$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa File: 916e3eba-989b-3327-9cfa-2307267e8513.roa (raw, json) Hash identifier: cqxkTRLZPQaPlcsMMIQBaGjq3FUzt0lG25NfweeMWOE= Subject key identifier: 6A:39:B1:F6:FD:16:47:34:66:B2:8C:55:B4:89:87:31:56:56:33:AB Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584EA79A0AAB6EA9BE1D155D8280 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11404 IP address blocks: 209.236.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:0a:ab:6e:a9:be:1d:15:5d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b2868bb9-afb1-422f-83ae-3cc0872e83d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:86:0d:f5:18:eb:8b:e2:35:5f:80:73:31: 80:6a:a6:41:71:1d:8e:e9:7e:1f:89:bf:fc:a6:80: db:78:77:b3:39:41:62:ea:c4:80:29:4e:a7:42:04: d4:0d:67:e7:1b:7a:2e:fd:31:24:2a:f3:d1:97:a8: 7c:72:b0:26:88:c7:49:02:7f:1f:70:ce:f2:fd:a4: 5b:ba:f9:0c:62:d1:e0:7e:22:f1:9c:eb:f0:0c:58: bf:85:f8:d2:a4:3d:fb:f9:b8:0b:75:8b:fd:0d:be: 43:d0:02:63:94:44:2a:d5:fd:5e:b7:29:2c:c2:90: ee:34:68:74:66:d7:7c:0c:61:65:03:6a:14:89:fd: 52:3b:61:de:a8:9d:f3:6e:be:00:f0:34:d1:ac:0c: d6:d2:99:89:7e:f1:97:87:86:70:8d:4e:bb:01:b1: 5a:d6:27:24:4f:c3:8e:66:f4:55:eb:d1:3c:59:8a: f1:53:0c:e9:2b:f6:87:5d:73:ad:1c:08:13:b3:1d: 77:1b:4b:2b:99:27:5f:2e:bd:f6:ab:d7:78:34:a2: 0c:02:b2:4c:dd:80:67:d4:90:36:03:f4:9f:ae:33: b5:32:3d:d3:b9:d1:a3:f9:b8:cf:bf:32:84:33:4f: 0b:d9:9d:43:3e:bf:bd:56:68:f6:8b:51:28:be:f9: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:39:B1:F6:FD:16:47:34:66:B2:8C:55:B4:89:87:31:56:56:33:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:15:16:a4:34:03:ec:31:45:1b:09:7f:bd:f9:d6:5a:47:5b: c2:d0:51:f6:b2:89:ab:9a:1b:71:8d:14:ed:44:a5:5a:08:53: e4:75:c8:68:88:e7:f0:53:24:3c:29:20:fd:84:3a:28:6e:ea: a0:56:8c:94:f5:9c:8c:75:38:c2:c3:1e:f1:fb:ee:f7:fd:93: 4a:ee:6d:7c:f0:3a:a0:54:70:da:9e:55:c9:90:e4:76:71:73: ed:ee:51:e8:85:a5:19:62:a1:ce:24:19:08:81:e7:b8:56:d8: d4:3c:6e:ce:9b:53:2b:03:d2:dd:06:25:09:5e:7a:3f:4f:f5: ea:97:f6:bc:0e:15:84:fc:71:36:06:ba:fa:fc:07:8b:31:bd: de:f0:bc:b1:81:f4:6b:bb:c4:a9:a6:39:5e:76:b3:c0:43:f5: 88:93:70:43:98:a4:b6:a6:28:4d:4b:be:26:7a:9e:ed:4c:fe: d8:57:6c:06:47:c7:6f:1e:75:c8:81:9e:e3:10:31:be:05:b6: 54:94:38:71:55:70:de:3d:cf:23:36:b7:8d:38:07:43:3c:70: 86:fe:48:18:d5:d1:23:12:64:ff:aa:50:e6:91:71:6c:6a:eb: 2e:a4:20:72:1e:ba:7e:ad:25:87:1c:aa:16:33:42:a1:d5:c4: 8f:6d:d4:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmgqrbqm+HRVdgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjI4NjhiYjktYWZiMS00MjJmLTgzYWUtM2NjMDg3MmU4M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArceGDfUY64viNV+AczGAaqZBcR2O6X4fib/8 poDbeHezOUFi6sSAKU6nQgTUDWfnG3ou/TEkKvPRl6h8crAmiMdJAn8fcM7y/aRb uvkMYtHgfiLxnOvwDFi/hfjSpD37+bgLdYv9Db5D0AJjlEQq1f1etykswpDuNGh0 Ztd8DGFlA2oUif1SO2HeqJ3zbr4A8DTRrAzW0pmJfvGXh4ZwjU67AbFa1ickT8OO ZvRV69E8WYrxUwzpK/aHXXOtHAgTsx13G0srmSdfLr32q9d4NKIMArJM3YBn1JA2 A/SfrjO1Mj3TudGj+bjPvzKEM08L2Z1DPr+9Vmj2i1Eovvnk/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo5sfb9Fkc0ZrKMVbSJhzFWVjOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTE2ZTNlYmEtOTg5Yi0z MzI3LTljZmEtMjMwNzI2N2U4NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcVFqQ0A+wxRRsJf7351lpHW8LQUfayiauaG3GNFO1EpVoIU+R1yGiI 5/BTJDwpIP2EOihu6qBWjJT1nIx1OMLDHvH77vf9k0rubXzwOqBUcNqeVcmQ5HZx c+3uUeiFpRlioc4kGQiB57hW2NQ8bs6bUysD0t0GJQleej9P9eqX9rwOFYT8cTYG uvr8B4sxvd7wvLGB9Gu7xKmmOV52s8BD9YiTcEOYpLamKE1LviZ6nu1M/thXbAZH x28edciBnuMQMb4FtlSUOHFVcN49zyM2t404B0M8cIb+SBjV0SMSZP+qUOaRcWxq 6y6kIHIeun6tJYccqhYzQqHVxI9t1M8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:57 2026 by rpki-client