$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa File: 67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json) Hash identifier: 3sp+qlW/L6LVhq/sHklBIqtcBma+bM8QWp9YF/NRn94= Subject key identifier: 2A:93:BA:6C:A4:C0:19:4C:84:A8:EA:26:A2:C7:1F:E4:1B:6C:B8:A0 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3E47D7B23A1E550FB58EC980 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d7:b2:3a:1e:55:0f:b5:8e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=44eab62f-2175-47be-b887-bfa170ce94c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:6f:73:1e:ee:cc:69:a8:10:35:86:42:a9: 4b:b1:b7:01:23:3f:8b:f7:d5:87:c0:00:57:56:41: 43:f1:8d:1e:13:5a:19:5a:e7:d5:dd:5f:18:33:11: 04:6b:28:53:e7:8a:42:4d:46:ba:a8:15:3a:4b:c1: e6:c6:22:89:7b:ed:74:c8:1d:2d:28:a3:eb:ac:2b: 75:d9:b1:22:2d:f6:f9:23:fe:09:b6:79:f1:c5:e2: 19:e8:2b:90:a0:d3:65:cd:42:15:27:83:95:22:4d: f7:4c:b3:32:8c:f2:4a:e7:5f:6e:6c:dc:7a:46:86: 06:68:57:c6:d2:63:7f:5b:e1:9b:99:1c:65:3d:51: d0:26:73:3a:a2:1a:14:19:d2:73:6d:e7:b6:d5:fc: 07:29:d4:7a:15:04:dd:13:0d:e5:ae:d5:94:90:ff: d7:53:5c:7b:39:a3:b4:0a:27:0f:a5:bc:af:6e:ae: 1b:87:0a:d4:54:df:4b:68:ef:00:72:8a:48:8e:6a: fd:78:e4:43:89:e5:9b:b5:6e:23:9c:27:1f:fb:14: 3e:18:4a:b7:fd:1d:c1:5a:7d:81:91:87:59:c9:4c: 08:47:12:14:21:82:25:0a:52:58:5c:26:cf:36:5f: 7e:07:c0:dd:2c:0a:7c:05:00:9e:6d:f9:fb:bc:3e: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:BA:6C:A4:C0:19:4C:84:A8:EA:26:A2:C7:1F:E4:1B:6C:B8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:97:ba:bd:16:4b:25:29:35:ec:8c:5c:37:35:61:65:bd:45: a8:f9:98:7a:b3:9d:d7:43:a7:5d:04:da:ec:9e:8a:1c:37:d4: e8:1b:ca:f3:d4:c3:cc:13:a9:dc:86:f5:1d:71:cf:25:3a:5f: 80:2b:06:62:2f:de:9e:6d:57:af:99:10:0b:a9:8b:94:76:c7: d0:fc:3f:a6:62:fc:c6:a9:cd:fd:9a:3b:a7:f6:13:b4:e8:89: d1:9a:3d:7f:c3:db:ec:08:89:07:53:e6:b6:6a:62:68:7d:d3: 2b:bd:53:09:3e:15:fe:23:8d:3c:4a:16:17:51:05:2f:84:3b: 75:89:4a:a7:dc:c8:9c:ef:14:69:8a:15:7c:b6:54:4d:f4:5e: 68:37:0f:74:42:f5:ab:09:7e:d3:65:97:49:f5:2b:df:fb:de: 2e:3e:fb:51:41:79:b0:05:60:2c:d6:54:04:29:fa:30:95:5c: f4:6b:ae:84:7d:d4:71:5e:30:79:72:24:07:1c:c9:98:7a:a6: be:1f:f7:54:38:2a:71:77:61:bb:72:6f:9f:c1:03:e5:58:82: 09:01:02:e2:05:3d:38:44:43:a1:eb:8b:46:af:97:58:50:0c: 01:bc:17:e5:60:b4:59:20:fc:a9:09:7f:f0:85:91:44:0e:5b: 67:d3:d7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9eyOh5VD7WOyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NDRlYWI2MmYtMjE3NS00N2JlLWI4ODctYmZhMTcwY2U5NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlChvcx7uzGmoEDWGQqlLsbcBIz+L99WHwABX VkFD8Y0eE1oZWufV3V8YMxEEayhT54pCTUa6qBU6S8HmxiKJe+10yB0tKKPrrCt1 2bEiLfb5I/4JtnnxxeIZ6CuQoNNlzUIVJ4OVIk33TLMyjPJK519ubNx6RoYGaFfG 0mN/W+GbmRxlPVHQJnM6ohoUGdJzbee21fwHKdR6FQTdEw3lrtWUkP/XU1x7OaO0 CicPpbyvbq4bhwrUVN9LaO8AcopIjmr9eORDieWbtW4jnCcf+xQ+GEq3/R3BWn2B kYdZyUwIRxIUIYIlClJYXCbPNl9+B8DdLAp8BQCebfn7vD78cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqTumykwBlMhKjqJqLHH+QbbLigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNjdmNGFiZmMtY2JjOC0z ZDRiLTlkNTYtOTBhZjBkNjBmYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2Xur0WSyUpNeyMXDc1YWW9Raj5mHqznddDp10E2uyeihw31OgbyvPU w8wTqdyG9R1xzyU6X4ArBmIv3p5tV6+ZEAupi5R2x9D8P6Zi/Mapzf2aO6f2E7To idGaPX/D2+wIiQdT5rZqYmh90yu9Uwk+Ff4jjTxKFhdRBS+EO3WJSqfcyJzvFGmK FXy2VE30Xmg3D3RC9asJftNll0n1K9/73i4++1FBebAFYCzWVAQp+jCVXPRrroR9 1HFeMHlyJAccyZh6pr4f91Q4KnF3Ybtyb5/BA+VYggkBAuIFPThEQ6Hri0avl1hQ DAG8F+VgtFkg/KkJf/CFkUQOW2fT1zY= -----END CERTIFICATE-----Generated at Mon Sep 21 09:41:33 2026 by rpki-client