$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa File: 5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa (raw, json) Hash identifier: S7vPZMfiAXC3DicP6tGXlrw/3g72O04FkplLp7wkUg4= Subject key identifier: 68:C7:27:AF:83:18:02:FB:B6:2A:04:E9:EC:90:BD:85:3B:EC:27:83 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3E47D7E1E889F5942F3733C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 19795 IP address blocks: 208.85.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d7:e1:e8:89:f5:94:2f:37:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a6e0d34e-cdb1-408b-8789-5312935c63de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:30:af:9b:04:f1:09:e2:77:e9:4c:43:a3:08: 3d:e7:c6:ef:f1:02:c2:72:e4:f3:c5:08:2b:c3:e9: ba:dc:40:b6:bd:1f:e2:22:a1:e4:5f:76:ca:9a:61: e2:23:95:47:41:18:9d:4f:e8:77:d7:d5:64:a3:e7: d0:64:17:a8:c0:47:fe:1d:89:03:05:66:63:38:32: cf:0c:64:ad:9a:d7:76:89:64:a9:48:12:fa:0a:7e: 4c:c8:5c:dd:63:47:a3:25:26:ea:66:a4:da:2d:3a: 20:7a:76:95:06:23:c1:00:e0:80:b7:da:54:1a:76: c6:a6:c9:37:a7:4a:df:c7:93:0d:f0:31:4e:ed:60: fd:41:33:99:84:96:1f:f3:bf:fc:4e:8f:2e:71:57: 4a:9a:90:b1:90:83:67:93:37:5a:b9:97:f6:da:ba: 3b:ce:29:d1:44:c4:30:1f:65:25:be:35:bb:7b:3c: 6c:0d:d5:c5:1b:d9:84:f4:31:4d:56:76:37:44:b0: 54:73:f1:95:90:b6:ac:89:be:1d:aa:df:da:b1:90: 37:05:ca:ad:47:84:84:1c:be:f9:7e:56:5c:eb:7f: 24:49:d9:5e:c3:87:07:13:c8:98:2b:fb:aa:88:e4: db:ae:95:57:c7:b0:b9:23:78:d0:30:16:20:7c:7f: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C7:27:AF:83:18:02:FB:B6:2A:04:E9:EC:90:BD:85:3B:EC:27:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e1:c2:41:dc:d5:d5:c3:ab:e5:bd:ee:65:a9:30:96:52:ff: 23:95:31:d4:35:b0:be:73:ab:08:d8:04:27:36:d2:40:03:70: 6a:23:c1:af:2b:5d:03:79:9c:ce:3a:aa:69:71:5e:5b:18:ca: 0a:39:88:ea:5b:73:e9:cf:6f:09:80:43:41:fd:f6:a8:78:c7: d7:b0:49:0e:91:4d:6d:fc:17:d3:f2:d0:22:45:f9:eb:7c:2f: fa:9f:12:71:9c:27:23:ea:fd:b1:9c:f1:4b:44:ae:dc:f2:f3: 3b:9d:5d:20:30:86:68:e9:0d:1f:6f:fb:95:ee:6f:fb:b4:af: ec:68:dd:21:1f:23:d3:5f:ee:77:cb:a1:42:03:fc:10:be:23: d9:93:c9:66:0e:8f:86:f4:d5:4d:af:bf:81:ec:2c:27:b9:8c: e0:a7:1b:3f:64:5d:0a:18:36:89:b6:5e:ac:42:63:6c:4d:d3: 94:3c:d1:83:b2:2c:de:e9:fb:6e:62:e8:22:da:98:62:c2:f3: e3:05:b6:72:2f:7d:91:24:b3:07:c3:df:0e:db:60:78:e6:ef: 82:5a:3a:2d:3f:dd:55:92:45:c8:04:a8:47:68:16:ab:06:56: 67:25:b6:53:32:59:f1:24:58:4f:ac:1f:c6:bc:bc:d1:15:c8: 89:ca:6d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9fh6In1lC83M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YTZlMGQzNGUtY2RiMS00MDhiLTg3ODktNTMxMjkzNWM2M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzCvmwTxCeJ36UxDowg958bv8QLCcuTzxQgr w+m63EC2vR/iIqHkX3bKmmHiI5VHQRidT+h319Vko+fQZBeowEf+HYkDBWZjODLP DGStmtd2iWSpSBL6Cn5MyFzdY0ejJSbqZqTaLTogenaVBiPBAOCAt9pUGnbGpsk3 p0rfx5MN8DFO7WD9QTOZhJYf87/8To8ucVdKmpCxkINnkzdauZf22ro7zinRRMQw H2UlvjW7ezxsDdXFG9mE9DFNVnY3RLBUc/GVkLasib4dqt/asZA3BcqtR4SEHL75 flZc638kSdlew4cHE8iYK/uqiOTbrpVXx7C5I3jQMBYgfH91uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjHJ6+DGAL7tioE6eyQvYU77CeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWE4YmUzNGItOGNmMi0z ZGUyLTkxYzctYTE2OWRlZTdiNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvhwkHc1dXDq+W97mWpMJZS/yOVMdQ1sL5zqwjYBCc20kADcGojwa8r XQN5nM46qmlxXlsYygo5iOpbc+nPbwmAQ0H99qh4x9ewSQ6RTW38F9Py0CJF+et8 L/qfEnGcJyPq/bGc8UtErtzy8zudXSAwhmjpDR9v+5Xub/u0r+xo3SEfI9Nf7nfL oUID/BC+I9mTyWYOj4b01U2vv4HsLCe5jOCnGz9kXQoYNom2XqxCY2xN05Q80YOy LN7p+25i6CLamGLC8+MFtnIvfZEkswfD3w7bYHjm74JaOi0/3VWSRcgEqEdoFqsG VmcltlMyWfEkWE+sH8a8vNEVyInKbdY= -----END CERTIFICATE-----Generated at Wed Sep 23 01:40:42 2026 by rpki-client