$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa File: 1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa (raw, json) Hash identifier: qeziN7mwQaj2isBOcBz16+qc8vBnQJzLrAELWQQ0b+Y= Subject key identifier: 47:6B:C1:AE:1E:FE:72:42:F5:BE:16:CE:10:7A:B2:F8:70:A0:ED:7D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A7D15F0282F09EF6A522AB6F8 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 6079 IP address blocks: 209.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f0:28:2f:09:ef:6a:52:2a:b6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=efdd81fc-b0b8-40ee-ad45-3f0e6289be55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:b4:f0:33:84:74:66:67:d6:2e:c3:00:ab: da:bd:c0:ae:63:0e:29:42:20:c1:c1:b7:41:bb:7b: 84:35:dd:e4:91:a7:90:d0:3f:09:14:ea:e7:52:bc: 46:01:31:48:fd:86:70:4e:a0:ff:21:c6:1e:cf:8d: 6e:20:26:7c:b1:90:a1:47:45:93:bd:c1:c2:77:66: dd:83:50:ff:ef:4a:9f:24:db:7d:8d:0e:4e:e3:0a: 41:e3:b0:0e:98:98:e3:4e:ef:fc:bd:b9:a6:20:ea: 59:47:23:d0:6c:34:17:b3:98:6b:2d:bc:fc:1b:25: 0c:6d:35:12:31:45:86:73:55:71:18:57:01:8f:f9: 21:ef:c3:d3:a3:75:b8:e6:73:71:4d:6d:06:e7:b8: 6d:7d:0d:8b:3e:36:eb:7e:9b:ff:c7:12:6f:da:e5: ae:d7:4d:e9:00:27:58:a9:2e:bd:a5:aa:f0:75:bd: 5b:26:a8:14:f9:e5:ce:2a:b3:83:44:50:c2:fe:cc: 13:f3:18:b4:c3:23:b3:0f:cd:12:f1:e9:fb:b6:d0: d3:3c:3d:f1:76:8e:17:93:44:7b:b2:b9:db:0e:9d: 0c:f6:a7:6a:fe:41:6e:a0:63:db:46:bf:ba:99:2e: 4b:68:1c:60:03:fd:dd:42:1a:dd:0e:d9:e9:3f:10: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6B:C1:AE:1E:FE:72:42:F5:BE:16:CE:10:7A:B2:F8:70:A0:ED:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ee:c6:e5:23:c3:f2:1b:9f:b5:ab:bb:d6:79:a8:a6:7e:63: c8:17:74:66:c4:dd:fb:03:6c:92:31:7d:6c:87:58:1f:4d:16: dc:10:a9:a7:18:6d:3a:a8:bd:69:f1:3c:cb:4a:aa:c8:50:eb: 8e:4e:70:e9:c9:c7:12:98:9a:38:ec:d1:6d:37:91:3d:3d:ba: 91:32:62:d9:64:83:97:0b:e7:db:de:72:59:5b:58:99:19:6d: 16:82:33:ef:aa:4d:61:a9:cf:70:eb:a2:24:56:17:d4:cb:a9: bf:90:b0:ea:db:b7:ee:47:d2:a0:c3:39:74:d9:5a:d5:b2:ad: 85:d5:b2:5d:51:54:d4:d0:91:9b:53:08:2f:45:0b:7e:64:46: 9b:15:5d:e4:f0:ed:39:d2:30:11:ba:0e:9e:a1:15:91:0b:53: 0e:1f:f3:5b:40:27:94:29:02:6f:ae:c8:e2:e6:f2:0c:88:a0: 72:02:d6:61:4b:89:d1:9a:f1:9f:e3:37:4a:5a:be:1b:37:b4: 78:47:ec:12:bd:fa:f7:e2:88:5d:fa:ca:11:9a:79:78:70:31: 59:7e:f0:04:8c:30:cf:cd:ad:f3:34:c2:88:98:3c:94:83:a1: d7:98:f0:08:f5:91:ad:13:7d:ec:1d:82:94:d6:0e:f0:2f:35: f2:5f:33:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfAoLwnvalIqtvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWZkZDgxZmMtYjBiOC00MGVlLWFkNDUtM2YwZTYyODliZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuy08DOEdGZn1i7DAKvavcCuYw4pQiDBwbdB u3uENd3kkaeQ0D8JFOrnUrxGATFI/YZwTqD/IcYez41uICZ8sZChR0WTvcHCd2bd g1D/70qfJNt9jQ5O4wpB47AOmJjjTu/8vbmmIOpZRyPQbDQXs5hrLbz8GyUMbTUS MUWGc1VxGFcBj/kh78PTo3W45nNxTW0G57htfQ2LPjbrfpv/xxJv2uWu103pACdY qS69parwdb1bJqgU+eXOKrODRFDC/swT8xi0wyOzD80S8en7ttDTPD3xdo4Xk0R7 srnbDp0M9qdq/kFuoGPbRr+6mS5LaBxgA/3dQhrdDtnpPxBeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdrwa4e/nJC9b4WzhB6svhwoO19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMWZlYjI4YjYtZDRjMC0z Yjk0LThmNmQtMTdhMTM2MmM1ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHuxuUjw/Ibn7Wru9Z5qKZ+Y8gXdGbE3fsDbJIxfWyHWB9NFtwQqacY bTqovWnxPMtKqshQ645OcOnJxxKYmjjs0W03kT09upEyYtlkg5cL59vecllbWJkZ bRaCM++qTWGpz3DroiRWF9TLqb+QsOrbt+5H0qDDOXTZWtWyrYXVsl1RVNTQkZtT CC9FC35kRpsVXeTw7TnSMBG6Dp6hFZELUw4f81tAJ5QpAm+uyOLm8gyIoHIC1mFL idGa8Z/jN0pavhs3tHhH7BK9+vfiiF36yhGaeXhwMVl+8ASMMM/NrfM0woiYPJSD odeY8Aj1ka0TfewdgpTWDvAvNfJfMys= -----END CERTIFICATE-----Generated at Wed Aug 6 05:22:14 2025 by rpki-client