$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa File: 8caf9660-d639-3192-94c6-0908db45c913.roa (raw, json) Hash identifier: h5+j/sfmkAfc9DYWMD/h9MluGOHI+LN/tiHJPFYjocA= Subject key identifier: 46:36:76:15:A1:68:1D:D5:DA:1F:C4:B7:A1:57:64:F9:89:D7:5F:29 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584F498B8B106E52D52225F43DA0 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29182 IP address blocks: 206.245.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:8b:10:6e:52:d5:22:25:f4:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=647e46bb-28a8-4b82-96a6-5efdbd2aefa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:7a:2e:0a:10:ed:70:ec:b1:d3:9c:4f:c6: 0e:47:90:9a:ac:bb:f9:8b:16:09:db:ef:6a:d5:d7: a8:e4:e0:61:6f:78:0b:fe:4c:1c:87:af:9d:92:57: 50:5c:a4:cf:e1:c5:b3:8b:4c:cb:d6:54:e0:ef:02: 6c:29:c5:a9:e8:13:88:81:d1:ab:79:36:a3:a3:34: e0:14:58:1a:21:30:e8:32:28:0b:9f:59:c1:43:99: b0:0a:ce:d9:3a:6c:7d:36:a3:d1:1d:92:3a:63:5b: 2c:7e:cd:58:69:ea:37:1c:76:9c:d4:15:9d:5d:b2: 11:62:8b:50:65:1f:fd:a3:a7:ba:8d:6f:45:87:69: ee:c2:9e:2c:c6:d3:fb:5b:23:7f:3b:17:41:c6:fb: cf:2f:c5:65:72:d2:58:9d:ab:16:09:b0:98:f4:75: 1c:0d:b5:c7:7a:4b:4a:5c:11:bb:d0:a4:10:9c:f4: 85:61:d6:bf:d3:a2:e0:4e:ec:03:16:fa:05:52:73: 25:4a:a9:e8:5e:ac:74:51:a8:cb:dc:c1:e4:4a:a9: 6b:6d:9c:05:79:b5:51:30:95:4f:a1:31:2e:03:5a: 3e:22:c3:66:83:fa:62:e7:7e:2a:89:30:73:b5:b4: 55:01:9c:97:68:e9:12:be:c8:35:a8:6a:a4:a9:f2: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:76:15:A1:68:1D:D5:DA:1F:C4:B7:A1:57:64:F9:89:D7:5F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8caf9660-d639-3192-94c6-0908db45c913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4f:b0:ea:4d:25:95:c1:17:97:47:31:6a:43:e8:8d:4e:06: b5:29:93:58:5d:19:f0:bf:e1:8e:ef:09:e5:a6:85:c7:b0:6c: 7a:e7:c1:70:22:5d:c9:e9:dd:17:0b:c7:ac:5f:0a:52:f8:38: a3:b7:5d:a3:97:48:e4:a4:bb:85:02:e5:94:5c:18:27:f7:87: 1c:2c:53:7a:23:39:f0:34:35:d9:cf:79:76:41:65:70:73:4c: c3:65:fa:83:ce:a3:36:7c:cd:5b:60:0f:9d:36:c8:8a:c3:f7: 8a:11:b3:e1:39:8f:a2:d2:04:87:14:77:5a:a0:80:03:01:0b: db:b7:fa:fe:13:12:69:ee:ac:2b:38:a3:5c:6e:38:9a:79:0a: 57:5b:c6:95:00:bc:3a:a9:79:72:17:b3:2f:29:4c:a9:11:15: 26:6e:16:b5:47:5b:d9:70:bc:40:0d:8d:52:af:a5:3d:99:f5: 38:b4:eb:ed:9c:7d:93:4e:86:d2:92:76:0b:f4:58:b4:37:16: 5c:19:29:f2:fe:71:d1:b2:2b:68:5c:3c:68:f2:4a:62:a1:a4: 57:d1:42:cb:3b:a8:f5:59:8c:5d:1c:7b:14:4d:ea:f5:0d:86: 0d:6b:0e:8c:8d:2b:7b:36:30:91:3d:7c:13:cb:f0:55:c6:3c: ed:0c:4c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji4sQblLVIiX0PaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjQ3ZTQ2YmItMjhhOC00YjgyLTk2YTYtNWVmZGJkMmFlZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBB6LgoQ7XDssdOcT8YOR5CarLv5ixYJ2+9q 1deo5OBhb3gL/kwch6+dkldQXKTP4cWzi0zL1lTg7wJsKcWp6BOIgdGreTajozTg FFgaITDoMigLn1nBQ5mwCs7ZOmx9NqPRHZI6Y1ssfs1Yaeo3HHac1BWdXbIRYotQ ZR/9o6e6jW9Fh2nuwp4sxtP7WyN/OxdBxvvPL8VlctJYnasWCbCY9HUcDbXHektK XBG70KQQnPSFYda/06LgTuwDFvoFUnMlSqnoXqx0UajL3MHkSqlrbZwFebVRMJVP oTEuA1o+IsNmg/pi534qiTBztbRVAZyXaOkSvsg1qGqkqfJjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY2dhWhaB3V2h/Et6FXZPmJ118pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOGNhZjk2NjAtZDYzOS0z MTkyLTk0YzYtMDkwOGRiNDVjOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhPsOpNJZXBF5dHMWpD6I1OBrUpk1hdGfC/4Y7vCeWmhcewbHrnwXAi Xcnp3RcLx6xfClL4OKO3XaOXSOSku4UC5ZRcGCf3hxwsU3ojOfA0NdnPeXZBZXBz TMNl+oPOozZ8zVtgD502yIrD94oRs+E5j6LSBIcUd1qggAMBC9u3+v4TEmnurCs4 o1xuOJp5CldbxpUAvDqpeXIXsy8pTKkRFSZuFrVHW9lwvEANjVKvpT2Z9Ti06+2c fZNOhtKSdgv0WLQ3FlwZKfL+cdGyK2hcPGjySmKhpFfRQss7qPVZjF0cexRN6vUN hg1rDoyNK3s2MJE9fBPL8FXGPO0MTHY= -----END CERTIFICATE-----Generated at Sun Oct 11 16:34:22 2026 by rpki-client