$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f6348b91-9dfc-3263-80d7-899e9b5f8b4b.roa File: f6348b91-9dfc-3263-80d7-899e9b5f8b4b.roa (raw, json) Hash identifier: Kswl5Z6ebrgfPkVIhfnEDk+wTAOQUicmSzJCRPshYMc= Subject key identifier: 91:D4:B4:79:C5:96:33:73:BC:21:75:91:4C:66:B9:7D:D4:CB:C7:CF Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F68280E948FB72EEF6B178E10 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f6348b91-9dfc-3263-80d7-899e9b5f8b4b.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 14315 IP address blocks: 108.59.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:0e:94:8f:b7:2e:ef:6b:17:8e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=5284615b-edc5-4306-abba-8b69ee18275c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:5d:71:5e:2f:a2:43:c1:cc:1e:bc:47:22: 2b:c6:15:64:48:dc:2a:66:e5:74:e2:e0:2b:8e:ca: 58:2b:8d:f0:ff:ab:aa:11:ab:32:38:a2:96:6e:56: a6:ef:4e:da:d6:eb:df:5e:46:ad:09:aa:bb:34:03: 5d:96:ff:ac:3f:f1:3c:b2:f3:29:d3:59:67:db:4c: ce:24:f2:2d:a4:1f:f8:63:91:6d:e8:e5:9e:e0:73: f5:f1:71:93:49:cd:db:95:2b:11:75:6f:7e:c3:01: d0:a3:7f:e6:3c:bc:88:fb:09:62:cc:10:b0:96:7b: d5:40:be:6f:09:ae:fc:cf:a5:2e:e6:76:96:1b:c1: ab:77:84:25:77:ff:ce:62:5b:14:56:32:80:30:51: 7b:6a:1f:74:44:c0:1a:cb:ba:34:0c:e4:18:13:74: db:c7:81:42:d9:c0:2c:6a:24:43:21:2f:80:c5:64: 06:e9:44:3e:3d:71:d9:ca:47:17:ba:af:e7:b0:75: 9a:b9:b2:14:38:f9:dd:17:73:41:e1:c3:5f:a4:1e: 77:f5:1f:e7:f8:73:48:47:f0:c7:5c:f5:0a:c9:c5: 8e:1c:d4:30:10:a5:15:9f:6d:1e:c1:c2:e1:63:f0: 13:33:a4:d8:e5:cd:3b:a1:d6:5a:bd:3f:ed:87:bf: ff:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:B4:79:C5:96:33:73:BC:21:75:91:4C:66:B9:7D:D4:CB:C7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f6348b91-9dfc-3263-80d7-899e9b5f8b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:94:50:f6:9a:15:79:92:23:04:9d:88:e2:5d:ed:c4:ad:1e: 14:af:1c:aa:e1:80:24:eb:cc:c9:d1:ae:68:62:39:c8:31:ae: 49:df:2f:42:21:17:30:09:80:6a:e3:93:a6:12:01:43:83:40: 75:1a:0e:28:07:d4:a8:b4:ff:64:ab:8c:8c:ac:a8:af:bd:5e: a2:eb:2e:41:5e:2f:c2:32:3e:d1:e6:86:af:34:7f:52:76:c6: da:53:bf:19:5c:f2:e1:33:a9:96:ca:cf:86:ca:0d:7d:72:6b: 21:22:9a:2e:55:ff:d3:b7:97:09:72:e1:d3:c4:ab:f4:ee:5c: fb:25:e2:9c:38:6c:ed:4c:7c:dd:79:b4:22:f2:27:82:7f:1d: c9:39:bb:4e:69:8b:a1:31:fa:16:c6:c1:08:f8:af:43:9b:1a: 78:ff:7a:cc:48:33:d1:91:b8:f9:58:89:4b:f7:2b:48:95:a4: e8:1f:31:d8:18:b8:c4:26:75:a7:96:c8:70:f1:ff:b1:f7:01: c9:c8:5d:83:c0:cb:52:51:ef:09:36:2d:a9:cd:a7:94:ed:19: 45:6f:cb:34:d0:2d:22:01:72:a4:d9:30:a3:34:5d:bb:e1:fd: 7c:ea:0f:70:fb:05:1d:a7:79:90:b5:e8:25:10:1d:28:74:a3: 72:cc:f3:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKA6Uj7cu72sXjhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk NTI4NDYxNWItZWRjNS00MzA2LWFiYmEtOGI2OWVlMTgyNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZhdcV4vokPBzB68RyIrxhVkSNwqZuV04uAr jspYK43w/6uqEasyOKKWblam707a1uvfXkatCaq7NANdlv+sP/E8svMp01ln20zO JPItpB/4Y5Ft6OWe4HP18XGTSc3blSsRdW9+wwHQo3/mPLyI+wlizBCwlnvVQL5v Ca78z6Uu5naWG8Grd4Qld//OYlsUVjKAMFF7ah90RMAay7o0DOQYE3Tbx4FC2cAs aiRDIS+AxWQG6UQ+PXHZykcXuq/nsHWaubIUOPndF3NB4cNfpB539R/n+HNIR/DH XPUKycWOHNQwEKUVn20ewcLhY/ATM6TY5c07odZavT/th7//bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHUtHnFljNzvCF1kUxmuX3Uy8fPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvZjYzNDhiOTEtOWRmYy0z MjYzLTgwZDctODk5ZTliNWY4YjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOUUPaaFXmSIwSdiOJd7cStHhSvHKrhgCTrzMnRrmhiOcgxrknfL0Ih FzAJgGrjk6YSAUODQHUaDigH1Ki0/2SrjIysqK+9XqLrLkFeL8IyPtHmhq80f1J2 xtpTvxlc8uEzqZbKz4bKDX1yayEimi5V/9O3lwly4dPEq/TuXPsl4pw4bO1MfN15 tCLyJ4J/Hck5u05pi6Ex+hbGwQj4r0ObGnj/esxIM9GRuPlYiUv3K0iVpOgfMdgY uMQmdaeWyHDx/7H3AcnIXYPAy1JR7wk2LanNp5TtGUVvyzTQLSIBcqTZMKM0Xbvh /XzqD3D7BR2neZC16CUQHSh0o3LM8xg= -----END CERTIFICATE-----Generated at Sat Oct 24 10:46:07 2026 by rpki-client