$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/65e5d9e9-d673-3a92-ae2a-9b4cf106500b.roa File: 65e5d9e9-d673-3a92-ae2a-9b4cf106500b.roa (raw, json) Hash identifier: fW3mM4cSasE95oGgf2jTSYA7vRpBeFFXufqAcNekKjI= Subject key identifier: 01:DA:C1:5F:DA:4F:B5:4E:68:91:3B:EA:E7:CE:B6:41:CB:F7:39:A1 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0C9D8EFD2434D5AFE96FF280 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/65e5d9e9-d673-3a92-ae2a-9b4cf106500b.roa Signing time: Tue 03 Mar 2026 20:28:44 +0000 ROA not before: Tue 03 Mar 2026 20:28:44 +0000 ROA not after: Mon 01 Jun 2026 19:28:44 +0000 asID: 53959 IP address blocks: 64.178.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:9d:8e:fd:24:34:d5:af:e9:6f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 3 20:28:44 2026 GMT Not After : Jun 1 19:28:44 2026 GMT Subject: CN=7e2e3a06-742b-4c34-b530-4ec2e17c82ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:1e:28:97:cb:d9:19:8a:35:6a:88:aa:2b: c1:4e:29:55:b2:cb:76:76:5d:59:7a:dc:05:22:43: dd:c9:c9:05:3b:b9:df:57:97:43:a4:66:63:77:aa: fd:c4:7e:5f:e3:43:6e:6e:df:ba:b1:01:68:2e:4d: de:23:26:bf:1b:e7:ac:fd:e4:27:fb:29:35:de:e6: 67:cb:af:dc:8c:70:a2:c8:30:f8:f9:3a:66:94:ad: 50:f5:97:ef:20:ce:5e:47:3b:a5:64:91:5e:e6:e3: dc:ad:b2:59:c0:d8:85:31:39:85:7e:71:44:9c:60: d1:6d:04:79:9e:ed:9a:c5:74:d5:0d:94:54:13:66: 9a:12:98:2a:43:60:ab:48:d3:55:68:a0:c1:43:b7: 39:6d:5b:91:10:c8:6e:11:27:6a:be:67:6c:5a:76: 60:3c:34:49:48:fb:8e:2b:82:05:d2:f1:d8:79:86: aa:7c:32:0e:c1:2b:8f:13:09:a8:d7:48:d2:4e:c3: 44:af:b4:44:00:c0:e7:3c:6c:27:ff:52:f7:68:62: 93:45:a2:a6:b4:f1:1f:99:d5:f3:ef:6a:5a:f7:66: 96:c1:aa:0a:2c:31:eb:b9:82:f1:5f:7b:29:ae:02: 19:04:94:b9:94:33:e1:98:d5:b8:39:0a:91:55:75: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DA:C1:5F:DA:4F:B5:4E:68:91:3B:EA:E7:CE:B6:41:CB:F7:39:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/65e5d9e9-d673-3a92-ae2a-9b4cf106500b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 64.178.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:19:c1:4b:16:6b:c2:40:da:d3:10:9e:bc:b6:38:9b:78:5f: 06:6e:63:58:93:f9:2e:1d:8f:01:27:c8:27:49:a7:99:51:f2: 57:f8:b3:58:b9:95:af:73:1a:4f:d0:b3:4c:09:dc:9e:e5:35: 7e:68:af:72:a5:6d:5b:dc:96:51:b6:96:2f:00:d5:a7:3e:49: be:84:00:6d:63:b0:5d:01:8a:2c:aa:55:64:b0:64:20:3d:05: 6a:f8:b7:4c:c8:1f:32:fc:47:33:db:60:c0:e9:db:83:a6:21: 45:8e:b3:14:f4:9c:75:05:df:b8:89:99:74:55:e5:af:90:66: 61:3e:32:99:01:85:8c:27:2e:e7:06:27:5d:61:ea:d0:03:6a: cf:cd:04:8c:08:de:3b:23:4d:c8:f1:7f:7c:3d:98:6e:3b:a2: 24:07:2d:c6:55:ae:33:1a:24:d0:68:0f:87:77:f4:f1:d1:e7: ce:e6:0f:34:30:76:2c:b8:a8:e6:61:28:21:24:6a:0e:b1:f4: 72:2b:22:03:f4:4b:34:40:e5:5f:d3:20:c0:13:86:89:df:7a: a4:0a:60:1a:67:6f:b8:12:d3:35:56:f4:a4:84:a1:e4:ba:d0: 23:9c:6c:02:29:41:36:93:86:81:d3:d3:3e:66:fb:51:7a:2b: 36:bc:04:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MnY79JDTVr+lv8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwMzIwMjg0NFoXDTI2MDYwMTE5Mjg0NFowLzEtMCsGA1UEAxMk N2UyZTNhMDYtNzQyYi00YzM0LWI1MzAtNGVjMmUxN2M4MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkweKJfL2RmKNWqIqivBTilVsst2dl1ZetwF IkPdyckFO7nfV5dDpGZjd6r9xH5f40Nubt+6sQFoLk3eIya/G+es/eQn+yk13uZn y6/cjHCiyDD4+TpmlK1Q9ZfvIM5eRzulZJFe5uPcrbJZwNiFMTmFfnFEnGDRbQR5 nu2axXTVDZRUE2aaEpgqQ2CrSNNVaKDBQ7c5bVuREMhuESdqvmdsWnZgPDRJSPuO K4IF0vHYeYaqfDIOwSuPEwmo10jSTsNEr7REAMDnPGwn/1L3aGKTRaKmtPEfmdXz 72pa92aWwaoKLDHruYLxX3sprgIZBJS5lDPhmNW4OQqRVXV/1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHawV/aT7VOaJE76ufOtkHL9zmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNjVlNWQ5ZTktZDY3My0z YTkyLWFlMmEtOWI0Y2YxMDY1MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIZwUsWa8JA2tMQnry2OJt4XwZuY1iT+S4djwEnyCdJp5lR8lf4s1i5 la9zGk/Qs0wJ3J7lNX5or3KlbVvcllG2li8A1ac+Sb6EAG1jsF0BiiyqVWSwZCA9 BWr4t0zIHzL8RzPbYMDp24OmIUWOsxT0nHUF37iJmXRV5a+QZmE+MpkBhYwnLucG J11h6tADas/NBIwI3jsjTcjxf3w9mG47oiQHLcZVrjMaJNBoD4d39PHR587mDzQw diy4qOZhKCEkag6x9HIrIgP0SzRA5V/TIMAThonfeqQKYBpnb7gS0zVW9KSEoeS6 0COcbAIpQTaThoHT0z5m+1F6Kza8BGo= -----END CERTIFICATE-----Generated at Sat Mar 14 20:46:22 2026 by rpki-client