$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa File: 1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa (raw, json) Hash identifier: xo92AaBUJnCcqgdbbd/kK5GExP0TlxnLVJYs4iYKsfA= Subject key identifier: F1:E3:C4:2E:91:59:E7:B0:4A:92:FE:80:92:39:1E:9E:CE:E7:95:E1 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD1DCC2E1260313A8A18400 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 6079 IP address blocks: 209.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:dc:c2:e1:26:03:13:a8:a1:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=584d4f20-6a4f-4357-af7b-45beda092eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:b2:3d:09:48:8f:89:7d:a8:79:36:14:29: d3:2f:dc:33:11:fa:dc:59:83:42:59:63:f4:26:66: 08:f3:52:94:50:d9:b7:8b:6b:c5:a6:8e:0e:a4:a6: 06:42:b0:65:0f:0a:46:3e:a2:97:ab:52:94:8f:54: df:7a:45:b9:34:53:65:72:12:37:be:d8:de:7e:ff: c1:52:31:5c:f8:6b:c1:7d:54:95:b0:79:4a:31:58: 16:d4:6d:97:aa:56:39:da:7f:13:18:9c:a4:50:72: b8:c6:eb:13:2b:dd:52:81:9d:38:fe:6c:f5:9d:8d: 69:93:96:95:8c:94:c6:6e:de:93:df:a8:68:80:25: 33:4f:46:43:2d:68:be:b6:51:d4:f6:31:ff:12:1e: b4:44:3b:b8:a5:05:4b:72:0f:3a:1c:82:e2:07:cb: 94:6c:0a:e5:d2:cc:47:84:f4:64:88:15:2a:f5:04: d5:d5:a2:96:1f:8a:c2:82:21:9d:3c:0b:67:2d:5d: d6:1b:a6:28:78:71:3f:86:11:4e:b5:fa:e9:16:ca: 7f:01:27:8b:44:ba:7b:dd:0d:b6:50:09:1f:a0:e4: 5c:f8:03:63:98:32:3e:6c:5f:f1:8a:1c:db:5a:17: 11:e0:73:ea:1a:21:0a:ec:d0:7b:8d:41:91:8e:bf: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E3:C4:2E:91:59:E7:B0:4A:92:FE:80:92:39:1E:9E:CE:E7:95:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:06:df:ca:b8:18:04:d8:99:fb:02:16:8c:c6:27:c5:c0:c9: 5e:d0:2a:1e:49:be:97:07:c1:a5:3f:12:70:f6:c4:73:af:f3: f9:71:86:c0:e3:49:f4:1f:f8:79:70:a3:af:9a:4a:42:6d:fa: 92:73:61:db:c7:d2:bc:82:58:1f:b9:df:f1:70:6b:93:56:73: dd:8a:bc:f7:89:83:c4:18:b6:cb:a1:02:5a:0b:96:86:70:bf: f9:77:a5:0f:fe:e3:66:d5:89:5d:ab:76:49:00:e9:50:f1:f0: b9:69:81:01:8b:48:d9:35:9d:ca:3b:64:e5:21:c0:7a:45:95: a1:08:12:d4:3a:94:b4:6a:11:a3:00:7a:0c:f1:f7:a2:cf:03: 17:a6:e0:cb:d7:57:79:b0:83:7e:c8:bc:29:48:6d:9c:46:73: c4:c1:f0:b5:cc:b6:e1:52:64:16:db:b9:f6:be:d5:91:7f:59: c7:f3:f6:d1:53:5b:6e:dc:0e:9d:29:58:ee:96:b6:ab:b4:3c: c5:bb:1f:d6:f4:e5:6b:fc:4d:47:29:ac:9a:5c:de:35:0f:86: 71:80:d7:dd:8a:30:13:bd:05:78:eb:14:b6:02:60:aa:b4:cc: 5e:46:6e:7f:96:a9:4d:76:71:3a:a2:75:fc:0b:ac:6e:ae:4a: f3:0a:44:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0dzC4SYDE6ihhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NTg0ZDRmMjAtNmE0Zi00MzU3LWFmN2ItNDViZWRhMDkyZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCyPQlIj4l9qHk2FCnTL9wzEfrcWYNCWWP0 JmYI81KUUNm3i2vFpo4OpKYGQrBlDwpGPqKXq1KUj1TfekW5NFNlchI3vtjefv/B UjFc+GvBfVSVsHlKMVgW1G2XqlY52n8TGJykUHK4xusTK91SgZ04/mz1nY1pk5aV jJTGbt6T36hogCUzT0ZDLWi+tlHU9jH/Eh60RDu4pQVLcg86HILiB8uUbArl0sxH hPRkiBUq9QTV1aKWH4rCgiGdPAtnLV3WG6YoeHE/hhFOtfrpFsp/ASeLRLp73Q22 UAkfoORc+ANjmDI+bF/xihzbWhcR4HPqGiEK7NB7jUGRjr+JIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHjxC6RWeewSpL+gJI5Hp7O55XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMWZlYjI4YjYtZDRjMC0z Yjk0LThmNmQtMTdhMTM2MmM1ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQG38q4GATYmfsCFozGJ8XAyV7QKh5JvpcHwaU/EnD2xHOv8/lxhsDj SfQf+Hlwo6+aSkJt+pJzYdvH0ryCWB+53/Fwa5NWc92KvPeJg8QYtsuhAloLloZw v/l3pQ/+42bViV2rdkkA6VDx8LlpgQGLSNk1nco7ZOUhwHpFlaEIEtQ6lLRqEaMA egzx96LPAxem4MvXV3mwg37IvClIbZxGc8TB8LXMtuFSZBbbufa+1ZF/Wcfz9tFT W27cDp0pWO6Wtqu0PMW7H9b05Wv8TUcprJpc3jUPhnGA192KMBO9BXjrFLYCYKq0 zF5Gbn+WqU12cTqidfwLrG6uSvMKRO8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:09 2025 by rpki-client