$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa File: fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa (raw, json) Hash identifier: 23J1WbsKN8+oIwvg+dvqpM+Bs18SS9UxJxJd1WsHL+8= Subject key identifier: AB:41:E6:72:D5:37:6E:60:E0:98:75:F2:59:E4:5C:DA:1E:88:D9:36 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE28966FF6FDC3EF016AB00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 208.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:89:66:ff:6f:dc:3e:f0:16:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=512dafca-04e0-4534-8964-d4e59e7fa6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:64:03:91:32:fd:e1:84:91:14:61:1d:5d: d4:f0:17:21:6c:62:eb:17:5a:3a:5a:67:8b:c9:db: 9b:a0:63:a6:d5:09:9c:24:7c:f8:d8:3d:a6:ef:a8: 4d:b1:2a:56:c0:32:d7:87:9e:ad:03:70:b5:8f:fb: f8:f8:bf:24:68:4f:6c:7c:99:74:4a:c5:c8:1a:a1: 6b:f9:13:00:c5:48:77:b1:68:ab:bb:b3:d4:d3:14: 24:f1:4f:6b:57:55:82:d5:fd:5d:ea:c2:4c:b9:23: 74:08:01:7f:92:bb:3e:00:18:a1:17:55:01:ee:da: a1:42:e9:3c:67:89:38:fb:d7:d0:7b:08:43:80:1e: ef:37:da:54:00:15:90:c5:c8:3d:3c:67:1c:d5:d0: 39:f6:b5:bd:5e:1d:e6:63:02:e5:a3:5b:57:f0:32: cc:f7:68:81:0a:59:3a:6b:16:52:1b:4e:9c:e2:a3: ac:72:8a:07:24:81:79:5c:3b:2c:fe:4b:af:d1:4c: 1a:e3:f3:43:37:26:df:1b:c4:ec:39:3f:fd:65:93: cd:f8:b5:34:53:a1:01:91:a1:73:77:21:bb:ad:91: ee:40:7a:d5:fd:38:18:76:15:a3:59:bd:be:a0:94: 88:9a:56:6e:d5:df:2f:fa:c5:71:50:10:b2:26:14: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:41:E6:72:D5:37:6E:60:E0:98:75:F2:59:E4:5C:DA:1E:88:D9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:02:fb:13:ee:90:59:70:4a:28:67:98:86:3e:fc:38:2a:b3: 84:ec:53:21:bb:20:ff:cf:81:2c:06:b3:2c:76:a5:22:ff:20: 2e:6f:f3:bb:7f:21:3e:89:3b:3d:4d:b9:e2:89:24:a4:36:ce: a4:c9:e3:08:24:d0:93:df:fb:c8:5b:8b:a5:43:c0:75:c6:b4: cd:13:db:38:83:b4:e9:61:0c:83:58:96:a4:11:a8:6a:08:13: 10:92:dc:1d:78:a2:5c:27:0f:5d:e9:1e:10:87:67:c3:7d:ba: e5:a5:5d:88:a5:10:9f:e7:96:72:bb:ae:94:16:5a:ae:48:89: f0:8c:f2:d5:f1:31:3f:e2:cf:69:28:46:dd:0d:b5:ca:ad:ef: 10:a6:92:f0:59:a6:ac:d9:7f:b1:90:27:84:e4:02:8d:4b:cb: 70:50:6b:5b:d6:20:c1:3d:50:f0:2b:8c:e3:c1:1d:3f:69:a1: ec:8c:3f:e1:53:ae:9d:01:bb:55:84:0f:b8:d6:23:61:6d:3a: 45:db:65:5e:c4:8d:a7:07:0f:f5:dc:2c:9e:55:52:ee:a6:eb: 19:0c:79:b4:73:04:f3:71:a4:4c:03:1e:7e:8d:03:a3:04:82: 43:0c:e9:e8:e1:61:f6:aa:09:a3:97:64:1c:02:19:d2:b3:a6: 78:88:7e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884olm/2/cPvAWqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NTEyZGFmY2EtMDRlMC00NTM0LTg5NjQtZDRlNTllN2ZhNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApudkA5Ey/eGEkRRhHV3U8BchbGLrF1o6WmeL yduboGOm1QmcJHz42D2m76hNsSpWwDLXh56tA3C1j/v4+L8kaE9sfJl0SsXIGqFr +RMAxUh3sWiru7PU0xQk8U9rV1WC1f1d6sJMuSN0CAF/krs+ABihF1UB7tqhQuk8 Z4k4+9fQewhDgB7vN9pUABWQxcg9PGcc1dA59rW9Xh3mYwLlo1tX8DLM92iBClk6 axZSG06c4qOscooHJIF5XDss/kuv0Uwa4/NDNybfG8TsOT/9ZZPN+LU0U6EBkaFz dyG7rZHuQHrV/TgYdhWjWb2+oJSImlZu1d8v+sVxUBCyJhQL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtB5nLVN25g4Jh18lnkXNoeiNk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZmUxMGQ3ZjUtZTMyZi0z NGZlLTkzNmEtMDZmN2UwZjkwNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoC+xPukFlwSihnmIY+/Dgqs4TsUyG7IP/PgSwGsyx2pSL/IC5v87t/ IT6JOz1NueKJJKQ2zqTJ4wgk0JPf+8hbi6VDwHXGtM0T2ziDtOlhDINYlqQRqGoI ExCS3B14olwnD13pHhCHZ8N9uuWlXYilEJ/nlnK7rpQWWq5IifCM8tXxMT/iz2ko Rt0Ntcqt7xCmkvBZpqzZf7GQJ4TkAo1Ly3BQa1vWIME9UPArjOPBHT9poeyMP+FT rp0Bu1WED7jWI2FtOkXbZV7EjacHD/XcLJ5VUu6m6xkMebRzBPNxpEwDHn6NA6ME gkMM6ejhYfaqCaOXZBwCGdKzpniIfm0= -----END CERTIFICATE-----Generated at Tue Sep 22 17:21:28 2026 by rpki-client