$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/aa5a5ee6-7d5e-3181-9496-14141425bdba.roa File: aa5a5ee6-7d5e-3181-9496-14141425bdba.roa (raw, json) Hash identifier: Xzr/ZNcyn2wM+ArTCJD0+RvIe+1Bk7LRa/tsF698RfE= Subject key identifier: 24:95:7B:3B:15:B5:9A:48:D6:5E:F0:BC:B7:56:B7:9C:81:F9:C4:68 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584CB08FEB02F258D176BBF32F00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/aa5a5ee6-7d5e-3181-9496-14141425bdba.roa Signing time: Thu 29 Jan 2026 21:06:53 +0000 ROA not before: Thu 29 Jan 2026 21:06:53 +0000 ROA not after: Wed 29 Apr 2026 20:06:53 +0000 asID: 205220 IP address blocks: 206.245.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:8f:eb:02:f2:58:d1:76:bb:f3:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jan 29 21:06:53 2026 GMT Not After : Apr 29 20:06:53 2026 GMT Subject: CN=77a6325c-529d-4871-936b-912c3feb3e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:89:7f:8f:db:6c:75:53:6f:0d:e5:65:00: c0:06:10:67:3b:4d:58:ea:ba:4b:4e:f0:41:1c:6c: 59:87:a0:76:d0:83:08:00:a2:9a:90:b3:e7:eb:f0: a8:e8:69:df:19:fb:59:e4:63:5c:7d:d0:ad:db:e9: 95:07:ca:c4:7e:85:18:2f:0b:30:b3:b0:9d:9f:0d: c4:9c:b0:b6:39:0d:5e:7a:a3:44:9d:2e:06:f0:e6: 7c:88:74:a5:40:29:af:5f:a5:57:b9:eb:99:e9:bb: 66:cf:ad:20:ee:b2:23:6c:aa:40:ca:35:0d:e0:cb: c1:86:1a:9a:9e:94:43:4c:33:d8:c2:1c:6d:6f:bd: c9:73:f4:30:10:60:91:53:4d:d8:1e:43:d4:49:9f: 30:20:1a:4e:18:bc:b2:6f:aa:88:eb:ec:3a:79:eb: 6b:8b:63:ab:ca:71:03:8f:4d:a6:3f:0e:3c:ac:c0: 2c:1d:ec:6d:b5:89:ad:71:21:7e:af:75:89:7d:e6: f4:3c:eb:9d:38:28:b3:e9:a7:02:13:58:55:09:dc: 57:29:e4:57:e7:de:d0:88:80:22:58:1c:1d:44:85: 6a:f5:48:38:a4:19:4e:5b:82:f0:73:c7:ea:7d:e5: 16:26:7d:f4:44:cb:6f:eb:ea:7d:9b:85:80:65:5f: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:95:7B:3B:15:B5:9A:48:D6:5E:F0:BC:B7:56:B7:9C:81:F9:C4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/aa5a5ee6-7d5e-3181-9496-14141425bdba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:78:bb:14:50:93:eb:71:54:84:63:98:2e:55:59:4e:8e:fd: 94:73:ee:53:63:25:76:54:41:86:57:a8:ac:66:b3:04:1b:71: 72:a2:8d:de:49:cb:5a:39:59:dc:41:09:d5:bc:64:5d:c3:0f: c9:5d:9b:22:10:9a:5c:b9:20:af:82:51:d3:d0:55:54:e8:f7: 8d:38:e1:4d:bb:0b:ab:e5:e7:3c:2a:90:c6:72:dc:86:cf:c5: e1:78:af:63:3c:f6:cc:0d:0e:88:2c:1c:0a:3b:a7:40:18:4b: 18:f1:7b:b8:27:d2:ae:79:70:4c:6d:00:e9:ef:30:cb:b9:7e: d0:f3:7f:36:c2:22:40:ac:da:52:4a:99:d6:79:84:4d:60:3a: fe:f7:97:fd:b3:13:da:b2:e9:83:ba:c5:3d:53:10:5c:9b:31: 14:49:9c:d6:dc:f3:d7:e4:cc:5d:f8:15:f2:9e:b7:a2:07:ff: 4d:b1:e7:86:48:13:77:7c:1d:ef:bd:a4:97:30:fb:df:63:50: 41:93:f9:1d:30:b7:da:d6:d5:6a:a5:04:66:5b:32:cc:2f:5e: 36:d1:06:f2:15:53:33:21:c7:eb:46:d1:aa:fc:23:f2:55:ce: 8d:d4:e2:5b:6d:9a:11:d0:5e:f6:d9:f0:64:36:d7:12:65:e8: e8:0a:5c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEywj+sC8ljRdrvzLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDEyOTIxMDY1M1oXDTI2MDQyOTIwMDY1M1owLzEtMCsGA1UEAxMk NzdhNjMyNWMtNTI5ZC00ODcxLTkzNmItOTEyYzNmZWIzZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJiJf4/bbHVTbw3lZQDABhBnO01Y6rpLTvBB HGxZh6B20IMIAKKakLPn6/Co6GnfGftZ5GNcfdCt2+mVB8rEfoUYLwsws7Cdnw3E nLC2OQ1eeqNEnS4G8OZ8iHSlQCmvX6VXueuZ6btmz60g7rIjbKpAyjUN4MvBhhqa npRDTDPYwhxtb73Jc/QwEGCRU03YHkPUSZ8wIBpOGLyyb6qI6+w6eetri2OrynED j02mPw48rMAsHexttYmtcSF+r3WJfeb0POudOCiz6acCE1hVCdxXKeRX597QiIAi WBwdRIVq9Ug4pBlOW4Lwc8fqfeUWJn30RMtv6+p9m4WAZV9RVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSVezsVtZpI1l7wvLdWt5yB+cRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYWE1YTVlZTYtN2Q1ZS0z MTgxLTk0OTYtMTQxNDE0MjViZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG14uxRQk+txVIRjmC5VWU6O/ZRz7lNjJXZUQYZXqKxmswQbcXKijd5J y1o5WdxBCdW8ZF3DD8ldmyIQmly5IK+CUdPQVVTo94044U27C6vl5zwqkMZy3IbP xeF4r2M89swNDogsHAo7p0AYSxjxe7gn0q55cExtAOnvMMu5ftDzfzbCIkCs2lJK mdZ5hE1gOv73l/2zE9qy6YO6xT1TEFybMRRJnNbc89fkzF34FfKet6IH/02x54ZI E3d8He+9pJcw+99jUEGT+R0wt9rW1WqlBGZbMswvXjbRBvIVUzMhx+tG0ar8I/JV zo3U4lttmhHQXvbZ8GQ21xJl6OgKXKI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:56:29 2026 by rpki-client