff:5b:74:da:b5:dc:f8:9b:25:4d:d8:64:f7:e2:1d: 66:71:fd:ce:69:95:ed:dd:9b:a7:ea:e2:65:98:e8: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8D:9C:19:7C:6D:06:2F:C9:A7:2F:4B:88:02:8A:54:1A:BC:B1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ba6a2a50-610d-30d5-92b0-69d079d11724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:67:6b:44:d2:d2:ea:e6:1e:24:c9:63:b4:1e:ce:8c:b1:37: f6:94:47:ce:8f:38:33:1a:88:1d:7b:ab:27:7b:8c:92:e7:59: d0:06:38:5a:86:86:85:63:03:d9:20:29:9d:50:b2:e0:a2:ca: 8a:78:f7:f0:06:81:8f:57:26:dc:b8:79:9c:ca:3c:04:b1:32: d7:02:a0:17:ae:a2:ec:74:15:0e:bc:55:3e:03:74:74:26:3f: 69:ce:0e:f3:61:87:84:0b:b6:8c:70:84:56:55:a4:99:76:af: 87:94:7f:19:31:b8:a9:e5:f2:62:fe:82:4b:f7:4d:54:60:ff: 5a:cc:33:eb:3a:85:7e:64:75:44:9a:08:6b:d9:20:b5:48:ae: 2c:84:f6:87:f0:7c:d2:1e:20:9f:90:3e:18:1b:e7:e3:5b:02: da:70:a7:e0:48:f2:34:1f:b0:3c:0b:99:58:61:e5:7c:f0:50: 3a:9e:73:6c:13:9a:bc:5f:b9:77:2c:52:6b:b3:c0:2e:1c:89: d1:c2:96:40:b6:fb:d3:71:13:6f:6a:22:14:70:2a:af:bf:32: d8:1e:94:a5:38:27:3f:cd:f1:f0:9e:2e:a2:fc:a5:22:a9:b6: 3d:45:6b:d2:3b:e3:54:d3:9f:fb:3d:e8:c3:c8:10:20:fd:9f: 12:52:87:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmx7g8LdSZAP9soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDljNDQ0MzktODM2YS00ZGJkLWE1ODUtNTA5OThmMTJhMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OljUouYE1K+q8X8HckQTTTp+Pl8EqmcAisO +OiR9wy1F5jlRZ24WbPXN9w7cS9ve/vhM34Fk5yOPpv3YyKDVDqdOT+STG7eEm6R X4B7/b8bUiJw35yGxI/wDhjpZqiusyOH32+YnDwDuHQBAXO1TTqg/cDNJnYJpZRO 0DUJzHSBW8v64U2bpaQHckUAm3gpbOlRwY6gXxpvytAXVFIcbL/W/QtT0gc4KVbD sL8VBW9fw86xRrsTj6R30lE8+5cGsmOsdVR2R841giXNovnCYe9083esJtVoMdsj 4Sv/Quf/W3Tatdz4myVN2GT34h1mcf3OaZXt3Zun6uJlmOhaZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeNnBl8bQYvyacvS4gCilQavLHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmE2YTJhNTAtNjEwZC0z MGQ1LTkyYjAtNjlkMDc5ZDExNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZna0TS0urmHiTJY7QezoyxN/aUR86PODMaiB17qyd7jJLnWdAGOFqG hoVjA9kgKZ1QsuCiyop49/AGgY9XJty4eZzKPASxMtcCoBeuoux0FQ68VT4DdHQm P2nODvNhh4QLtoxwhFZVpJl2r4eUfxkxuKnl8mL+gkv3TVRg/1rMM+s6hX5kdUSa CGvZILVIriyE9ofwfNIeIJ+QPhgb5+NbAtpwp+BI8jQfsDwLmVhh5XzwUDqec2wT mrxfuXcsUmuzwC4cidHClkC2+9NxE29qIhRwKq+/MtgelKU4Jz/N8fCeLqL8pSKp tj1Fa9I741TTn/s96MPIECD9nxJSh7w= -----END CERTIFICATE-----Generated at Sun Sep 6 06:44:38 2026 by rpki-client