$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa File: db08c46a-c530-3729-8f45-1e034d3c907b.roa (raw, json) Hash identifier: GOEc6WTslaPmWAiJGoouWNiHUKvlymPF4VWhMSFBgOg= Subject key identifier: 3F:7B:A9:CF:2E:A3:2F:30:E1:37:01:1E:06:88:88:1E:1B:EB:E8:9D Certificate issuer: /CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Certificate serial: 010D0C9F4328584EDC91F45FFB0E350FBE553280 Authority key identifier: 06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 18559 IP address blocks: 198.54.221.0/24 maxlen: 24 2602:f52d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:f4:5f:fb:0e:35:0f:be:55:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=920eb75b-4ba9-4a4d-833a-30b37994a458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:fc:9a:a0:79:8f:3e:e0:d0:7d:0a:75:bf: 62:72:9a:d0:91:30:fc:5f:7f:02:00:e6:18:22:4f: 5f:f4:76:ba:b8:d9:a5:31:38:fa:f2:cc:71:32:15: 24:db:6f:50:e1:56:3f:23:5e:fb:7d:aa:01:42:cd: 9f:00:b6:62:10:49:c8:90:a4:b5:a7:5c:e5:b2:0b: 4c:7a:fd:a8:be:72:85:99:f1:ea:56:cc:fb:7d:4e: 32:c5:8b:28:44:17:ed:82:5f:48:02:f3:cf:11:80: 10:77:13:e8:00:21:e1:9c:02:27:f5:e6:a9:38:34: 52:e7:ac:b7:35:6e:1b:ae:37:bd:c1:20:ce:3b:26: 82:11:49:f7:3c:d7:e5:7f:c5:3d:1f:87:ad:46:c5: ad:31:61:ef:5f:75:70:79:37:8a:a0:9c:05:37:c2: d5:c7:f7:1f:e5:f5:15:0a:82:86:fd:85:53:1e:b6: e2:a2:9a:0f:df:ed:74:f3:26:ae:5b:98:0f:70:f6: 54:91:25:f0:20:6d:e3:50:ed:6e:a4:9c:8d:77:3b: 75:bd:11:a3:8b:ca:ac:41:e2:b0:a3:1b:25:4f:9a: 7b:23:88:88:38:ff:64:59:a2:be:a1:ae:d6:10:4d: 51:00:c5:f6:26:67:8f:7c:b5:e6:52:ba:ba:5c:6f: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7B:A9:CF:2E:A3:2F:30:E1:37:01:1E:06:88:88:1E:1B:EB:E8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl X509v3 Authority Key Identifier: keyid:06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer sbgp-ipAddrBlock: critical IPv4: 198.54.221.0/24 IPv6: 2602:f52d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1d:c2:fe:da:6d:5c:94:3f:94:ee:bb:d7:e8:95:ae:ff:f4: 23:ea:c0:00:28:41:9f:bd:04:bb:75:66:ba:a9:ba:3d:58:82: 49:41:13:88:74:47:d1:9e:21:d7:d2:f3:02:16:4e:b8:f6:3e: dd:13:a4:8d:02:42:e6:d6:31:37:05:4a:74:54:9c:31:d5:39: 36:fa:8b:1d:30:69:68:bd:5f:28:34:50:05:e6:80:cd:8d:c2: fc:bf:38:ee:09:c8:30:ce:78:18:9e:17:86:75:ac:49:37:df: 0a:ab:a0:b7:a8:bf:b4:5d:13:de:c2:d4:6e:19:79:5c:24:c3: 3b:2f:ab:ca:6b:98:52:74:e0:eb:07:7f:79:d6:3f:30:bb:b2: 32:0b:63:4f:a8:3b:71:bf:2d:09:8d:56:c9:1a:20:c5:89:35: d7:13:d6:b6:d0:cc:16:44:5b:d0:a2:24:1c:ac:b9:c9:a4:5b: 96:ba:20:43:a8:15:af:dc:ce:5a:c4:cc:21:29:8c:cb:bf:8c: 41:56:0c:ef:93:f3:95:36:f1:91:a1:5a:ca:0f:46:e4:03:f5: 20:09:b6:45:e4:1c:4a:42:3a:0a:58:80:b6:ee:ad:45:af:00: 47:53:70:51:1a:57:6d:47:c1:30:10:fb:c7:06:bb:c8:37:9e: 07:94:56:66 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7ckfRf+w41D75VMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmOWMyNTAtZTUyZi00NDc5LTk5YTUtODgwYTNlMWI4 YzJhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk OTIwZWI3NWItNGJhOS00YTRkLTgzM2EtMzBiMzc5OTRhNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7D8mqB5jz7g0H0Kdb9icprQkTD8X38CAOYY Ik9f9Ha6uNmlMTj68sxxMhUk229Q4VY/I177faoBQs2fALZiEEnIkKS1p1zlsgtM ev2ovnKFmfHqVsz7fU4yxYsoRBftgl9IAvPPEYAQdxPoACHhnAIn9eapODRS56y3 NW4brje9wSDOOyaCEUn3PNflf8U9H4etRsWtMWHvX3VweTeKoJwFN8LVx/cf5fUV CoKG/YVTHrbiopoP3+108yauW5gPcPZUkSXwIG3jUO1upJyNdzt1vRGji8qsQeKw oxslT5p7I4iIOP9kWaK+oa7WEE1RAMX2JmePfLXmUrq6XG+yqwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD97qc8uoy8w4TcBHgaIiB4b6+idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5 YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBhM2UxYjhjMmEvZGIwOGM0NmEtYzUzMC0z NzI5LThmNDUtMWUwMzRkM2M5MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWFmOWMyNTAtZTUyZi00NDc5LTk5 YTUtODgwYTNlMWI4YzJhL2VhZjljMjUwLWU1MmYtNDQ3OS05OWE1LTg4MGEzZTFi OGMyYS5jcmwwHwYDVR0jBBgwFoAUBp6AkQVoEnVvqTOe9aocz8FhOLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBh M2UxYjhjMmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxjbdMA4E AgACMAgDBgAmAvUtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVHcL+2m1clD+U7rvX6JWu//Qj6sAAKEGf vQS7dWa6qbo9WIJJQROIdEfRniHX0vMCFk649j7dE6SNAkLm1jE3BUp0VJwx1Tk2 +osdMGlovV8oNFAF5oDNjcL8vzjuCcgwzngYnheGdaxJN98Kq6C3qL+0XRPewtRu GXlcJMM7L6vKa5hSdODrB3951j8wu7IyC2NPqDtxvy0JjVbJGiDFiTXXE9a20MwW RFvQoiQcrLnJpFuWuiBDqBWv3M5axMwhKYzLv4xBVgzvk/OVNvGRoVrKD0bkA/Ug CbZF5BxKQjoKWIC27q1FrwBHU3BRGldtR8EwEPvHBrvIN54HlFZm -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:29 2026 by rpki-client