$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa File: 3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa (raw, json) Hash identifier: 4EMxyevNuAQo9RvnPUK2kBhaK0YcaeLeDbYaetn30I8= Subject key identifier: C7:61:72:19:AF:A6:6D:0A:A3:47:41:66:7A:49:FD:BB:13:E0:32:7B Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584CD6D21F93A22DEE0DF2B10A00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 5650 IP address blocks: 108.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:1f:93:a2:2d:ee:0d:f2:b1:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=3f75e91d-db08-43e7-9161-9d75132e0d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:8c:6b:5a:85:1d:8f:25:43:69:91:52:11: a9:cd:70:8d:a2:4b:f6:7c:fb:da:26:c6:4b:90:6d: 4a:75:61:00:4e:3b:22:f5:16:fe:32:ce:8b:55:a2: 3c:07:49:3c:a5:84:93:f7:b8:ac:24:06:bc:4d:32: e7:55:a5:ba:19:14:b4:dc:99:ea:23:fa:a0:08:5b: 95:59:c2:5c:9a:8c:ce:3e:a2:9c:59:60:53:14:68: fe:dd:8e:9c:22:47:b7:bb:44:ff:d9:48:09:0d:86: 85:2e:fc:ae:e9:99:7a:16:f5:99:6e:a0:49:e1:6f: c7:16:63:ae:52:ea:df:28:f7:17:ab:d1:3a:03:51: 1e:94:12:af:d3:05:eb:39:38:cc:30:a5:ae:33:9c: 75:f6:14:cd:81:5b:a9:a6:fe:9c:94:cf:1b:ea:f7: d2:a9:a9:a6:fb:ef:c9:bb:a7:8b:90:42:ab:c7:fc: a4:e5:59:1f:70:4d:69:48:99:53:eb:25:07:73:f3: b1:15:9b:f2:f3:50:b3:34:ac:3d:81:4a:f6:00:c1: 1b:f3:5f:94:47:ff:7d:8b:b2:37:d4:00:ca:8d:70: 4e:2d:d1:3e:90:33:96:c4:49:9e:58:13:cc:70:36: d5:db:3f:0f:80:e4:4f:7e:75:b0:a7:f4:57:15:92: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:61:72:19:AF:A6:6D:0A:A3:47:41:66:7A:49:FD:BB:13:E0:32:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3adf1a6b-c837-3138-a2a4-5b5db32e1178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f4:38:04:51:d4:ce:bc:6c:f4:62:ed:6c:aa:22:29:1f:4e: 99:d6:d1:95:6f:74:78:bd:68:35:10:7f:41:07:37:99:0e:16: dc:33:2d:53:7c:f8:75:aa:d7:ed:06:70:a9:21:7b:8a:84:ca: 55:23:2c:e0:16:d6:1a:03:2c:d9:25:93:39:84:2e:87:38:91: 65:2e:fe:e6:67:cf:3e:37:35:96:81:bd:19:11:72:8c:12:22: 36:59:32:a2:38:a4:34:6f:f9:93:7a:1f:05:43:23:ff:cb:34: d1:87:bf:66:f5:95:9e:a4:75:2e:0d:f7:08:24:3b:70:a8:72: 80:dc:9b:e4:d0:cc:fe:ef:a9:e6:70:47:b7:f9:fd:74:ae:c1: 77:9c:d5:55:bb:03:f4:cc:94:bb:5d:2d:60:6e:87:13:e3:ea: d1:29:e9:5f:9c:3f:b2:dd:d6:ee:f8:f2:9b:a2:67:ff:ef:4f: 47:12:e9:02:e9:c9:09:df:b6:b9:d6:34:37:22:eb:81:f3:35: a6:56:4d:be:f7:d8:2e:84:17:84:88:d6:10:14:0c:ed:f8:38: ec:07:43:43:ac:b9:56:99:1a:c0:9b:fa:8d:73:b1:81:f3:f8: 70:e5:15:cd:89:0c:0c:be:26:b2:17:28:1d:27:d2:2f:04:cb: f6:57:cd:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0h+Toi3uDfKxCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk M2Y3NWU5MWQtZGIwOC00M2U3LTkxNjEtOWQ3NTEzMmUwZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZKMa1qFHY8lQ2mRUhGpzXCNokv2fPvaJsZL kG1KdWEATjsi9Rb+Ms6LVaI8B0k8pYST97isJAa8TTLnVaW6GRS03JnqI/qgCFuV WcJcmozOPqKcWWBTFGj+3Y6cIke3u0T/2UgJDYaFLvyu6Zl6FvWZbqBJ4W/HFmOu UurfKPcXq9E6A1EelBKv0wXrOTjMMKWuM5x19hTNgVuppv6clM8b6vfSqamm++/J u6eLkEKrx/yk5VkfcE1pSJlT6yUHc/OxFZvy81CzNKw9gUr2AMEb81+UR/99i7I3 1ADKjXBOLdE+kDOWxEmeWBPMcDbV2z8PgORPfnWwp/RXFZJC+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdhchmvpm0Ko0dBZnpJ/bsT4DJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2FkZjFhNmItYzgzNy0z MTM4LWEyYTQtNWI1ZGIzMmUxMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr0OARR1M68bPRi7WyqIikfTpnW0ZVvdHi9aDUQf0EHN5kOFtwzLVN8 +HWq1+0GcKkhe4qEylUjLOAW1hoDLNklkzmELoc4kWUu/uZnzz43NZaBvRkRcowS IjZZMqI4pDRv+ZN6HwVDI//LNNGHv2b1lZ6kdS4N9wgkO3CocoDcm+TQzP7vqeZw R7f5/XSuwXec1VW7A/TMlLtdLWBuhxPj6tEp6V+cP7Ld1u748puiZ//vT0cS6QLp yQnftrnWNDci64HzNaZWTb732C6EF4SI1hAUDO34OOwHQ0OsuVaZGsCb+o1zsYHz +HDlFc2JDAy+JrIXKB0n0i8Ey/ZXzQw= -----END CERTIFICATE-----Generated at Sun Mar 1 19:12:54 2026 by rpki-client