$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa File: ce3af1c7-43c9-367b-a21d-717aaaf44463.roa (raw, json) Hash identifier: uK3e+YJgO2zD2oWdtUxuBLReKOYBK2XGyMGR29LJpq4= Subject key identifier: F9:1C:6E:E1:28:4A:E9:08:0F:55:85:A1:B1:79:F4:98:C9:4E:B3:37 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584E00062BB22664A447E5093300 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 7029 IP address blocks: 209.236.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:2b:b2:26:64:a4:47:e5:09:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=6db48052-9fe8-4aee-8c2a-b40d5777cb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:d3:93:22:62:db:ba:48:7c:d6:f8:4f:b6: 65:61:c7:2c:b2:15:85:89:98:52:3a:c6:a0:82:0d: 3f:b4:cf:bc:48:96:f8:9b:48:50:9f:a9:89:1a:8f: c5:7e:d7:99:18:46:bc:35:d2:54:15:6f:a0:78:af: 1d:1b:9d:9f:e8:da:8c:3a:6d:e3:1f:b0:3e:77:39: b7:f9:f6:19:c4:a7:1f:0b:56:90:de:a4:03:63:40: 16:dc:21:a1:ac:68:e3:f3:90:4a:6e:5e:bc:99:c5: fb:cc:9b:f5:7f:1f:5a:0f:e7:c3:f3:90:94:4f:20: 24:01:07:dc:bd:82:08:a0:ff:9a:fd:b7:27:de:36: 0b:34:6f:15:e8:6b:e8:c7:05:77:78:b2:67:a9:df: a6:31:41:98:c8:a2:88:43:4f:6e:44:d8:b4:a7:0b: 76:a1:a0:23:44:f4:1d:39:5a:59:90:d4:29:1d:00: 8d:ee:a7:13:3a:d3:37:c3:08:97:a6:69:7f:3b:35: ad:9c:c6:13:4c:f3:62:ab:bb:da:67:04:4f:94:95: e7:59:4f:6c:9b:c7:b5:82:f3:ec:a2:4d:4b:f0:a3: 9c:3d:44:e4:8c:8a:1a:14:51:f4:a8:c7:95:46:ad: 27:97:a5:dd:e3:c7:dd:6c:0a:5d:55:09:5b:52:56: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:6E:E1:28:4A:E9:08:0F:55:85:A1:B1:79:F4:98:C9:4E:B3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1e:b1:ae:b9:05:65:52:21:43:80:e1:cc:9c:6b:34:83:d0: 7d:e9:e9:60:bf:e5:8b:9f:72:62:3d:f8:74:ea:4f:5a:5e:08: 71:3f:c4:25:e5:ba:65:53:11:fe:0b:d4:a4:53:3f:7a:98:ee: fc:05:8e:ce:eb:63:d8:94:12:6f:c0:13:29:17:e5:9b:b0:75: 94:7d:e9:b4:e1:1e:28:4c:e3:d3:21:cd:0a:28:2b:a6:8b:58: e3:f9:09:eb:d9:5c:2b:4f:9a:ed:93:65:0c:b5:5e:b6:10:1b: d6:e9:42:d0:f0:9e:a9:f2:d1:2f:91:ea:69:9f:0d:31:59:92: 7a:46:f6:0b:dd:36:4e:f0:0e:2f:c8:e8:50:e9:8a:c1:10:0d: 6c:b3:19:bf:c2:01:db:fa:68:95:6c:54:12:b4:cd:ed:3a:bf: 85:f4:99:b3:ba:b0:cd:4b:0f:89:16:48:ea:8b:bc:14:c7:ad: aa:a4:30:97:8c:17:ec:54:23:d8:c5:d1:7e:8a:5e:36:f4:5d: 62:65:18:1d:b0:15:12:4c:80:ab:47:be:2e:44:9c:2a:7b:11: 25:0e:f4:1f:c1:e1:1b:00:0d:a4:71:8d:92:5e:1a:68:7f:2b: ff:3b:6b:6e:de:76:d2:5c:da:d3:b8:f4:76:23:e8:99:a7:1a: ce:a5:6c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABiuyJmSkR+UJMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk NmRiNDgwNTItOWZlOC00YWVlLThjMmEtYjQwZDU3NzdjYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvHTkyJi27pIfNb4T7ZlYccsshWFiZhSOsag gg0/tM+8SJb4m0hQn6mJGo/FfteZGEa8NdJUFW+geK8dG52f6NqMOm3jH7A+dzm3 +fYZxKcfC1aQ3qQDY0AW3CGhrGjj85BKbl68mcX7zJv1fx9aD+fD85CUTyAkAQfc vYIIoP+a/bcn3jYLNG8V6GvoxwV3eLJnqd+mMUGYyKKIQ09uRNi0pwt2oaAjRPQd OVpZkNQpHQCN7qcTOtM3wwiXpml/OzWtnMYTTPNiq7vaZwRPlJXnWU9sm8e1gvPs ok1L8KOcPUTkjIoaFFH0qMeVRq0nl6Xd48fdbApdVQlbUlYuiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkcbuEoSukID1WFobF59JjJTrM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2UzYWYxYzctNDNjOS0z NjdiLWEyMWQtNzE3YWFhZjQ0NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEesa65BWVSIUOA4cycazSD0H3p6WC/5YufcmI9+HTqT1peCHE/xCXl umVTEf4L1KRTP3qY7vwFjs7rY9iUEm/AEykX5ZuwdZR96bThHihM49MhzQooK6aL WOP5CevZXCtPmu2TZQy1XrYQG9bpQtDwnqny0S+R6mmfDTFZknpG9gvdNk7wDi/I 6FDpisEQDWyzGb/CAdv6aJVsVBK0ze06v4X0mbO6sM1LD4kWSOqLvBTHraqkMJeM F+xUI9jF0X6KXjb0XWJlGB2wFRJMgKtHvi5EnCp7ESUO9B/B4RsADaRxjZJeGmh/ K/87a27edtJc2tO49HYj6JmnGs6lbDs= -----END CERTIFICATE-----Generated at Thu Jun 4 11:24:24 2026 by rpki-client