$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa File: c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa (raw, json) Hash identifier: ++GDaCSF5OnmjUlkaFEwjwtkCeRtwwLGwKL7F5gLmWs= Subject key identifier: 30:32:31:E6:32:71:98:72:81:53:97:24:5C:17:05:31:A3:59:BC:E0 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584EA787F2332679B6FADCAE75F8 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2914 IP address blocks: 108.59.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f2:33:26:79:b6:fa:dc:ae:75:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d8a366a6-ffa0-4901-9113-a43194e84c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:e5:2b:11:0e:ca:fc:5b:87:20:4a:9a:90: 5b:ca:c6:f3:bd:05:63:cc:38:d5:83:85:66:73:1c: 3b:ed:d0:24:c5:77:1d:a4:d7:33:39:cd:8c:d7:cb: 7f:43:99:df:ad:7d:4b:f7:3b:e7:92:b6:f8:a1:68: ed:d3:1d:ca:ac:81:b9:c0:6d:26:31:b4:35:bc:db: 71:92:1b:59:a2:af:15:e5:f7:c1:6d:e9:be:e5:44: 9d:6f:8b:22:04:74:b9:e9:8a:bf:37:cf:2e:49:56: 39:b0:c9:b9:3f:f7:00:6c:b3:0a:33:32:e4:80:7b: c6:ae:68:4f:8f:9d:93:47:87:f4:d8:96:f8:90:1e: 21:9d:3d:86:92:b6:b5:84:29:40:4c:3d:ec:f9:74: 60:5f:f3:c4:d3:3c:90:93:ea:40:aa:21:3d:e3:a7: 92:47:63:42:44:08:39:3c:11:6d:9a:bc:b5:dc:35: cf:7d:9c:db:0e:d0:16:85:35:b7:1f:45:ee:04:e5: 09:45:8b:79:15:ce:50:75:25:3a:ca:f3:7e:b8:a0: f8:0d:7d:ca:cf:26:2d:de:0d:f4:00:2a:88:37:ba: 6e:87:5d:bd:0b:ca:b5:f8:c7:34:fb:6a:0a:0f:17: 5e:24:b4:d7:0f:85:1b:a7:01:32:85:41:8b:3e:08: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:32:31:E6:32:71:98:72:81:53:97:24:5C:17:05:31:A3:59:BC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/c40d56a4-5991-30b0-9e74-f1a6f389fa08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2b:ee:07:c3:fd:f1:26:b7:02:dc:87:ec:26:9c:f0:7d:81: 9d:68:d3:2b:94:4e:a3:f8:b7:e2:c6:1b:13:8a:ed:00:f4:70: 84:f0:9b:b5:df:04:44:b4:29:eb:78:75:f1:62:ad:3c:8d:d6: 11:f9:75:9e:fc:52:b4:b4:c6:49:45:81:d5:f8:e5:4d:34:c5: cb:e6:05:4d:ed:6c:2a:01:39:31:0d:91:bd:a6:d8:07:88:99: 39:d4:ff:d8:0e:64:cb:59:bf:70:35:c2:cb:da:75:ae:9c:f7: 5c:7d:d8:2d:c2:dd:77:95:6c:bb:f5:a9:5d:d7:c6:c9:2d:ec: e2:b6:f6:e7:81:b6:5c:2d:56:57:23:d3:91:e7:00:66:27:aa: 3e:a4:20:40:65:f2:15:63:71:03:b0:b4:47:05:8f:01:06:a6: 64:77:13:cc:f6:e5:ae:0a:d8:96:47:7b:6a:36:bb:15:e0:8f: 41:78:e2:58:f2:46:41:2b:24:dd:8d:8e:94:1c:14:f5:8d:f4: c2:e4:db:a8:00:51:ec:91:42:16:52:85:d0:0b:23:d1:ae:62: 23:c6:38:a4:be:02:6c:a0:9a:16:38:4c:7b:1d:35:b2:7b:43: 1e:69:a9:a7:73:11:88:b3:df:29:f2:b6:75:1b:94:94:5d:a5: c1:04:0e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/IzJnm2+tyudfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDhhMzY2YTYtZmZhMC00OTAxLTkxMTMtYTQzMTk0ZTg0YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy43lKxEOyvxbhyBKmpBbysbzvQVjzDjVg4Vm cxw77dAkxXcdpNczOc2M18t/Q5nfrX1L9zvnkrb4oWjt0x3KrIG5wG0mMbQ1vNtx khtZoq8V5ffBbem+5USdb4siBHS56Yq/N88uSVY5sMm5P/cAbLMKMzLkgHvGrmhP j52TR4f02Jb4kB4hnT2Gkra1hClATD3s+XRgX/PE0zyQk+pAqiE946eSR2NCRAg5 PBFtmry13DXPfZzbDtAWhTW3H0XuBOUJRYt5Fc5QdSU6yvN+uKD4DX3KzyYt3g30 ACqIN7puh129C8q1+Mc0+2oKDxdeJLTXD4UbpwEyhUGLPgiBUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAyMeYycZhygVOXJFwXBTGjWbzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYzQwZDU2YTQtNTk5MS0z MGIwLTllNzQtZjFhNmYzODlmYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQr7gfD/fEmtwLch+wmnPB9gZ1o0yuUTqP4t+LGGxOK7QD0cITwm7Xf BES0Ket4dfFirTyN1hH5dZ78UrS0xklFgdX45U00xcvmBU3tbCoBOTENkb2m2AeI mTnU/9gOZMtZv3A1wsvada6c91x92C3C3XeVbLv1qV3Xxskt7OK29ueBtlwtVlcj 05HnAGYnqj6kIEBl8hVjcQOwtEcFjwEGpmR3E8z25a4K2JZHe2o2uxXgj0F44ljy RkErJN2NjpQcFPWN9MLk26gAUeyRQhZShdALI9GuYiPGOKS+AmygmhY4THsdNbJ7 Qx5pqadzEYiz3ynytnUblJRdpcEEDjA= -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:36 2026 by rpki-client