$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa File: 70024f6c-997e-38fe-a1b0-71e9db6be67e.roa (raw, json) Hash identifier: W4s68UUr8srbWjAAI8AoVbJStrwWx89BHBpRHd3CcB8= Subject key identifier: 4B:81:EC:E3:AD:20:78:CF:84:D4:FD:C5:D6:49:CF:3F:9A:F7:7E:DA Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584ECBD1DC4D10DFC6A7EBD99460 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 2734 IP address blocks: 208.64.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:dc:4d:10:df:c6:a7:eb:d9:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=a12a274f-b8aa-42e9-a7bb-1041c7a187a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:51:f5:c9:44:7c:60:5d:a8:81:07:3c:58: 27:f4:df:c4:e4:bf:99:a7:86:07:fd:6c:5f:8f:14: 37:d0:03:82:62:36:34:fb:5b:8d:11:39:e1:36:63: ea:92:9f:8a:60:a2:61:08:5b:dd:4d:64:d9:8a:d7: a3:14:93:ed:a1:a8:f9:28:66:8f:c0:9b:7a:b8:bc: cc:d0:81:29:49:55:97:9f:9b:82:dd:10:45:0b:b6: ae:d4:c8:00:c6:7c:a2:33:ab:99:49:70:86:21:60: 4a:8a:3c:41:f5:8e:e3:f0:49:e8:5c:56:10:dc:2b: 55:e4:48:15:d9:fa:f7:b6:7f:72:7b:7c:c3:e5:7f: c0:d4:4d:27:ce:16:f4:4a:96:77:ee:97:bd:9d:28: e5:ab:79:2c:17:8b:0d:e6:a3:42:d2:3b:74:b5:92: dc:44:8c:11:86:aa:a7:3d:ac:25:7f:59:7d:ee:9b: 08:db:72:df:c6:e9:2f:49:b3:6b:97:e0:72:e1:0f: 2e:34:44:04:78:4e:b6:cd:ff:6b:76:3d:a8:b1:62: a4:b7:21:8e:db:04:c4:9c:e6:79:eb:e8:34:b6:05: 4c:d2:a5:28:09:7c:ad:9d:2a:d1:cb:d8:57:b5:cd: 39:b0:28:1e:db:34:c6:95:d7:c5:98:db:0e:a0:3f: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:81:EC:E3:AD:20:78:CF:84:D4:FD:C5:D6:49:CF:3F:9A:F7:7E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/70024f6c-997e-38fe-a1b0-71e9db6be67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fe:ca:0f:26:8b:79:34:42:72:c4:55:c8:ee:c6:29:3b:45: 77:c9:e0:f1:ed:ed:24:80:67:67:d2:90:53:c8:42:05:04:b0: 46:73:ad:90:69:01:7e:cf:a6:fb:b2:af:45:1b:76:d2:1f:0b: 48:20:c1:fe:7a:e7:5c:2e:33:ec:8d:a6:83:f3:20:a4:d2:4f: 92:d3:7d:69:ea:a9:54:c3:ec:c3:4e:bb:63:b2:0c:8c:7f:65: 6d:16:ed:bf:2d:4e:5b:3d:c5:49:33:68:11:50:e2:5a:b3:37: cd:6f:68:f1:d4:a4:a4:da:f5:b0:e7:09:88:0d:ce:f2:0d:b0: 25:e8:d5:1f:68:7f:a4:af:a1:fa:54:86:5f:6c:4c:3d:aa:95: c8:0c:57:1a:a5:f1:1b:6a:5c:55:8a:da:04:b4:b2:78:ed:93: dd:fd:fb:64:40:80:6d:43:f1:e4:15:87:10:40:6e:d9:44:68: 47:f8:61:01:77:25:49:13:c7:7c:a1:16:35:a5:5c:3a:84:7c: a8:25:6b:ff:63:db:12:f2:69:be:a6:a4:e1:c9:9b:74:f2:fd: cc:a8:2d:11:7a:7a:75:69:a7:40:04:24:83:06:52:5f:96:6c: dc:48:ba:ea:60:82:65:c9:0a:07:79:f9:b2:58:46:bc:c1:bf: c0:ee:39:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dxNEN/Gp+vZlGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YTEyYTI3NGYtYjhhYS00MmU5LWE3YmItMTA0MWM3YTE4N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33dR9clEfGBdqIEHPFgn9N/E5L+Zp4YH/Wxf jxQ30AOCYjY0+1uNETnhNmPqkp+KYKJhCFvdTWTZitejFJPtoaj5KGaPwJt6uLzM 0IEpSVWXn5uC3RBFC7au1MgAxnyiM6uZSXCGIWBKijxB9Y7j8EnoXFYQ3CtV5EgV 2fr3tn9ye3zD5X/A1E0nzhb0SpZ37pe9nSjlq3ksF4sN5qNC0jt0tZLcRIwRhqqn Pawlf1l97psI23LfxukvSbNrl+By4Q8uNEQEeE62zf9rdj2osWKktyGO2wTEnOZ5 6+g0tgVM0qUoCXytnSrRy9hXtc05sCge2zTGldfFmNsOoD+pPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuB7OOtIHjPhNT9xdZJzz+a937aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvNzAwMjRmNmMtOTk3ZS0z OGZlLWExYjAtNzFlOWRiNmJlNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn+yg8mi3k0QnLEVcjuxik7RXfJ4PHt7SSAZ2fSkFPIQgUEsEZzrZBp AX7Ppvuyr0UbdtIfC0ggwf5651wuM+yNpoPzIKTST5LTfWnqqVTD7MNOu2OyDIx/ ZW0W7b8tTls9xUkzaBFQ4lqzN81vaPHUpKTa9bDnCYgNzvINsCXo1R9of6SvofpU hl9sTD2qlcgMVxql8RtqXFWK2gS0snjtk939+2RAgG1D8eQVhxBAbtlEaEf4YQF3 JUkTx3yhFjWlXDqEfKgla/9j2xLyab6mpOHJm3Ty/cyoLRF6enVpp0AEJIMGUl+W bNxIuupggmXJCgd5+bJYRrzBv8DuOaA= -----END CERTIFICATE-----Generated at Thu Sep 17 22:13:45 2026 by rpki-client