$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa File: fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa (raw, json) Hash identifier: g5i+lbOltulG/U+M1L7SXvntvYtiP2j09oCg1sRt2X4= Subject key identifier: A7:F6:DB:D8:71:2D:92:90:B0:6D:D8:62:0A:0F:B3:4E:1E:FD:E7:46 Certificate issuer: /CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8 Certificate serial: 010D0C9F4328584C470BC51B46E6CB04E8F187E0 Authority key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 14973 IP address blocks: 198.235.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:c5:1b:46:e6:cb:04:e8:f1:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=0664a138-d3a2-423b-aecc-79bf05e89ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:4b:24:9b:dc:7c:6a:91:4e:b6:25:2b:fa: 8d:86:18:20:2d:ae:1a:2d:c5:a4:d6:cb:cb:48:ec: c0:fb:91:bb:f1:70:40:e5:2a:05:1d:31:6b:ce:53: 83:41:bd:6d:81:a2:7d:6e:4c:fd:8b:3e:6f:6a:ee: 55:3f:26:cb:ee:53:d6:9f:2a:1d:76:a8:de:e3:b9: 01:76:b6:2e:d8:8a:12:d6:e9:97:6a:55:2f:58:17: 98:78:bf:ef:c5:ac:c9:ba:98:21:1b:49:65:81:1a: 12:60:6f:c9:3a:4e:6c:e4:8b:da:bd:9c:c3:17:d6: d9:79:07:c1:f8:76:42:d3:89:92:ba:91:4c:eb:9f: 7c:62:10:40:61:71:24:86:43:9f:de:d6:1f:21:61: 83:78:43:37:3f:f7:4e:69:5e:2d:bf:9d:1e:56:b4: 50:45:93:fa:74:f9:89:7f:9e:a3:08:51:5a:ac:c9: ec:89:42:67:2a:26:de:75:67:fa:d8:4f:5e:9c:eb: 7a:51:08:bd:ad:56:24:79:4b:a4:c7:db:b6:7a:c0: e0:3f:71:c2:6b:02:e1:31:ad:11:e9:63:54:9d:5e: d5:cd:a1:74:b1:94:2a:2d:6b:97:d3:20:8e:1f:50: 50:12:3d:22:f7:aa:75:3b:2f:17:e0:27:02:1e:ac: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F6:DB:D8:71:2D:92:90:B0:6D:D8:62:0A:0F:B3:4E:1E:FD:E7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl X509v3 Authority Key Identifier: keyid:D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer sbgp-ipAddrBlock: critical IPv4: 198.235.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8e:69:da:7f:b0:a4:80:04:fe:e1:21:6e:ad:05:d9:22:76: c7:d2:1b:a6:b9:66:df:f4:ab:a8:e4:ee:b4:15:8c:df:b7:7e: f7:08:36:c3:58:3c:14:0e:5a:f8:7d:00:77:ab:6a:8c:97:dd: fb:1b:4c:e4:44:16:0d:af:95:5f:52:0e:eb:49:01:f0:0d:0c: c0:f1:3f:44:f3:7b:bb:64:7d:8f:f5:05:cf:8a:5b:dc:01:93: ad:c8:e7:8c:42:ad:c2:09:46:ec:02:d3:fb:2f:73:7c:06:bb: de:87:ec:db:05:d3:8e:79:71:68:94:83:49:1e:f5:18:34:8f: 4a:46:2c:a0:7c:d2:bc:65:4f:c2:74:0a:9c:cb:99:c0:40:ab: 9e:89:9b:b3:60:09:cb:99:b6:81:55:06:ca:ae:a6:ed:e7:f6: 44:93:d9:e2:ea:42:6c:e9:28:ce:8c:3f:c9:57:23:72:69:2e: bf:13:37:30:7f:03:66:04:ef:0f:89:c4:30:0b:6e:a5:39:5c: 43:30:59:de:d0:1d:35:b3:18:07:26:20:39:4b:ec:49:fb:60: 55:c9:43:fa:c3:d4:3a:15:1b:45:25:3a:56:e5:df:af:2d:34: 1f:1f:28:5a:ed:93:86:ba:90:43:69:95:13:1e:a5:fc:c4:4a: da:84:f7:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8UbRubLBOjxh+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU1Y2U4YmMtYzNjZC00Zjk5LThlM2YtYjRkOGNkNmJj N2U4MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk MDY2NGExMzgtZDNhMi00MjNiLWFlY2MtNzliZjA1ZTg5ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRZLJJvcfGqRTrYlK/qNhhggLa4aLcWk1svL SOzA+5G78XBA5SoFHTFrzlODQb1tgaJ9bkz9iz5vau5VPybL7lPWnyoddqje47kB drYu2IoS1umXalUvWBeYeL/vxazJupghG0llgRoSYG/JOk5s5IvavZzDF9bZeQfB +HZC04mSupFM6598YhBAYXEkhkOf3tYfIWGDeEM3P/dOaV4tv50eVrRQRZP6dPmJ f56jCFFarMnsiUJnKibedWf62E9enOt6UQi9rVYkeUukx9u2esDgP3HCawLhMa0R 6WNUnV7VzaF0sZQqLWuX0yCOH1BQEj0i96p1Oy8X4CcCHqxBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf229hxLZKQsG3YYgoPs04e/edGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZTVj ZThiYy1jM2NkLTRmOTktOGUzZi1iNGQ4Y2Q2YmM3ZTgvZmEyMGY2YTItZDdjMy0z YTJmLTgwNGMtNTFmYTg4MTdlMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWU1Y2U4YmMtYzNjZC00Zjk5LThl M2YtYjRkOGNkNmJjN2U4L2VlNWNlOGJjLWMzY2QtNGY5OS04ZTNmLWI0ZDhjZDZi YzdlOC5jcmwwHwYDVR0jBBgwFoAU1NAY2Fvnfsk6QNxHtPWeS2EwPhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lZTVjZThiYy1jM2NkLTRmOTktOGUzZi1iNGQ4 Y2Q2YmM3ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxus2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqOadp/sKSABP7hIW6tBdkidsfSG6a5Zt/0q6jk7rQVjN+3fvcINsNY PBQOWvh9AHeraoyX3fsbTOREFg2vlV9SDutJAfANDMDxP0Tze7tkfY/1Bc+KW9wB k63I54xCrcIJRuwC0/svc3wGu96H7NsF0455cWiUg0ke9Rg0j0pGLKB80rxlT8J0 CpzLmcBAq56Jm7NgCcuZtoFVBsqupu3n9kST2eLqQmzpKM6MP8lXI3JpLr8TNzB/ A2YE7w+JxDALbqU5XEMwWd7QHTWzGAcmIDlL7En7YFXJQ/rD1DoVG0UlOlbl368t NB8fKFrtk4a6kENplRMepfzEStqE9+o= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:57 2026 by rpki-client