$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ceb67213-a6a0-34b7-8386-61170304be99.roa File: ceb67213-a6a0-34b7-8386-61170304be99.roa (raw, json) Hash identifier: FMw4i8mQN0Xwve+S8Lv5dFDUBWtZ/4+Qd+Dx7GZ158w= Subject key identifier: C8:50:DF:55:05:7C:9C:80:6F:51:52:8C:FC:B6:FB:5C:D7:AE:FA:0B Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584CBAE73DE59688A09378995230 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ceb67213-a6a0-34b7-8386-61170304be99.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 5065 IP address blocks: 64.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3d:e5:96:88:a0:93:78:99:52:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=d353c2ea-9d6b-4a99-98e6-89dbb173be9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:1d:b0:c0:a6:4a:de:31:74:4e:4b:86:07: fc:a8:f3:97:29:76:40:fb:6c:20:eb:51:77:b5:09: 58:2b:f6:56:4c:ed:93:ae:5f:75:bb:75:5a:ac:d3: b9:ef:87:9e:4c:72:5c:71:86:17:81:86:28:02:86: ac:2f:94:7e:56:82:93:39:7c:c3:1b:9c:e6:71:67: 8e:ea:1b:b3:53:4c:4c:28:8e:54:66:d8:04:00:4f: 2c:33:e4:0e:3e:d4:eb:14:dc:77:f2:ba:43:04:0f: 5f:18:9f:42:48:13:4f:a0:72:cd:58:56:3a:b5:9a: a2:ef:33:36:6b:e4:0b:d7:bc:03:e0:83:39:ba:05: f9:70:66:f7:e9:0d:a8:f4:d4:f5:ff:84:dd:9f:79: d6:28:f2:6a:1c:d1:4a:d6:26:58:a9:51:af:d1:f5: 6e:5e:c3:68:51:fe:3f:43:35:f6:24:de:aa:97:6a: ba:e9:23:ed:99:28:be:86:99:c4:ae:4c:13:8b:68: 61:bd:f3:76:50:50:1f:51:11:e7:26:5a:d0:1e:c7: d0:1e:b0:4d:a5:d3:16:6d:93:f0:3e:b3:00:25:d7: 22:40:30:cb:18:11:fe:40:58:42:c8:ac:60:fe:8f: 18:2d:02:c7:c5:2b:b5:33:45:79:8d:4c:cf:4a:00: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:50:DF:55:05:7C:9C:80:6F:51:52:8C:FC:B6:FB:5C:D7:AE:FA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ceb67213-a6a0-34b7-8386-61170304be99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fb:f8:fc:2d:cf:f9:da:dd:41:56:63:58:5e:a1:79:c7:02: 46:56:75:c2:ad:0b:81:0e:3e:7f:fa:87:ac:8d:2a:96:f3:af: 87:3f:7f:ee:a8:1b:c3:83:0c:02:22:7a:26:bb:49:09:56:d0: b5:18:de:f7:2d:81:15:4e:b8:2e:63:1c:e5:6d:17:e0:45:05: 50:43:c2:5b:da:12:0c:2a:1b:d2:0b:7e:06:80:3f:97:d5:3e: 87:05:c5:a5:c3:e9:cf:fa:ce:5a:09:8a:ad:f3:21:5c:e7:bf: 8b:42:f2:84:72:27:40:fb:34:c5:f2:e5:ca:73:e9:f9:53:2f: 31:c7:75:88:bd:c9:09:6d:c9:e8:fe:4a:b0:ae:26:9c:ad:38: b2:c7:f6:59:f4:6b:57:4b:a2:84:4e:99:ab:bd:b7:54:da:51: a9:36:27:dc:c2:6e:90:6f:53:a4:7a:50:b3:c8:d7:4c:68:c1: 8e:1d:62:9f:28:03:33:5a:41:48:30:10:b9:11:3d:b0:10:02: 5c:79:74:af:9c:d5:32:8f:47:11:e8:68:b3:1c:c7:e3:8a:d4: c8:cf:3a:a3:d1:f3:54:be:2f:a8:5f:46:bf:d1:0e:fd:33:45: 00:e0:2f:15:d0:0a:b9:19:95:ac:31:c9:d3:0b:fe:b7:bf:0a: 4e:7d:09:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65z3lloigk3iZUjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZDM1M2MyZWEtOWQ2Yi00YTk5LTk4ZTYtODlkYmIxNzNiZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhIdsMCmSt4xdE5Lhgf8qPOXKXZA+2wg61F3 tQlYK/ZWTO2Trl91u3VarNO574eeTHJccYYXgYYoAoasL5R+VoKTOXzDG5zmcWeO 6huzU0xMKI5UZtgEAE8sM+QOPtTrFNx38rpDBA9fGJ9CSBNPoHLNWFY6tZqi7zM2 a+QL17wD4IM5ugX5cGb36Q2o9NT1/4Tdn3nWKPJqHNFK1iZYqVGv0fVuXsNoUf4/ QzX2JN6ql2q66SPtmSi+hpnErkwTi2hhvfN2UFAfURHnJlrQHsfQHrBNpdMWbZPw PrMAJdciQDDLGBH+QFhCyKxg/o8YLQLHxSu1M0V5jUzPSgCqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhQ31UFfJyAb1FSjPy2+1zXrvoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvY2ViNjcyMTMtYTZhMC0z NGI3LTgzODYtNjExNzAzMDRiZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX7+Pwtz/na3UFWY1heoXnHAkZWdcKtC4EOPn/6h6yNKpbzr4c/f+6o G8ODDAIieia7SQlW0LUY3vctgRVOuC5jHOVtF+BFBVBDwlvaEgwqG9ILfgaAP5fV PocFxaXD6c/6zloJiq3zIVznv4tC8oRyJ0D7NMXy5cpz6flTLzHHdYi9yQltyej+ SrCuJpytOLLH9ln0a1dLooROmau9t1TaUak2J9zCbpBvU6R6ULPI10xowY4dYp8o AzNaQUgwELkRPbAQAlx5dK+c1TKPRxHoaLMcx+OK1MjPOqPR81S+L6hfRr/RDv0z RQDgLxXQCrkZlawxydML/re/Ck59CVk= -----END CERTIFICATE-----Generated at Sun Mar 1 19:17:54 2026 by rpki-client