$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa File: 8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa (raw, json) Hash identifier: V+34DMKW2oYMQbUGv8NQGXKRctCGu22SBvlO2tyOHcE= Subject key identifier: 62:8F:35:5D:8E:38:EC:83:06:BC:A5:49:34:94:56:E6:6B:00:F5:88 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE2894F1CA32E0134F6C7C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 208.85.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:89:4f:1c:a3:2e:01:34:f6:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=004979eb-2075-4114-aaa7-5c03a24715bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:86:d1:5b:2d:16:dc:14:02:34:af:83:0c: 6e:03:b5:43:a8:a2:12:86:9b:0b:db:ce:45:8c:80: 59:85:50:fe:db:b5:aa:a4:93:b3:b0:ca:6b:86:f3: 0a:90:14:9a:8d:86:8a:9f:d4:9d:9d:22:53:02:c5: e8:56:c4:81:59:7a:c1:9e:c0:69:85:b5:aa:b0:7b: 19:e7:02:d8:3b:8b:a8:d7:99:7f:9f:3b:e7:db:15: b5:30:c4:bb:e5:6c:03:cb:d1:e6:e1:a5:e7:d7:5c: 94:57:e0:27:0e:67:a5:4c:b0:e1:40:67:ff:1f:d2: 3d:4b:ad:96:29:00:5b:39:9c:8d:2d:d1:de:86:e2: 8d:e9:9d:b8:00:7a:c3:57:83:77:8b:85:ee:e7:11: be:b3:a1:b2:a3:bf:8a:3d:d6:45:5d:d4:ea:e8:0d: 71:f6:6e:d5:78:81:d5:bd:59:01:fc:1c:b9:71:f5: de:72:de:cc:94:4a:3f:b4:57:4e:c5:09:3c:72:e1: fe:cb:1e:60:52:e9:13:c6:f4:7a:95:8d:48:ed:3e: a6:f5:c6:da:ac:28:70:9f:9d:57:e6:a3:46:2c:ac: 26:d7:99:45:ea:d8:d4:c8:ea:15:da:26:d1:cc:45: 6b:99:25:db:57:f2:0c:21:27:50:b2:64:85:46:6c: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8F:35:5D:8E:38:EC:83:06:BC:A5:49:34:94:56:E6:6B:00:F5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:48:5c:6c:a4:94:84:25:4c:9f:ff:37:6f:7d:40:eb:03:41: 1b:e8:c0:f5:4e:f1:96:ee:b9:cc:60:a7:a8:6d:a9:69:57:33: 69:fe:43:d6:82:10:55:23:49:99:7e:2f:2b:c6:8a:1c:9f:6b: 91:e6:b5:80:50:8b:75:2c:b3:8d:44:48:ab:f3:15:a8:23:4a: 03:33:b7:01:4a:f4:e7:78:26:86:c3:67:ef:3c:e4:65:0a:45: 66:65:ab:12:9e:0e:00:29:0d:21:b1:64:1a:f7:d7:59:ca:45: 2a:fa:b7:82:22:d9:5e:f9:1c:db:b8:8a:ee:67:92:78:08:b2: 42:cd:3e:d1:88:60:21:c9:8e:17:c8:9e:01:c6:18:6b:ef:3e: 35:03:0d:f3:ea:5d:11:15:0d:43:87:18:86:31:02:ee:e5:58: 0c:d0:f0:ef:74:fb:61:0d:2a:10:b6:16:5c:c2:c4:cc:a1:d6: 24:4b:f4:a8:c8:00:9e:bf:dc:a2:08:b9:b3:a1:4f:2a:ea:19: 79:9b:c4:a2:91:93:68:0b:4e:21:37:1b:2e:eb:73:67:5f:f8: 48:3c:f6:de:b0:f2:86:62:70:f4:96:f3:3a:f5:f3:f7:b3:84: 1d:20:aa:33:e4:26:77:32:ab:fd:7f:92:09:0e:f3:88:1b:2a: b7:f5:63:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884olPHKMuATT2x8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MDA0OTc5ZWItMjA3NS00MTE0LWFhYTctNWMwM2EyNDcxNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8iG0VstFtwUAjSvgwxuA7VDqKIShpsL285F jIBZhVD+27WqpJOzsMprhvMKkBSajYaKn9SdnSJTAsXoVsSBWXrBnsBphbWqsHsZ 5wLYO4uo15l/nzvn2xW1MMS75WwDy9Hm4aXn11yUV+AnDmelTLDhQGf/H9I9S62W KQBbOZyNLdHehuKN6Z24AHrDV4N3i4Xu5xG+s6Gyo7+KPdZFXdTq6A1x9m7VeIHV vVkB/By5cfXect7MlEo/tFdOxQk8cuH+yx5gUukTxvR6lY1I7T6m9cbarChwn51X 5qNGLKwm15lF6tjUyOoV2ibRzEVrmSXbV/IMISdQsmSFRmy/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKPNV2OOOyDBrylSTSUVuZrAPWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOGQxMmVkNGItMjlmZi0z Yzg4LTkxZDUtYjI5N2FkZGM0NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5IXGyklIQlTJ//N299QOsDQRvowPVO8Zbuucxgp6htqWlXM2n+Q9aC EFUjSZl+LyvGihyfa5HmtYBQi3Uss41ESKvzFagjSgMztwFK9Od4JobDZ+885GUK RWZlqxKeDgApDSGxZBr311nKRSr6t4Ii2V75HNu4iu5nkngIskLNPtGIYCHJjhfI ngHGGGvvPjUDDfPqXREVDUOHGIYxAu7lWAzQ8O90+2ENKhC2FlzCxMyh1iRL9KjI AJ6/3KIIubOhTyrqGXmbxKKRk2gLTiE3Gy7rc2df+Eg89t6w8oZicPSW8zr18/ez hB0gqjPkJncyq/1/kgkO84gbKrf1Y9I= -----END CERTIFICATE-----Generated at Mon Sep 21 18:35:18 2026 by rpki-client