$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json) Hash identifier: ZnOfAynsr5LKaZfmf6Mv6gR6h9c1yVFbCDkCyRlVtWc= Subject key identifier: 8C:A6:40:C1:0A:D5:A1:7E:E0:99:17:8C:76:2F:C1:15:33:25:0E:AD Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584BA0D2638DE69C6165B8B84780 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 2734 IP address blocks: 208.64.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:63:8d:e6:9c:61:65:b8:b8:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=1f4f2bab-050b-4997-b039-a39301249913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:d0:f0:09:58:84:2a:0a:e7:27:0f:69:3c: ce:3a:aa:2d:f7:66:9b:f4:f3:75:e9:76:be:38:09: 7a:2c:a7:b6:e8:d0:3f:0f:26:38:a6:bf:c3:d7:18: 73:44:cc:ef:1e:32:b6:f8:b5:d3:15:fb:08:9f:b3: 13:fe:d6:68:01:9a:03:ba:de:79:6d:bf:41:fa:26: f1:e8:fc:d1:58:c9:26:79:42:f4:3a:f2:83:6e:e3: da:e9:0a:95:b3:f0:7e:2f:cb:1e:55:43:94:fb:1e: a4:9b:57:02:ac:83:7d:8e:09:5d:b1:ed:16:d2:52: 00:77:10:34:c2:a5:d9:e0:3d:f8:4f:be:c3:f1:2c: 94:f7:6c:73:c9:5a:09:4f:42:7c:72:07:fc:f1:f7: f6:b4:61:bb:f2:a6:ec:37:c6:47:ac:35:b3:13:f3: 1b:33:8e:17:c1:c4:82:bc:22:c9:a1:ef:b1:99:86: 96:c2:1c:6d:3a:cf:d3:f2:b8:80:5e:54:32:16:8a: fb:29:cf:78:85:35:d5:5a:59:d3:e7:36:a2:b8:a0: 7c:98:31:e8:5b:9a:df:ca:77:80:d0:72:79:ff:36: 64:ca:38:f3:bd:0b:62:73:f4:08:40:70:8b:6d:ad: 32:6a:2f:33:4c:c8:cc:21:4a:3c:e6:34:77:3e:c0: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A6:40:C1:0A:D5:A1:7E:E0:99:17:8C:76:2F:C1:15:33:25:0E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:23:19:6f:34:9f:fd:b1:fc:1f:97:d9:6e:9a:a0:c0:31: db:ea:87:fd:92:78:8d:cf:e5:a1:8c:44:bb:8c:9d:cd:d3:c6: c6:39:18:00:8e:f6:89:c0:a9:7d:f2:8f:16:55:f9:77:76:4f: ab:da:5b:b0:cc:6e:51:84:60:87:9b:ba:13:3e:b5:63:8f:02: ae:e3:7b:dd:a3:a3:80:e9:72:aa:f1:37:0a:9e:06:3d:2b:10: 7d:e4:e2:68:55:96:5e:0a:fb:64:f7:e3:0d:83:0f:f8:d9:23: 3b:63:78:a5:3d:34:7a:4f:69:01:bf:9f:08:08:ec:63:04:e0: 8e:78:9f:fd:3a:8e:30:eb:ef:56:92:10:27:d6:f8:89:0a:a9: 05:cd:02:1b:d4:8e:94:8b:35:ba:70:0f:88:98:f9:06:8e:f1: 46:01:37:8d:be:d1:10:a9:31:6c:8b:31:05:ac:13:e8:41:7f: 77:d4:a1:00:ef:dc:12:e3:b7:40:06:85:49:5e:c9:9b:7d:7b: 8a:6f:c6:d3:2c:a5:2d:1c:a2:bc:a8:3c:36:ce:7c:4e:28:37: 1b:60:0b:0c:52:e5:01:13:7f:8e:53:1c:2e:5c:18:ff:e3:e6: 79:45:af:a5:9b:ae:b9:2c:6c:d9:ef:ff:bf:32:96:57:2e:ac: 21:6a:9e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mON5pxhZbi4R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MWY0ZjJiYWItMDUwYi00OTk3LWIwMzktYTM5MzAxMjQ5OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0//Q8AlYhCoK5ycPaTzOOqot92ab9PN16Xa+ OAl6LKe26NA/DyY4pr/D1xhzRMzvHjK2+LXTFfsIn7MT/tZoAZoDut55bb9B+ibx 6PzRWMkmeUL0OvKDbuPa6QqVs/B+L8seVUOU+x6km1cCrIN9jgldse0W0lIAdxA0 wqXZ4D34T77D8SyU92xzyVoJT0J8cgf88ff2tGG78qbsN8ZHrDWzE/MbM44XwcSC vCLJoe+xmYaWwhxtOs/T8riAXlQyFor7Kc94hTXVWlnT5zaiuKB8mDHoW5rfyneA 0HJ5/zZkyjjzvQtic/QIQHCLba0yai8zTMjMIUo85jR3PsBgpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIymQMEK1aF+4JkXjHYvwRUzJQ6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2U4ZmYzNWEtZWJiZC0z Njk5LTk3YzktYzgwYmQ0YmUyMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuUIxlvNJ/9sfwfl9lumqDAMdvqh/2SeI3P5aGMRLuMnc3TxsY5GACO 9onAqX3yjxZV+Xd2T6vaW7DMblGEYIebuhM+tWOPAq7je92jo4DpcqrxNwqeBj0r EH3k4mhVll4K+2T34w2DD/jZIztjeKU9NHpPaQG/nwgI7GME4I54n/06jjDr71aS ECfW+IkKqQXNAhvUjpSLNbpwD4iY+QaO8UYBN42+0RCpMWyLMQWsE+hBf3fUoQDv 3BLjt0AGhUleyZt9e4pvxtMspS0coryoPDbOfE4oNxtgCwxS5QETf45THC5cGP/j 5nlFr6WbrrksbNnv/78yllcurCFqngg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:41 2025 by rpki-client