$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa File: 808f5071-862a-3086-95ab-72c8a5bdeaa3.roa (raw, json) Hash identifier: gtcCEP3p508EqLLTmZKlGc3D8gs2J1AIeFOXtLagj/I= Subject key identifier: 79:06:40:8A:2C:B0:5E:4D:84:18:00:65:F4:A0:06:47:E7:B0:D9:C1 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584EA2DFB97824F1BFA8177F1400 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:b9:78:24:f1:bf:a8:17:7f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=00853d07-532a-4882-bba8-642b8610f44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:38:d6:66:75:d1:c4:ac:58:0b:55:dc:37: 43:77:47:ce:3a:a5:a7:3b:55:4f:12:b3:5b:19:95: cc:f4:6a:55:b6:86:05:a6:ee:20:1b:c1:9f:6e:e0: 06:43:eb:fc:ca:8f:1e:f6:81:86:37:92:e9:cc:ad: 66:27:88:68:35:76:02:8c:bf:70:35:3a:0e:82:34: 1c:92:2b:9a:4e:6d:39:30:76:21:a5:59:a3:0c:24: 2e:4c:6f:f6:8b:f4:cf:9a:18:4f:27:94:cd:3c:76: 39:e6:bf:ec:0b:ee:45:cc:07:e4:9f:5e:f3:99:95: bc:ad:4c:24:b8:a8:e5:ad:14:b4:97:cc:e7:a7:7a: 2f:a8:3e:81:b1:86:2b:4b:8a:62:06:2d:67:a5:84: f4:7d:48:1f:ab:49:08:6d:14:5f:cd:79:01:80:5a: 4d:a9:bb:5d:66:a6:db:13:e8:5e:de:c3:b9:b0:ec: 01:cd:50:9d:d0:69:8b:09:39:18:e8:35:3c:2f:ba: 71:17:a4:35:c0:4c:6c:0d:d3:54:ad:b4:44:bd:6d: 92:eb:a4:03:92:1d:b0:ba:bb:7e:08:e9:4f:55:6c: d3:7b:3f:a6:4a:b0:e8:ed:64:92:99:de:2d:4d:d8: 28:80:af:93:f9:d8:58:72:8a:4b:c6:0a:64:1c:8a: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:40:8A:2C:B0:5E:4D:84:18:00:65:F4:A0:06:47:E7:B0:D9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b7:b3:46:b1:05:25:57:7a:49:70:ea:a5:d8:42:f0:63:42: 4b:cd:af:86:46:ff:ae:71:6d:84:6e:1c:cb:69:58:6b:b2:55: e4:cb:18:a9:45:44:db:00:f5:13:0d:4c:71:3f:91:ba:cb:9d: 51:1d:36:b2:8a:18:ae:12:a7:0b:56:73:dd:27:31:21:37:ef: cf:5c:1e:0d:12:31:b9:6c:67:77:99:11:4e:0c:49:4e:ee:3f: dc:89:17:54:05:8c:9c:22:b3:cb:1d:2f:94:18:31:a8:8f:08: 35:03:82:03:61:7e:9c:4b:a4:45:91:76:00:92:c3:68:f7:25: 3b:47:78:4a:5f:59:69:40:a4:5b:4a:5f:fe:5b:1d:f7:cb:8a: cb:0f:73:f3:0b:89:c4:0c:16:a3:15:37:48:78:c1:72:55:23: a3:89:02:9a:4e:2b:58:7d:f0:e1:19:3d:e6:85:49:23:4d:a8: 3a:75:46:1e:c9:ab:33:58:2d:d0:cd:c4:ce:2a:49:ea:04:9a: ad:d6:ad:7d:4c:35:3d:5e:a6:01:79:6f:e6:22:e8:d2:eb:e3: fe:f5:b7:4d:35:55:ca:8a:81:0d:43:28:53:32:d6:45:54:54: 88:32:4b:46:df:e4:b0:11:d5:91:5a:32:30:76:ef:34:ff:62: d7:ca:ce:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i37l4JPG/qBd/FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk MDA4NTNkMDctNTMyYS00ODgyLWJiYTgtNjQyYjg2MTBmNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SI41mZ10cSsWAtV3DdDd0fOOqWnO1VPErNb GZXM9GpVtoYFpu4gG8GfbuAGQ+v8yo8e9oGGN5LpzK1mJ4hoNXYCjL9wNToOgjQc kiuaTm05MHYhpVmjDCQuTG/2i/TPmhhPJ5TNPHY55r/sC+5FzAfkn17zmZW8rUwk uKjlrRS0l8znp3ovqD6BsYYrS4piBi1npYT0fUgfq0kIbRRfzXkBgFpNqbtdZqbb E+he3sO5sOwBzVCd0GmLCTkY6DU8L7pxF6Q1wExsDdNUrbREvW2S66QDkh2wurt+ COlPVWzTez+mSrDo7WSSmd4tTdgogK+T+dhYcopLxgpkHIr7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkGQIossF5NhBgAZfSgBkfnsNnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODA4ZjUwNzEtODYyYS0z MDg2LTk1YWItNzJjOGE1YmRlYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa3s0axBSVXeklw6qXYQvBjQkvNr4ZG/65xbYRuHMtpWGuyVeTLGKlF RNsA9RMNTHE/kbrLnVEdNrKKGK4SpwtWc90nMSE3789cHg0SMblsZ3eZEU4MSU7u P9yJF1QFjJwis8sdL5QYMaiPCDUDggNhfpxLpEWRdgCSw2j3JTtHeEpfWWlApFtK X/5bHffLissPc/MLicQMFqMVN0h4wXJVI6OJAppOK1h98OEZPeaFSSNNqDp1Rh7J qzNYLdDNxM4qSeoEmq3WrX1MNT1epgF5b+Yi6NLr4/71t001VcqKgQ1DKFMy1kVU VIgyS0bf5LAR1ZFaMjB27zT/YtfKzvM= -----END CERTIFICATE-----Generated at Wed Jul 29 11:23:09 2026 by rpki-client