$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa File: 8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa (raw, json) Hash identifier: jAbj6AKtV3eeS9lmAJ7qtaoieeN89wvfGpkhg+mnJKU= Subject key identifier: A4:DB:73:E9:39:25:82:5B:E4:B7:27:F4:CA:0C:A4:E1:00:C1:3F:9D Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B5DD1DA1FF6E7B8AE35A21640 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 7029 IP address blocks: 209.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:da:1f:f6:e7:b8:ae:35:a2:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=fbe5a93d-100c-4aef-ae19-d79b3439f10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:78:88:f4:b0:48:89:3f:cb:76:b8:27:a9: c8:7a:37:6c:09:9c:2e:c9:76:cc:4e:dc:26:45:bd: c3:d0:2c:26:b2:5b:e5:75:2a:be:6f:46:e0:b5:84: 5a:4e:19:5c:49:3d:74:4c:c0:53:4b:eb:64:f1:7a: 8e:ee:1e:60:70:86:31:28:e5:b1:a3:52:ab:87:9d: f5:44:64:53:0e:28:cf:fc:e7:d5:79:c5:b4:17:9c: 5b:c1:d0:a9:25:2c:fd:a3:76:07:15:51:cb:cb:97: 62:27:77:82:f3:f2:39:ae:29:f9:68:d3:20:6d:9d: 76:17:1f:63:1b:09:2b:86:21:a9:c5:4d:6e:7e:ca: c0:12:7e:2a:e1:ab:83:15:ae:a1:62:ee:17:83:e4: 97:3e:f6:ce:58:3f:e8:19:20:05:da:f0:f7:31:c6: cf:4e:53:26:a9:7f:48:17:f9:02:e2:47:d9:43:a1: 18:b6:fc:be:f1:ad:27:3c:21:84:fa:a1:83:a8:5a: 27:2a:46:fe:dc:0d:67:2d:68:92:2d:95:eb:76:6a: 2e:26:f0:89:d0:a6:b3:33:63:62:29:7c:42:49:bd: 12:6f:1c:63:45:d1:d8:64:e3:cc:84:80:cd:0d:82: f2:20:f0:07:91:87:4a:dc:c0:d4:f1:30:01:b2:f8: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DB:73:E9:39:25:82:5B:E4:B7:27:F4:CA:0C:A4:E1:00:C1:3F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8ea5ec7f-0637-3669-803d-1b6218ff87ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f7:2e:a9:db:01:3c:76:dc:55:eb:e9:df:bd:7b:1a:df:34: 27:6c:74:81:55:bd:b8:8c:0e:e5:a9:2b:2b:59:d7:ef:97:d2: c2:27:54:22:0d:3c:26:52:c9:7d:be:64:93:e7:0e:fc:2a:e9: 26:1c:92:a9:97:f0:59:dd:3d:70:d3:1f:11:a5:14:e4:d5:6e: f5:5d:11:4b:1b:90:03:cd:88:d4:8f:25:ab:5f:a2:01:cc:4b: a4:7a:55:5b:17:8e:13:08:bb:d7:93:84:7f:0b:ab:51:fb:01: fd:79:f1:c9:eb:fe:62:23:7a:46:e9:df:62:88:cb:1c:3a:4b: 3e:3a:14:70:b2:f3:6e:c7:49:28:b8:52:4e:da:01:a8:24:a6: 43:40:4b:15:cb:a2:2c:e5:29:19:02:01:f3:2c:82:49:2b:f6: 51:15:44:51:4b:86:a6:a1:54:29:e0:11:08:bb:f7:ce:04:5a: f6:6a:54:fe:25:29:e5:d2:e4:34:11:e9:ee:6a:56:22:67:1f: c7:c9:0f:28:93:d7:21:0f:8b:81:c0:bd:2d:0d:e7:8a:aa:4f: f9:1b:88:26:98:75:04:22:3c:99:cb:e3:5b:7f:b2:2e:4b:40: 28:9a:9c:81:a2:c8:f2:35:6b:de:5a:54:3f:7e:1c:0c:b2:49: 6c:a1:aa:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0dof9ue4rjWiFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmJlNWE5M2QtMTAwYy00YWVmLWFlMTktZDc5YjM0MzlmMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNF4iPSwSIk/y3a4J6nIejdsCZwuyXbMTtwm Rb3D0CwmslvldSq+b0bgtYRaThlcST10TMBTS+tk8XqO7h5gcIYxKOWxo1Krh531 RGRTDijP/OfVecW0F5xbwdCpJSz9o3YHFVHLy5diJ3eC8/I5rin5aNMgbZ12Fx9j GwkrhiGpxU1ufsrAEn4q4auDFa6hYu4Xg+SXPvbOWD/oGSAF2vD3McbPTlMmqX9I F/kC4kfZQ6EYtvy+8a0nPCGE+qGDqFonKkb+3A1nLWiSLZXrdmouJvCJ0KazM2Ni KXxCSb0SbxxjRdHYZOPMhIDNDYLyIPAHkYdK3MDU8TABsvjy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTbc+k5JYJb5Lcn9MoMpOEAwT+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOGVhNWVjN2YtMDYzNy0z NjY5LTgwM2QtMWI2MjE4ZmY4N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf3LqnbATx23FXr6d+9exrfNCdsdIFVvbiMDuWpKytZ1++X0sInVCIN PCZSyX2+ZJPnDvwq6SYckqmX8FndPXDTHxGlFOTVbvVdEUsbkAPNiNSPJatfogHM S6R6VVsXjhMIu9eThH8Lq1H7Af158cnr/mIjekbp32KIyxw6Sz46FHCy827HSSi4 Uk7aAagkpkNASxXLoizlKRkCAfMsgkkr9lEVRFFLhqahVCngEQi7984EWvZqVP4l KeXS5DQR6e5qViJnH8fJDyiT1yEPi4HAvS0N54qqT/kbiCaYdQQiPJnL41t/si5L QCianIGiyPI1a95aVD9+HAyySWyhqqM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:27 2025 by rpki-client