$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa File: 422a23f3-46df-3a7b-afbd-3ae916bba51f.roa (raw, json) Hash identifier: Ic4etOjRBqsKRXXEUBs8VtI5gPxGDT9Kd1Yny+LF1fw= Subject key identifier: 2A:36:3D:AF:36:5D:55:D1:15:30:CA:A4:AA:AB:6C:59:E0:8E:7C:74 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584E9BE50632140A427F476B0080 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 14618 IP address blocks: 208.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:06:32:14:0a:42:7f:47:6b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=fc3e832f-7be3-4d0a-9c44-fb4f2c317121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:45:5f:38:6f:de:c3:f6:b4:e1:4e:44:43: 8d:42:00:ee:32:fe:c2:33:84:a6:df:8d:db:ff:24: 09:1e:26:ff:66:b5:21:2f:5f:e1:f2:d7:c5:6f:dc: a3:2e:dd:3b:a3:df:c7:e0:d6:96:b1:49:42:41:24: 1e:e7:dc:a6:ea:ab:5d:3a:7e:7a:fd:a7:a1:3d:8a: 7d:6f:57:9f:14:85:ec:3d:1c:1a:d5:43:fb:c5:40: 70:95:d9:d6:42:6e:cd:5c:7a:4b:90:93:35:d9:8c: bd:16:36:96:fd:10:a8:fe:f3:27:40:39:a5:01:95: a6:42:b0:82:6c:0d:a6:bf:36:6b:43:75:61:56:e8: 34:67:20:84:15:75:be:56:a8:fc:92:1d:d0:68:0c: 35:89:c7:36:da:56:38:a2:fc:6e:de:c1:59:02:51: f0:0d:b1:15:72:5c:1c:be:98:b8:60:c9:1c:b2:ad: be:b3:8d:9f:5e:19:49:b7:4f:96:e9:96:e3:34:1f: 5d:92:c3:a7:a1:0c:c2:07:9a:f7:82:9d:8c:68:bf: d4:5c:93:50:3a:b1:56:9f:06:6f:39:17:e4:4e:30: 28:64:79:db:fb:c6:9d:88:13:5b:ff:52:53:77:7d: e1:85:2f:9f:02:62:b2:dc:cb:c9:7c:71:29:32:a3: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:3D:AF:36:5D:55:D1:15:30:CA:A4:AA:AB:6C:59:E0:8E:7C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b3:e3:5a:0d:ca:0c:39:66:58:19:ab:8b:75:e1:3f:60:8c: 54:10:ee:ab:ad:37:b4:06:6c:80:40:41:5d:33:89:28:da:8b: f0:83:4b:f1:64:e9:0c:53:1d:53:cb:49:14:61:fe:f8:38:ba: 0f:51:34:30:8a:fa:2d:14:bf:97:79:03:db:bf:bd:d8:1c:4c: 2d:7e:7f:a0:28:f4:c5:8a:87:f7:41:58:be:36:bb:51:ff:76: 85:03:be:dd:49:e9:3b:f2:3c:61:09:e1:79:f1:63:9a:db:78: e4:fa:3d:e2:3f:06:39:e5:9e:d6:2d:bb:56:d1:2a:ea:e7:97: 38:37:0d:1f:ae:d3:a4:cf:1b:32:75:8b:c8:53:a7:27:50:99: 24:1a:ad:bd:6c:6d:7f:a1:f5:ff:32:87:f4:e1:23:ea:0a:43: 4f:e1:a0:c4:71:c3:9e:57:41:ff:82:0e:dc:1a:7c:2b:40:c5: 16:2c:c6:4e:fc:07:df:cf:80:64:ec:98:16:61:02:e1:ec:b0: 00:cf:60:54:92:b9:d0:54:ea:96:ec:df:ea:b0:26:13:67:4e: ad:34:04:f3:c9:8e:76:59:46:97:8c:87:8a:b5:87:1a:1b:01: e7:06:68:c3:86:ad:b1:4d:36:d4:09:b7:66:71:d8:91:16:a6: 2c:29:d8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QYyFApCf0drAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmMzZTgzMmYtN2JlMy00ZDBhLTljNDQtZmI0ZjJjMzE3MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUJFXzhv3sP2tOFOREONQgDuMv7CM4Sm343b /yQJHib/ZrUhL1/h8tfFb9yjLt07o9/H4NaWsUlCQSQe59ym6qtdOn56/aehPYp9 b1efFIXsPRwa1UP7xUBwldnWQm7NXHpLkJM12Yy9FjaW/RCo/vMnQDmlAZWmQrCC bA2mvzZrQ3VhVug0ZyCEFXW+Vqj8kh3QaAw1icc22lY4ovxu3sFZAlHwDbEVclwc vpi4YMkcsq2+s42fXhlJt0+W6ZbjNB9dksOnoQzCB5r3gp2MaL/UXJNQOrFWnwZv ORfkTjAoZHnb+8adiBNb/1JTd33hhS+fAmKy3MvJfHEpMqMBWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo2Pa82XVXRFTDKpKqrbFngjnx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDIyYTIzZjMtNDZkZi0z YTdiLWFmYmQtM2FlOTE2YmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCz41oNygw5ZlgZq4t14T9gjFQQ7qutN7QGbIBAQV0ziSjai/CDS/Fk 6QxTHVPLSRRh/vg4ug9RNDCK+i0Uv5d5A9u/vdgcTC1+f6Ao9MWKh/dBWL42u1H/ doUDvt1J6TvyPGEJ4XnxY5rbeOT6PeI/BjnlntYtu1bRKurnlzg3DR+u06TPGzJ1 i8hTpydQmSQarb1sbX+h9f8yh/ThI+oKQ0/hoMRxw55XQf+CDtwafCtAxRYsxk78 B9/PgGTsmBZhAuHssADPYFSSudBU6pbs3+qwJhNnTq00BPPJjnZZRpeMh4q1hxob AecGaMOGrbFNNtQJt2Zx2JEWpiwp2PE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:56:17 2026 by rpki-client