$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json) Hash identifier: 45gQUFqMW2pxBceLtbWd1KJrSqEhfiOcXlwzkgvIyl8= Subject key identifier: 7D:84:1C:D7:A2:C9:C8:70:CE:49:8D:9F:78:2D:4E:2B:A1:7E:87:B1 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584C8046E9789A36240D0140B9A0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 2734 IP address blocks: 208.64.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:e9:78:9a:36:24:0d:01:40:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=8a746a42-84cf-4a1e-95c0-0ddc3ecc10d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:41:11:00:2c:00:de:73:69:69:ac:02:16: 56:75:9e:06:8f:da:df:67:fe:1c:05:c9:38:6b:4c: ac:4f:53:b8:58:ff:c2:5b:67:c8:2b:9b:2a:bc:c9: 3a:6b:8b:ff:02:7d:e1:45:c1:8f:ad:7e:2a:86:25: 2f:ce:98:b0:62:88:d8:87:99:5d:d4:be:5e:ef:00: 86:93:a1:35:4a:62:de:1d:cf:a8:35:29:a0:86:4c: b5:45:71:63:17:bf:be:42:87:88:67:33:d5:30:1f: 18:37:45:e2:78:08:59:c7:be:69:dd:d9:e9:1d:46: d0:33:68:f2:9e:44:46:49:5d:7c:72:94:7f:92:48: 78:26:bc:00:b3:35:9f:08:54:38:56:2d:aa:04:35: 5a:e1:b7:8c:d7:c9:4d:1f:4b:08:ad:a4:7e:13:b7: 73:28:1e:ce:ae:5a:37:10:61:25:15:43:51:d6:2e: 3a:e6:01:9e:b2:55:31:21:b0:b4:89:21:51:0a:e6: de:71:4a:26:2f:2f:73:e1:29:9f:1d:25:1c:b0:6a: 32:35:ad:d2:ab:2c:49:4e:ec:0e:0d:dc:94:50:25: e0:8f:bb:68:e5:3b:fa:51:17:86:4a:1b:13:60:37: 96:d7:7b:04:4c:ad:2e:95:24:c0:1f:ee:32:9b:f8: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:84:1C:D7:A2:C9:C8:70:CE:49:8D:9F:78:2D:4E:2B:A1:7E:87:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:98:b4:39:e5:7f:e4:23:14:c4:05:bb:8d:c2:32:b7:65:6d: dc:3b:dd:35:3c:d4:5c:07:c7:45:32:ea:67:70:45:7e:b0:1e: b8:72:fc:bb:35:c3:03:e9:c7:4a:80:97:10:65:cd:6d:30:15: f2:ce:a0:ae:0c:7f:13:30:21:ea:bd:7b:23:96:66:e5:34:f4: 9d:8e:36:7d:2b:04:66:55:ca:54:d3:ae:f1:9d:11:85:9a:55: e5:97:51:d5:fd:d9:76:1b:de:1e:d1:16:fb:29:58:e6:33:11: 05:61:65:7c:88:9c:20:28:1c:3a:ca:16:dc:f7:fb:54:6c:05: 27:c7:95:dc:ba:8f:ad:de:32:aa:e8:f2:ad:3d:10:ea:04:97: 45:e9:37:c4:34:47:f3:58:16:25:44:df:de:44:3e:56:b5:2c: 18:b7:3f:39:37:1a:b8:12:fc:ca:7d:f0:02:43:03:1b:2f:0e: b6:71:39:96:2d:ad:5c:23:05:46:72:96:04:b1:1f:46:5f:cc: d0:dc:53:76:f6:14:2b:54:4b:f1:97:1f:83:1b:c6:7c:56:32: 9c:b3:84:0b:c4:2d:5a:41:8e:54:d9:0a:d2:cd:6c:24:5e:75: c3:0a:dc:8e:6b:68:d2:ef:3a:92:17:8a:ac:8b:f7:d2:a8:cb: fe:3e:87:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARul4mjYkDQFAuaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk OGE3NDZhNDItODRjZi00YTFlLTk1YzAtMGRkYzNlY2MxMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX1BEQAsAN5zaWmsAhZWdZ4Gj9rfZ/4cBck4 a0ysT1O4WP/CW2fIK5sqvMk6a4v/An3hRcGPrX4qhiUvzpiwYojYh5ld1L5e7wCG k6E1SmLeHc+oNSmghky1RXFjF7++QoeIZzPVMB8YN0XieAhZx75p3dnpHUbQM2jy nkRGSV18cpR/kkh4JrwAszWfCFQ4Vi2qBDVa4beM18lNH0sIraR+E7dzKB7Orlo3 EGElFUNR1i465gGeslUxIbC0iSFRCubecUomLy9z4SmfHSUcsGoyNa3SqyxJTuwO DdyUUCXgj7to5Tv6UReGShsTYDeW13sETK0ulSTAH+4ym/hK9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2EHNeiychwzkmNn3gtTiuhfoexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2U4ZmYzNWEtZWJiZC0z Njk5LTk3YzktYzgwYmQ0YmUyMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWYtDnlf+QjFMQFu43CMrdlbdw73TU81FwHx0Uy6mdwRX6wHrhy/Ls1 wwPpx0qAlxBlzW0wFfLOoK4MfxMwIeq9eyOWZuU09J2ONn0rBGZVylTTrvGdEYWa VeWXUdX92XYb3h7RFvspWOYzEQVhZXyInCAoHDrKFtz3+1RsBSfHldy6j63eMqro 8q09EOoEl0XpN8Q0R/NYFiVE395EPla1LBi3Pzk3GrgS/Mp98AJDAxsvDrZxOZYt rVwjBUZylgSxH0ZfzNDcU3b2FCtUS/GXH4MbxnxWMpyzhAvELVpBjlTZCtLNbCRe dcMK3I5raNLvOpIXiqyL99Koy/4+h84= -----END CERTIFICATE-----Generated at Sun Mar 1 19:17:57 2026 by rpki-client