$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa File: ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa (raw, json) Hash identifier: 4LMqdvqEokekUIBF2X5i261B8RhJHFzCzMaXR89NvDM= Subject key identifier: 04:7E:FC:5A:F5:8E:D6:A9:5C:82:2E:6C:85:A1:EC:BD:9A:A0:19:4C Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584EE38CA95FDC5B7B625956CCC0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 2734 IP address blocks: 208.64.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a9:5f:dc:5b:7b:62:59:56:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=0326673c-0ef6-4d05-b2d0-5c74c4519d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:e0:81:68:41:a4:cd:8e:7f:f4:0a:27:e0: bd:f1:e9:ed:18:ef:19:d5:07:2d:a3:90:a3:87:27: 4b:18:8f:93:bf:6c:67:13:42:14:4f:4c:b6:ab:52: 53:c3:58:8f:79:be:ea:dc:18:7b:b2:9c:72:0e:a7: 97:47:0e:1a:3c:46:cd:d9:3f:96:b5:3e:9b:91:80: ab:ce:4c:e5:ae:2d:5a:0e:08:74:40:d1:66:70:de: 30:6d:54:7f:a2:a5:a0:25:af:e8:4f:bf:40:a6:b2: f6:e7:33:b2:d8:cb:5f:1d:89:b6:35:ec:bc:7a:39: 45:ce:fb:2b:12:b9:55:74:df:f9:42:65:52:fb:45: 18:df:cb:de:49:80:21:2b:33:81:0e:04:7e:e5:56: 27:a5:e5:13:97:65:e4:f6:1b:56:bb:30:81:98:ae: 18:53:bc:e1:8c:12:2d:df:a4:dd:d4:f6:7e:c1:0b: f3:2c:d9:bf:95:9f:8e:0c:ff:cc:6a:8c:02:84:40: e0:37:c1:a9:59:73:c5:d5:f7:18:5b:98:46:22:fc: c0:b9:8f:45:39:ef:56:be:d9:c9:9c:6e:7b:24:b5: 9d:81:bd:0e:cc:8e:80:62:f3:80:46:60:ac:22:5b: 55:e3:69:ac:bf:86:09:ae:59:67:89:c0:df:06:92: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7E:FC:5A:F5:8E:D6:A9:5C:82:2E:6C:85:A1:EC:BD:9A:A0:19:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/ce8ff35a-ebbd-3699-97c9-c80bd4be2038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 208.64.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c0:62:e6:36:08:0a:f5:28:67:d1:fe:36:19:3b:db:bc:9e: ad:a7:72:91:9a:3c:ee:71:e3:5b:1d:4c:94:f4:40:95:23:7a: 85:24:40:9e:b8:ab:55:b6:10:3f:5c:6a:7a:40:f9:79:89:f1: 86:19:49:96:dc:ca:97:aa:ee:3a:d1:f5:08:fe:ca:ab:f2:8d: ed:fc:26:40:18:d4:d0:c0:f3:11:f4:03:d4:f5:51:ac:24:16: aa:a5:64:c6:f7:03:65:a0:8d:f5:d5:8c:2d:85:ee:6e:5e:71: ac:23:54:e1:8f:e2:fa:e5:47:69:df:f8:d5:28:28:60:78:f2: 49:0a:96:e9:e7:1b:74:42:1f:53:b2:3b:9e:ca:f8:99:85:53: 1a:f3:93:55:ef:3e:36:ba:97:83:65:cb:ea:5b:72:c4:11:f7: aa:dd:88:80:f9:70:b8:8a:44:6e:e3:03:4a:ce:9b:cb:a5:57: a1:47:64:75:4b:bd:74:40:cc:f4:02:20:3b:ca:88:97:6f:63: 34:6f:a5:c3:98:e0:10:dc:43:28:28:3c:17:7d:70:91:52:9a: a4:fa:9b:49:f6:fd:39:b0:14:08:3c:09:92:d2:1d:44:1e:d6: 53:83:5a:5f:3d:d7:20:b4:6d:bb:03:d7:a4:77:82:e1:2c:c0: 79:60:cf:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKlf3Ft7YllWzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MDMyNjY3M2MtMGVmNi00ZDA1LWIyZDAtNWM3NGM0NTE5ZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoTggWhBpM2Of/QKJ+C98entGO8Z1Qcto5Cj hydLGI+Tv2xnE0IUT0y2q1JTw1iPeb7q3Bh7spxyDqeXRw4aPEbN2T+WtT6bkYCr zkzlri1aDgh0QNFmcN4wbVR/oqWgJa/oT79AprL25zOy2MtfHYm2Ney8ejlFzvsr ErlVdN/5QmVS+0UY38veSYAhKzOBDgR+5VYnpeUTl2Xk9htWuzCBmK4YU7zhjBIt 36Td1PZ+wQvzLNm/lZ+ODP/MaowChEDgN8GpWXPF1fcYW5hGIvzAuY9FOe9WvtnJ nG57JLWdgb0OzI6AYvOARmCsIltV42msv4YJrllnicDfBpKE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR+/Fr1jtapXIIubIWh7L2aoBlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2U4ZmYzNWEtZWJiZC0z Njk5LTk3YzktYzgwYmQ0YmUyMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ED4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLAYuY2CAr1KGfR/jYZO9u8nq2ncpGaPO5x41sdTJT0QJUjeoUkQJ64 q1W2ED9canpA+XmJ8YYZSZbcypeq7jrR9Qj+yqvyje38JkAY1NDA8xH0A9T1Uawk FqqlZMb3A2WgjfXVjC2F7m5ecawjVOGP4vrlR2nf+NUoKGB48kkKlunnG3RCH1Oy O57K+JmFUxrzk1XvPja6l4Nly+pbcsQR96rdiID5cLiKRG7jA0rOm8ulV6FHZHVL vXRAzPQCIDvKiJdvYzRvpcOY4BDcQygoPBd9cJFSmqT6m0n2/TmwFAg8CZLSHUQe 1lODWl891yC0bbsD16R3guEswHlgz3A= -----END CERTIFICATE-----Generated at Thu Sep 17 22:14:00 2026 by rpki-client