$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa File: 67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json) Hash identifier: cNgJVFdzVkMqHOT5nU9h8ANuf0GJJ0fG/n8kJGXCkNg= Subject key identifier: 57:6D:17:E0:5B:D0:32:A0:BF:81:C9:E3:89:77:31:AB:A4:70:62:23 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584E9BE50A46228989B3C5127CC0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 14618 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:0a:46:22:89:89:b3:c5:12:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=dc9dc93a-4e72-4fe7-bea4-c4b367da2669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:bd:90:89:c9:7a:bf:d5:65:c5:a4:c0:21: 6f:a5:8b:17:5b:bd:c9:64:e7:fc:8e:31:3e:1b:6e: f4:97:bf:57:ff:d3:bc:30:18:65:dc:0b:96:af:73: 12:ed:57:06:c5:c0:26:00:51:68:10:07:1e:4b:a3: be:03:e9:3c:2a:a8:2e:bf:fd:e2:b5:4c:24:c7:8e: 33:b3:75:9b:15:4d:5b:b0:9f:02:6d:39:74:56:0a: 0c:ea:38:1b:b2:ca:73:aa:4d:c0:a5:22:7c:07:0c: d0:b4:f2:41:da:2c:80:d2:d2:20:dd:0a:cc:55:14: 39:98:f1:c9:62:af:82:7e:0c:dd:40:63:8b:ee:1a: bd:ac:86:6b:8d:51:6d:21:62:84:c1:46:3f:f2:4e: 92:25:b4:0a:a8:72:3d:38:8f:9b:3e:90:df:61:86: 5f:34:13:2b:04:3b:ab:c0:14:2e:f0:6e:01:b8:c6: cb:6c:2c:63:e1:4a:e7:5e:01:18:e8:ed:aa:4e:24: 44:7c:55:8c:31:58:17:0f:c7:10:1c:e9:ad:ad:37: f0:1b:78:68:32:9a:af:f2:b8:ef:b0:a5:6c:3c:d1: 48:40:de:22:4b:b3:56:d8:88:86:40:43:58:aa:44: 9f:6c:6e:41:5a:8b:2d:65:2a:b2:9a:5d:32:0e:06: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6D:17:E0:5B:D0:32:A0:BF:81:C9:E3:89:77:31:AB:A4:70:62:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3c:dc:5a:15:a9:4c:01:82:2d:6b:25:1d:d8:f2:3a:73:99: 56:59:61:ec:5c:e3:08:d3:ad:a2:f0:d1:8c:8b:53:85:40:74: f4:50:ff:cf:f1:0d:60:67:80:b1:8c:d7:96:b9:32:1d:92:7e: 45:55:1d:a8:a3:3d:f3:87:67:65:77:8e:83:d5:cd:78:a3:10: d8:f9:df:d9:c4:b0:63:3e:27:5b:92:b4:70:ae:b4:8a:9f:ab: f3:6d:d2:56:8d:61:03:ec:a2:4e:2b:e5:df:8b:fa:ea:44:ea: 0f:38:9c:82:3d:72:1a:0c:2d:10:8e:b8:b8:05:36:34:bf:48: de:13:44:d0:e9:e2:5d:a0:a3:12:8f:b4:ef:cd:ff:d9:6e:e3: f4:35:40:be:74:3e:93:af:d6:4a:96:15:38:80:10:4c:2f:c4: ef:fc:cd:25:40:6f:82:d8:c4:82:a8:c1:de:dd:f7:8e:85:1a: 15:73:79:e4:da:2c:49:b3:91:a7:ef:e8:29:62:84:b5:8e:90: 13:ea:65:f1:fd:80:31:1a:77:e8:6b:74:ee:8a:8c:d2:f9:02: 7e:ac:32:a9:ac:e6:04:d3:6c:51:8f:2b:9c:59:df:23:a5:4d: c2:00:b6:2a:10:83:35:d2:6b:fe:61:13:ae:a5:8d:d8:52:cd: cb:7d:11:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QpGIomJs8USfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZGM5ZGM5M2EtNGU3Mi00ZmU3LWJlYTQtYzRiMzY3ZGEyNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmui9kInJer/VZcWkwCFvpYsXW73JZOf8jjE+ G270l79X/9O8MBhl3AuWr3MS7VcGxcAmAFFoEAceS6O+A+k8Kqguv/3itUwkx44z s3WbFU1bsJ8CbTl0VgoM6jgbsspzqk3ApSJ8BwzQtPJB2iyA0tIg3QrMVRQ5mPHJ Yq+CfgzdQGOL7hq9rIZrjVFtIWKEwUY/8k6SJbQKqHI9OI+bPpDfYYZfNBMrBDur wBQu8G4BuMbLbCxj4UrnXgEY6O2qTiREfFWMMVgXD8cQHOmtrTfwG3hoMpqv8rjv sKVsPNFIQN4iS7NW2IiGQENYqkSfbG5BWostZSqyml0yDgbBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdtF+Bb0DKgv4HJ44l3MaukcGIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNjdmNGFiZmMtY2JjOC0z ZDRiLTlkNTYtOTBhZjBkNjBmYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM83FoVqUwBgi1rJR3Y8jpzmVZZYexc4wjTraLw0YyLU4VAdPRQ/8/x DWBngLGM15a5Mh2SfkVVHaijPfOHZ2V3joPVzXijENj539nEsGM+J1uStHCutIqf q/Nt0laNYQPsok4r5d+L+upE6g84nII9choMLRCOuLgFNjS/SN4TRNDp4l2goxKP tO/N/9lu4/Q1QL50PpOv1kqWFTiAEEwvxO/8zSVAb4LYxIKowd7d946FGhVzeeTa LEmzkafv6ClihLWOkBPqZfH9gDEad+hrdO6KjNL5An6sMqms5gTTbFGPK5xZ3yOl TcIAtioQgzXSa/5hE66ljdhSzct9EZY= -----END CERTIFICATE-----Generated at Wed Jul 29 01:48:29 2026 by rpki-client