$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa File: 3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa (raw, json) Hash identifier: CVLHX1nBHX6QfnTwamOjdyjHrm03rJbEkzWd37cbLv8= Subject key identifier: 51:77:0C:EC:46:2A:D4:5C:A3:3F:96:EE:AD:29:E4:0D:52:5E:84:7F Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584CB7FFE21087C46C0637E1BB00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa Signing time: Sun 01 Feb 2026 13:03:08 +0000 ROA not before: Sun 01 Feb 2026 13:03:08 +0000 ROA not after: Sat 02 May 2026 12:03:08 +0000 asID: 14315 IP address blocks: 108.59.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b7:ff:e2:10:87:c4:6c:06:37:e1:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Feb 1 13:03:08 2026 GMT Not After : May 2 12:03:08 2026 GMT Subject: CN=8e03874e-2897-488b-afbe-adfb77e955bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:9b:7b:b5:da:62:d7:e8:10:58:e9:63:87: 12:77:55:ab:04:32:27:80:2d:14:f3:57:d8:71:f0: c2:56:c3:ec:a5:8e:3c:1b:79:f9:22:1b:55:8a:91: fa:af:5c:e2:c5:64:b9:26:07:81:7d:75:71:8a:28: dd:d6:50:31:dd:a7:77:bf:26:6f:40:f6:2d:01:d7: 49:a8:85:c1:15:e7:33:c7:d2:7e:a8:66:3b:3f:da: 51:da:66:e6:9b:c1:a3:61:74:c5:34:e6:76:a1:ea: 65:cd:ab:5c:aa:d1:b0:83:bc:9a:6c:e0:1c:16:3b: 05:25:0e:06:89:64:47:b3:32:ba:83:cb:9e:6c:58: b9:b1:db:a3:d2:52:d2:13:8c:29:54:92:cb:21:ba: dc:35:d1:a1:3d:87:b3:0c:e7:d8:98:61:b0:a0:46: 2f:6d:24:3a:0f:78:c8:a5:16:4a:36:10:78:90:e3: a3:5d:fc:d2:37:5f:35:62:60:3a:32:36:f3:0b:9c: 00:c8:7f:1e:8d:6d:c5:36:c4:29:f1:46:37:21:77: c1:23:b3:4a:d3:15:c3:62:1c:c5:f9:97:4b:8c:00: 6c:6d:4a:4b:df:2f:29:df:95:0d:e7:e0:5e:27:8c: 93:de:a7:1d:63:6f:9c:bb:9e:47:79:bd:0d:58:6f: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:77:0C:EC:46:2A:D4:5C:A3:3F:96:EE:AD:29:E4:0D:52:5E:84:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/3f8ed5a1-1b2e-375c-a7ad-c8dbb73b3534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:65:b8:95:11:98:0a:7c:ad:ef:49:d2:f8:26:1e:ca:45:71: 06:68:b9:e8:d8:fc:10:1b:cd:7d:94:49:a2:03:cc:53:ad:8b: 64:b6:cf:cd:b9:93:23:3e:8b:ea:ee:cf:07:fd:c2:af:c5:87: 84:44:6d:2c:5b:e1:09:4a:e5:c5:35:92:e8:b0:04:ba:b4:a9: c4:b9:13:7a:b9:05:77:1a:80:d9:df:9f:e1:18:9e:3e:62:9c: 62:b4:52:60:a9:a7:a2:e7:2b:f8:f8:f5:27:4d:83:46:c5:43: 30:61:e4:81:d2:ee:1d:0a:59:b0:fd:ff:a7:6b:85:aa:1d:56: 1b:84:e7:e4:80:2c:50:c1:f7:46:a5:ac:4f:8e:6f:a8:31:af: 50:dc:67:97:17:5e:9c:d7:67:45:e0:ed:54:7b:1f:5d:0e:37: 92:56:d3:f2:03:ce:8d:9f:1c:2f:d0:f1:13:ed:11:4d:04:07: 7f:b7:f1:7b:bf:08:92:b9:b2:b4:18:f9:95:13:c2:3e:3c:74: f3:2f:72:b9:6b:e9:37:38:94:a1:93:50:b4:8e:aa:f6:c0:14: 0c:c7:5b:89:34:25:3d:36:f3:73:a9:dd:5b:d7:96:74:15:93: be:24:58:3b:4a:80:79:9b:13:47:ae:0e:28:aa:35:ae:9c:bd: ab:66:7a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy3/+IQh8RsBjfhuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDIwMTEzMDMwOFoXDTI2MDUwMjEyMDMwOFowLzEtMCsGA1UEAxMk OGUwMzg3NGUtMjg5Ny00ODhiLWFmYmUtYWRmYjc3ZTk1NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxObe7XaYtfoEFjpY4cSd1WrBDIngC0U81fY cfDCVsPspY48G3n5IhtVipH6r1zixWS5JgeBfXVxiijd1lAx3ad3vyZvQPYtAddJ qIXBFeczx9J+qGY7P9pR2mbmm8GjYXTFNOZ2oeplzatcqtGwg7yabOAcFjsFJQ4G iWRHszK6g8uebFi5sduj0lLSE4wpVJLLIbrcNdGhPYezDOfYmGGwoEYvbSQ6D3jI pRZKNhB4kOOjXfzSN181YmA6MjbzC5wAyH8ejW3FNsQp8UY3IXfBI7NK0xXDYhzF +ZdLjABsbUpL3y8p35UN5+BeJ4yT3qcdY2+cu55Heb0NWG93kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF3DOxGKtRcoz+W7q0p5A1SXoR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvM2Y4ZWQ1YTEtMWIyZS0z NzVjLWE3YWQtYzhkYmI3M2IzNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5luJURmAp8re9J0vgmHspFcQZouejY/BAbzX2USaIDzFOti2S2z825 kyM+i+ruzwf9wq/Fh4REbSxb4QlK5cU1kuiwBLq0qcS5E3q5BXcagNnfn+EYnj5i nGK0UmCpp6LnK/j49SdNg0bFQzBh5IHS7h0KWbD9/6drhaodVhuE5+SALFDB90al rE+Ob6gxr1DcZ5cXXpzXZ0Xg7VR7H10ON5JW0/IDzo2fHC/Q8RPtEU0EB3+38Xu/ CJK5srQY+ZUTwj48dPMvcrlr6Tc4lKGTULSOqvbAFAzHW4k0JT0283Op3VvXlnQV k74kWDtKgHmbE0euDiiqNa6cvatmepc= -----END CERTIFICATE-----Generated at Sun Mar 1 20:36:00 2026 by rpki-client