$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/f0f58a7e-ce24-3b9f-a7ad-96d9201f980d.roa File: f0f58a7e-ce24-3b9f-a7ad-96d9201f980d.roa (raw, json) Hash identifier: KDJuW+RPrBQNsn94ZNoa1jys6mGzJtuR0PfvC73UN7I= Subject key identifier: C2:60:2E:46:CB:F2:2B:09:02:3C:77:C3:92:6C:B3:6B:05:BA:7C:EF Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584CF4EB2528A0C817E5EA29D040 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/f0f58a7e-ce24-3b9f-a7ad-96d9201f980d.roa Signing time: Mon 23 Feb 2026 08:45:40 +0000 ROA not before: Mon 23 Feb 2026 08:45:40 +0000 ROA not after: Sun 24 May 2026 07:45:40 +0000 asID: 393448 IP address blocks: 66.235.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:eb:25:28:a0:c8:17:e5:ea:29:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Feb 23 08:45:40 2026 GMT Not After : May 24 07:45:40 2026 GMT Subject: CN=83890ef0-703a-4c76-9ec8-5d1c1d116116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:b8:fc:3b:dc:d5:b1:15:df:04:1a:b6:37: cd:0b:3c:e8:81:31:4f:cf:82:ef:a7:03:46:7e:e7: a0:9a:de:71:29:8b:1e:31:44:5e:b2:55:7c:fe:25: 9b:cd:4b:32:b8:59:83:2e:b3:7b:86:32:cd:93:ca: e3:5f:63:7f:16:0d:b3:94:55:8f:6d:0a:81:b3:1b: ec:f5:57:d0:a0:b6:e4:a6:c6:b4:2a:e4:6c:65:54: f2:ae:f2:c9:fa:bb:a5:46:f1:f2:99:8a:2f:60:6e: 21:a7:05:a6:1c:0d:97:6a:98:ba:d3:17:0c:50:f7: 07:76:76:80:ce:24:42:8b:d0:df:e1:60:2c:cf:db: 12:6e:dd:1d:70:b2:c6:d0:95:4c:00:07:54:d8:76: 14:9a:8d:32:c4:2c:79:c0:7a:19:46:51:1c:7d:ed: a6:3f:c0:1a:91:8d:8b:02:96:24:1c:c7:bc:c8:f9: 47:22:4d:39:78:71:ac:18:c9:b0:3a:d4:0d:21:d5: 18:84:a4:e5:96:4a:18:d0:60:64:37:64:60:4c:f5: 33:9a:60:1f:bf:14:7d:90:fa:dd:f7:25:0f:36:ff: 40:a3:a1:3b:ae:90:40:68:2a:02:12:d7:a0:54:a5: 45:91:19:cb:a7:fc:96:43:cc:37:2b:cc:82:26:ec: 0b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:60:2E:46:CB:F2:2B:09:02:3C:77:C3:92:6C:B3:6B:05:BA:7C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/f0f58a7e-ce24-3b9f-a7ad-96d9201f980d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 66.235.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:28:8d:d2:f5:a1:97:f5:cc:47:5f:ce:aa:f5:cc:d7:58:19: 67:59:8d:d8:96:10:df:f7:48:5a:f0:01:d2:9e:a8:5f:b3:67: 6b:81:72:78:de:4e:9a:73:17:19:39:d6:73:f1:fd:fc:55:d4: c0:7b:8e:bb:ac:69:3a:77:ea:fd:9f:9b:06:96:79:05:b1:42: 53:1c:be:40:9a:cd:da:3a:19:13:d7:a8:6e:85:9c:98:b2:c0: b1:fd:4f:2c:e7:e9:7c:5f:34:9b:58:ea:68:3f:af:ab:1a:48: 1d:56:02:68:70:c5:42:cd:07:d3:a8:76:14:8e:99:a5:ce:c3: 56:f1:85:53:4c:63:53:73:46:3d:51:dd:d6:77:74:d6:3f:08: 20:b2:40:9e:ca:d4:a9:da:a9:ff:60:a0:45:27:6f:8b:80:40: b4:78:b7:ab:3d:1a:bb:0d:6e:0d:99:7a:6c:59:88:53:38:56: f0:50:75:66:d5:e0:95:20:b5:5e:a5:c7:17:33:bc:9b:d0:99: 5e:61:3d:37:12:f3:7f:a5:78:e2:c5:9f:95:3a:01:2c:16:87: 38:8f:85:6d:53:b8:04:7d:38:2e:98:8f:94:c6:b9:d5:eb:06: 55:73:37:65:fc:6c:34:0d:69:c4:a4:f6:22:c8:98:db:4f:56: 8a:d1:6a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz06yUooMgX5eop0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI2MDIyMzA4NDU0MFoXDTI2MDUyNDA3NDU0MFowLzEtMCsGA1UEAxMk ODM4OTBlZjAtNzAzYS00Yzc2LTllYzgtNWQxYzFkMTE2MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZC4/Dvc1bEV3wQatjfNCzzogTFPz4LvpwNG fuegmt5xKYseMUReslV8/iWbzUsyuFmDLrN7hjLNk8rjX2N/Fg2zlFWPbQqBsxvs 9VfQoLbkpsa0KuRsZVTyrvLJ+rulRvHymYovYG4hpwWmHA2Xapi60xcMUPcHdnaA ziRCi9Df4WAsz9sSbt0dcLLG0JVMAAdU2HYUmo0yxCx5wHoZRlEcfe2mP8AakY2L ApYkHMe8yPlHIk05eHGsGMmwOtQNIdUYhKTllkoY0GBkN2RgTPUzmmAfvxR9kPrd 9yUPNv9Ao6E7rpBAaCoCEtegVKVFkRnLp/yWQ8w3K8yCJuwLjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJgLkbL8isJAjx3w5Jss2sFunzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvZjBmNThhN2UtY2UyNC0z YjlmLWE3YWQtOTZkOTIwMWY5ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQutvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4ojdL1oZf1zEdfzqr1zNdYGWdZjdiWEN/3SFrwAdKeqF+zZ2uBcnje TppzFxk51nPx/fxV1MB7jrusaTp36v2fmwaWeQWxQlMcvkCazdo6GRPXqG6FnJiy wLH9Tyzn6XxfNJtY6mg/r6saSB1WAmhwxULNB9OodhSOmaXOw1bxhVNMY1NzRj1R 3dZ3dNY/CCCyQJ7K1Knaqf9goEUnb4uAQLR4t6s9GrsNbg2ZemxZiFM4VvBQdWbV 4JUgtV6lxxczvJvQmV5hPTcS83+leOLFn5U6ASwWhziPhW1TuAR9OC6Yj5TGudXr BlVzN2X8bDQNacSk9iLImNtPVorRaqQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:11 2026 by rpki-client