$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa File: fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa (raw, json) Hash identifier: 8npxJCRqRAErDR4G9DKDlVqwHtPfmBi8ok5iVMetWkQ= Subject key identifier: 9F:74:40:EF:B1:EF:C0:BF:8E:EE:36:F4:2F:E6:CB:0B:45:43:87:4B Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584E9A7FBD6597B36BCBEF9B0400 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 208.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bd:65:97:b3:6b:cb:ef:9b:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=4cc8889a-c330-4bfc-a3d7-bf310cf9e4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b1:02:5f:c5:84:51:60:26:96:75:7d:11:fb: 98:d1:24:bc:62:73:86:74:ff:fd:fd:ef:ea:b9:92: 53:8b:16:34:14:76:61:a2:7b:74:6e:67:28:a5:cc: 5e:cd:81:9a:92:85:1a:2c:e4:07:d0:3c:b7:ec:25: 78:98:7e:c7:f3:fd:5c:3c:b7:f1:3f:e4:8c:aa:25: 1a:23:bc:9e:f8:e5:ac:37:94:1a:ca:72:0c:a6:af: 1e:d3:0d:0e:d5:fc:4c:a0:69:f9:0a:5e:93:74:62: 3c:ae:18:74:01:86:ca:ea:18:b9:1c:04:1f:c1:e9: dd:ac:87:e1:57:62:f7:75:af:15:1f:3d:39:9a:0e: 9c:ec:ce:97:7a:7c:ea:40:fe:c8:b3:de:0e:ec:9d: a5:86:99:1d:fc:55:14:7c:88:dd:b1:6c:26:e0:d2: 0c:b2:84:de:09:df:7e:6f:f8:3d:bf:b9:26:c4:7c: 79:9e:55:98:c3:be:e9:38:f1:bc:65:7a:2f:7e:56: 41:4d:a0:b1:89:a0:5e:c7:e8:39:20:fb:3f:dc:49: d6:85:6a:dd:f3:98:ce:29:e1:20:09:d5:62:73:d3: cd:0b:fe:13:52:a5:fe:24:e9:4f:06:3f:46:62:b0: d0:2e:f2:3f:59:32:be:7a:f5:74:b1:f9:75:b0:ed: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:40:EF:B1:EF:C0:BF:8E:EE:36:F4:2F:E6:CB:0B:45:43:87:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fe10d7f5-e32f-34fe-936a-06f7e0f904c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:62:53:37:22:e5:19:37:a9:c2:4c:af:84:22:ab:73:62:9f: 38:43:88:72:f8:ce:5c:47:a0:99:29:80:5d:af:45:9d:9b:47: d6:7b:09:bd:c8:d0:97:3f:af:34:dd:ff:56:d9:45:24:1b:fb: be:8f:ca:d4:70:43:ad:2a:33:29:07:46:c9:23:12:6d:d9:9f: 7b:28:bf:7a:33:81:11:06:45:63:73:66:fa:16:7d:e1:ab:a7: e9:d1:68:89:3e:35:7d:21:80:82:4f:ef:f2:96:eb:6c:7c:6b: eb:f1:9c:0f:f3:c0:78:84:8f:b1:15:de:5e:f0:a7:a0:26:44: 51:39:6a:86:d5:ca:e3:0c:4f:f5:87:bc:a1:f9:e8:eb:05:94: 09:1b:4d:a3:90:b7:25:d8:d9:e1:9c:5f:e8:18:0f:fa:ba:e2: 60:d7:49:11:9c:bf:81:9e:08:c4:63:ff:00:07:13:3a:b9:b6: d0:fd:ab:a7:40:b2:a5:b1:5f:19:3a:80:58:8e:57:c6:ce:2c: b7:88:4d:aa:c9:3b:fb:9d:2b:b2:c5:29:84:8f:0e:90:2c:a0: 79:26:a7:9c:b1:8f:27:20:66:96:a7:70:52:13:f8:dd:f6:ce: a6:34:c3:41:98:2f:f2:9b:ed:36:82:3f:f3:2e:b1:3f:90:33: 34:52:ea:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af71ll7Nry++bBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk NGNjODg4OWEtYzMzMC00YmZjLWEzZDctYmYzMTBjZjllNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLECX8WEUWAmlnV9EfuY0SS8YnOGdP/9/e/q uZJTixY0FHZhont0bmcopcxezYGakoUaLOQH0Dy37CV4mH7H8/1cPLfxP+SMqiUa I7ye+OWsN5QaynIMpq8e0w0O1fxMoGn5Cl6TdGI8rhh0AYbK6hi5HAQfwendrIfh V2L3da8VHz05mg6c7M6XenzqQP7Is94O7J2lhpkd/FUUfIjdsWwm4NIMsoTeCd9+ b/g9v7kmxHx5nlWYw77pOPG8ZXovflZBTaCxiaBex+g5IPs/3EnWhWrd85jOKeEg CdVic9PNC/4TUqX+JOlPBj9GYrDQLvI/WTK+evV0sfl1sO2sKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ90QO+x78C/ju429C/mywtFQ4dLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZmUxMGQ3ZjUtZTMyZi0z NGZlLTkzNmEtMDZmN2UwZjkwNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5iUzci5Rk3qcJMr4Qiq3NinzhDiHL4zlxHoJkpgF2vRZ2bR9Z7Cb3I 0Jc/rzTd/1bZRSQb+76PytRwQ60qMykHRskjEm3Zn3sov3ozgREGRWNzZvoWfeGr p+nRaIk+NX0hgIJP7/KW62x8a+vxnA/zwHiEj7EV3l7wp6AmRFE5aobVyuMMT/WH vKH56OsFlAkbTaOQtyXY2eGcX+gYD/q64mDXSRGcv4GeCMRj/wAHEzq5ttD9q6dA sqWxXxk6gFiOV8bOLLeITarJO/udK7LFKYSPDpAsoHkmp5yxjycgZpancFIT+N32 zqY0w0GYL/Kb7TaCP/MusT+QMzRS6v0= -----END CERTIFICATE-----Generated at Wed Jul 29 05:44:14 2026 by rpki-client