$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa File: bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa (raw, json) Hash identifier: GjzZtUOYNEXO21G+NigBs+cFTri5ImnPtsBndDDsEKA= Subject key identifier: 04:2C:BB:03:DD:A5:5C:87:F3:F5:D4:07:D0:67:6F:5A:46:21:F0:17 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584EA79B25FC330FE3CAB3512074 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6079 IP address blocks: 209.236.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:25:fc:33:0f:e3:ca:b3:51:20:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=12fa4214-2e59-4b19-9544-ce8cdf532279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:17:5d:73:1f:53:be:b8:1d:6f:b8:2e:76: 13:a9:5a:da:11:45:85:c3:f4:eb:fc:50:56:61:fe: a0:98:cd:96:fc:d8:8c:9c:5b:86:cc:88:e2:cd:6f: 46:2f:23:88:4c:33:9a:25:1c:f0:57:8c:37:8e:f3: 42:1c:05:7b:95:d3:a5:2c:95:90:4c:9e:da:03:4a: a3:55:6f:42:00:ab:46:be:46:e2:c4:ce:af:45:c9: 28:e7:a9:1a:c8:f6:66:6e:f0:88:8f:1a:bc:f8:aa: c0:9c:f8:5c:94:2d:a1:17:06:1c:ce:bb:6f:ba:af: da:03:67:87:eb:65:15:de:2e:5a:3a:68:0d:df:d6: a5:47:b9:49:1d:52:de:54:02:de:a4:ec:cc:2c:eb: a3:84:bf:10:f6:ac:ab:91:63:0a:90:55:f9:96:01: 64:69:72:3a:0d:3f:c0:40:b1:74:45:80:a1:b2:b4: c2:b6:df:90:87:1d:82:10:45:96:be:21:09:da:1f: 20:db:e5:0b:1a:2b:f7:50:f1:f6:88:86:d0:9b:ba: 16:61:30:ea:18:8e:c1:94:38:5f:c4:a2:2f:36:44: ff:0c:76:dc:d1:0f:63:eb:51:72:54:da:dc:c7:7c: e9:a7:b3:9a:c7:69:e7:68:d7:5b:bf:0d:8d:df:cf: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2C:BB:03:DD:A5:5C:87:F3:F5:D4:07:D0:67:6F:5A:46:21:F0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0c:fb:57:50:0d:e1:ed:4a:18:13:e2:5d:6c:45:5a:4f:10: 31:41:81:5a:5c:2a:dc:5f:74:8a:80:83:bf:09:7d:f7:1c:a3: 9c:6e:8b:a9:93:cd:4c:96:a0:58:22:e3:e5:6b:e3:9a:a5:d1: 26:81:2a:e3:41:43:15:bb:9b:86:6f:7d:bb:a4:55:2a:01:8d: 96:ea:83:a1:04:2d:58:37:34:a1:a4:00:c7:b3:22:7c:77:2e: 81:f6:bc:7a:89:e1:cc:26:53:d9:e5:d1:b9:a8:80:25:92:d2: af:37:52:aa:b9:16:48:c5:27:42:31:d0:04:3c:74:43:59:20: 29:1a:9b:84:bf:93:c0:28:fa:53:80:d0:c5:1c:fe:a7:87:05: 53:e5:1f:3c:00:ab:13:15:3f:f5:78:ed:09:e2:1d:5e:a8:4e: ae:65:ac:8c:cc:82:aa:71:a0:b2:6e:21:c7:58:44:58:52:fc: 28:0f:52:9e:be:11:67:29:6c:df:c6:68:a1:ae:28:48:9d:f0: 3b:05:5a:2b:a9:7d:5e:f0:63:04:fa:30:7d:95:ec:bf:e9:34: 99:1d:68:c9:00:fb:1d:c4:0c:e9:37:6a:d1:65:6f:97:c3:c6: 82:16:91:21:8f:6d:57:23:c5:bd:27:50:99:c5:d1:29:d7:0c: e0:53:df:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmyX8Mw/jyrNRIHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTJmYTQyMTQtMmU1OS00YjE5LTk1NDQtY2U4Y2RmNTMyMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LYXXXMfU764HW+4LnYTqVraEUWFw/Tr/FBW Yf6gmM2W/NiMnFuGzIjizW9GLyOITDOaJRzwV4w3jvNCHAV7ldOlLJWQTJ7aA0qj VW9CAKtGvkbixM6vRcko56kayPZmbvCIjxq8+KrAnPhclC2hFwYczrtvuq/aA2eH 62UV3i5aOmgN39alR7lJHVLeVALepOzMLOujhL8Q9qyrkWMKkFX5lgFkaXI6DT/A QLF0RYChsrTCtt+Qhx2CEEWWviEJ2h8g2+ULGiv3UPH2iIbQm7oWYTDqGI7BlDhf xKIvNkT/DHbc0Q9j61FyVNrcx3zpp7Oax2nnaNdbvw2N38/lZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQsuwPdpVyH8/XUB9Bnb1pGIfAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmNlZjEzYjEtZDQ3NS0z NGZlLTkzZjQtYmRlMmRiMWM3NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMM+1dQDeHtShgT4l1sRVpPEDFBgVpcKtxfdIqAg78Jffcco5xui6mT zUyWoFgi4+Vr45ql0SaBKuNBQxW7m4ZvfbukVSoBjZbqg6EELVg3NKGkAMezInx3 LoH2vHqJ4cwmU9nl0bmogCWS0q83Uqq5FkjFJ0Ix0AQ8dENZICkam4S/k8Ao+lOA 0MUc/qeHBVPlHzwAqxMVP/V47QniHV6oTq5lrIzMgqpxoLJuIcdYRFhS/CgPUp6+ EWcpbN/GaKGuKEid8DsFWiupfV7wYwT6MH2V7L/pNJkdaMkA+x3EDOk3atFlb5fD xoIWkSGPbVcjxb0nUJnF0SnXDOBT380= -----END CERTIFICATE-----Generated at Sun Sep 6 06:43:17 2026 by rpki-client