$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa File: cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa (raw, json) Hash identifier: DAYkMumjplavfv6hAB3inXjlv6klOGbv/qMYkkQB6Cc= Subject key identifier: C3:E9:79:E6:42:86:1F:9D:19:EC:09:52:F6:6A:D8:B8:B4:0C:F6:5D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584DD625CD4F620DBF3D3B2F5E40 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 11426 IP address blocks: 206.245.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:cd:4f:62:0d:bf:3d:3b:2f:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=96690968-83c9-4ee0-8522-7d59b28976c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:a7:38:44:e9:57:53:5f:2b:23:a6:8e:7a: e9:da:1a:bb:56:2b:3b:1a:15:bc:09:c9:9a:67:10: ff:23:cb:ab:ef:98:a5:7b:c1:85:43:3e:27:2e:e6: a2:25:6c:6a:8b:f2:2b:48:b9:f8:a4:9d:4a:b5:cf: 25:d2:7d:83:ad:91:0f:96:81:f2:d7:4d:d8:b7:6c: 71:cf:3d:ae:f2:5b:5f:93:c9:3d:dc:4c:be:bc:50: 98:b7:7f:a7:f2:82:09:21:5d:5a:78:5e:9f:47:91: ee:0a:bf:3c:ba:0e:2f:df:04:99:17:11:92:bb:a3: c0:80:83:f3:d1:8f:23:04:ae:05:c9:0b:7b:e7:c2: 27:62:7a:f5:32:4e:9a:35:12:04:62:0f:3e:da:51: b7:4f:23:e9:fa:a5:6c:57:02:ea:49:30:54:dd:19: 98:dc:72:95:c1:ed:39:fa:d4:99:38:79:3c:96:fc: 39:41:e9:b2:d1:49:f0:98:6a:46:74:b7:1e:7b:31: 95:83:05:9c:ac:31:8e:f1:67:52:dd:81:d7:c7:ee: 0b:d2:42:d7:e4:42:44:60:99:c9:58:85:b0:ae:df: 30:86:2d:c2:fc:37:f4:d7:4d:3f:f8:92:20:5f:a9: 9e:25:ff:d4:93:8b:b0:7b:18:86:2c:55:cf:b3:3f: 9c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E9:79:E6:42:86:1F:9D:19:EC:09:52:F6:6A:D8:B8:B4:0C:F6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/cfd8f6f8-5371-301d-89a1-a2b5c6dcccb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:03:b9:af:f7:ca:ae:1e:63:b0:8d:ed:1b:97:91:d3:9f:eb: 80:a2:76:b3:6c:c7:36:8e:4e:cb:22:08:a3:84:24:50:fa:79: 46:63:26:b3:e3:23:2d:60:50:84:55:9e:2c:c1:75:26:64:30: 53:43:d0:8a:b8:4a:4b:54:23:d3:50:a3:92:ba:c8:e9:23:81: 2c:d3:52:69:eb:fb:e7:b0:b5:f5:bc:83:ec:2d:13:2d:8f:3d: 9b:f8:78:7b:72:0b:a3:a2:85:e3:6e:1e:5c:ee:17:78:15:89: a3:b0:6f:a0:9c:c8:1c:36:13:94:66:10:45:e4:81:ae:8f:0e: e4:6e:c2:b2:78:04:1f:51:cb:a1:7d:a0:0b:38:87:ac:9c:89: aa:0a:3c:a1:ac:c8:e6:6f:68:be:75:40:e1:a2:06:9e:c3:58: 8e:a5:b6:17:df:b1:4e:de:c7:89:5e:35:c1:02:45:16:c3:64: 91:2c:6a:3b:a4:ab:80:c9:49:e9:38:a7:47:23:80:74:9c:7f: 4b:df:f5:c5:ba:9b:f0:49:1c:7f:de:f8:48:4e:d0:6f:b1:da: 24:45:50:09:cb:75:56:e2:a9:50:e2:85:3e:73:fd:ec:96:75: 3a:f7:7c:c0:6b:6e:26:1c:75:ba:db:64:23:1e:14:03:17:6c: 88:86:07:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJc1PYg2/PTsvXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk OTY2OTA5NjgtODNjOS00ZWUwLTg1MjItN2Q1OWIyODk3NmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteOnOETpV1NfKyOmjnrp2hq7Vis7GhW8Ccma ZxD/I8ur75ile8GFQz4nLuaiJWxqi/IrSLn4pJ1Ktc8l0n2DrZEPloHy103Yt2xx zz2u8ltfk8k93Ey+vFCYt3+n8oIJIV1aeF6fR5HuCr88ug4v3wSZFxGSu6PAgIPz 0Y8jBK4FyQt758InYnr1Mk6aNRIEYg8+2lG3TyPp+qVsVwLqSTBU3RmY3HKVwe05 +tSZOHk8lvw5Qemy0UnwmGpGdLceezGVgwWcrDGO8WdS3YHXx+4L0kLX5EJEYJnJ WIWwrt8whi3C/Df0100/+JIgX6meJf/Uk4uwexiGLFXPsz+cBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPpeeZChh+dGewJUvZq2Li0DPZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2ZkOGY2ZjgtNTM3MS0z MDFkLTg5YTEtYTJiNWM2ZGNjY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgDua/3yq4eY7CN7RuXkdOf64CidrNsxzaOTssiCKOEJFD6eUZjJrPj Iy1gUIRVnizBdSZkMFND0Iq4SktUI9NQo5K6yOkjgSzTUmnr++ewtfW8g+wtEy2P PZv4eHtyC6OiheNuHlzuF3gViaOwb6CcyBw2E5RmEEXkga6PDuRuwrJ4BB9Ry6F9 oAs4h6yciaoKPKGsyOZvaL51QOGiBp7DWI6lthffsU7ex4leNcECRRbDZJEsajuk q4DJSek4p0cjgHScf0vf9cW6m/BJHH/e+EhO0G+x2iRFUAnLdVbiqVDihT5z/eyW dTr3fMBrbiYcdbrbZCMeFAMXbIiGB3A= -----END CERTIFICATE-----Generated at Thu Jun 4 10:13:42 2026 by rpki-client