$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa File: 5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa (raw, json) Hash identifier: ooaHqiTcwAU98VBGbF7+rlEAj3gyIf1RTIpN5AGm3As= Subject key identifier: 43:CC:3A:E6:F3:7D:57:C2:4A:04:C4:0C:D4:10:BE:9C:23:EB:15:C0 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBBA0443A74351C2E0162F900 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 19795 IP address blocks: 208.85.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:44:3a:74:35:1c:2e:01:62:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=8961d727-cf7a-4839-9f56-31ffb402202a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:2b:8d:05:8a:6d:ac:7b:31:42:cb:fd:65: 89:ab:fa:c5:b7:54:e9:aa:61:7f:6e:1e:f3:ee:dd: f1:38:a1:28:f5:5f:28:5e:dc:da:a4:58:d4:54:2a: 50:4a:47:d0:1a:94:45:be:b8:36:1d:e5:96:d1:c7: 8a:03:d5:8c:e6:ad:d0:66:8e:95:54:36:c7:ee:97: 11:9a:44:cc:ee:2d:07:cf:d3:e4:d3:08:1f:62:88: 39:03:4c:cd:2e:60:59:6a:de:1a:c9:ab:5d:d1:b4: d0:36:75:cb:d7:b9:50:31:31:01:f9:75:f1:28:33: 5a:73:f5:e5:69:8a:cb:8a:c1:c5:be:b3:2b:b3:58: 90:35:5c:0b:be:6a:cf:9f:9e:38:2c:61:16:06:84: c6:ef:ad:4b:07:1d:ec:ab:71:9f:54:4c:51:1e:6a: 69:72:7d:95:a5:84:da:03:9d:19:99:61:a1:ac:f5: 1f:22:09:07:22:5e:2a:c3:3e:df:fa:27:9b:32:dd: 22:b9:e6:6f:26:95:39:1c:99:dc:56:04:78:98:74: 8d:96:c6:b0:01:ff:b1:a9:29:a7:e6:65:89:1d:8a: 7d:c2:d6:6e:d4:eb:7d:69:fd:a7:e3:92:e7:9e:e4: 1b:43:f8:17:c4:57:88:df:35:d1:61:d3:46:36:a7: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:3A:E6:F3:7D:57:C2:4A:04:C4:0C:D4:10:BE:9C:23:EB:15:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:72:1d:e0:54:b9:be:38:a8:e2:5d:bb:1b:d9:ea:53:08:85: 72:55:e8:b5:d9:ec:6e:4e:0d:82:53:26:18:75:46:72:e7:2c: 77:72:df:47:e9:c8:bd:a1:b7:62:f8:50:76:85:28:01:32:a8: c0:8f:f1:15:4d:04:1f:8f:b2:22:31:6a:9d:a7:1d:35:17:fe: 08:5b:5a:b8:94:ee:a3:55:3a:bd:65:b0:5a:5a:a8:87:27:a3: 3d:30:cb:56:bb:ec:41:4b:c9:72:f5:b6:01:e6:61:bb:8e:79: 7b:2e:ed:c8:ba:21:f3:d7:0f:c8:43:8b:4b:7c:82:00:a3:55: 04:c8:b4:7d:ba:00:56:e5:f3:5d:35:4e:75:5c:72:46:31:89: c3:a0:c7:51:79:a3:aa:8d:1c:58:a0:5c:81:25:c5:b8:5e:b0: 13:74:ca:c5:5d:d2:56:86:7f:f2:f7:5a:c0:a3:9a:d6:0d:1b: 04:a1:8b:16:14:fb:b8:63:d9:20:05:80:2b:b9:64:a9:e0:45: c9:4f:a1:e0:48:9c:3e:77:e0:a6:e0:9b:df:9b:3a:d0:75:53: 0b:aa:50:93:e2:fa:dc:e6:50:6e:bb:37:4d:13:25:59:d9:5d: 82:11:0e:10:82:6d:03:ef:67:99:33:fa:24:d9:02:4c:d0:d7: 1f:f4:c5:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEQ6dDUcLgFi+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk ODk2MWQ3MjctY2Y3YS00ODM5LTlmNTYtMzFmZmI0MDIyMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO0rjQWKbax7MULL/WWJq/rFt1TpqmF/bh7z 7t3xOKEo9V8oXtzapFjUVCpQSkfQGpRFvrg2HeWW0ceKA9WM5q3QZo6VVDbH7pcR mkTM7i0Hz9Pk0wgfYog5A0zNLmBZat4ayatd0bTQNnXL17lQMTEB+XXxKDNac/Xl aYrLisHFvrMrs1iQNVwLvmrPn544LGEWBoTG761LBx3sq3GfVExRHmppcn2VpYTa A50ZmWGhrPUfIgkHIl4qwz7f+iebMt0iueZvJpU5HJncVgR4mHSNlsawAf+xqSmn 5mWJHYp9wtZu1Ot9af2n45LnnuQbQ/gXxFeI3zXRYdNGNqeoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPMOubzfVfCSgTEDNQQvpwj6xXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWE4YmUzNGItOGNmMi0z ZGUyLTkxYzctYTE2OWRlZTdiNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhyHeBUub44qOJduxvZ6lMIhXJV6LXZ7G5ODYJTJhh1RnLnLHdy30fp yL2ht2L4UHaFKAEyqMCP8RVNBB+PsiIxap2nHTUX/ghbWriU7qNVOr1lsFpaqIcn oz0wy1a77EFLyXL1tgHmYbuOeXsu7ci6IfPXD8hDi0t8ggCjVQTItH26AFbl8101 TnVcckYxicOgx1F5o6qNHFigXIElxbhesBN0ysVd0laGf/L3WsCjmtYNGwShixYU +7hj2SAFgCu5ZKngRclPoeBInD534Kbgm9+bOtB1UwuqUJPi+tzmUG67N00TJVnZ XYIRDhCCbQPvZ5kz+iTZAkzQ1x/0xYQ= -----END CERTIFICATE-----Generated at Wed May 13 13:15:28 2026 by rpki-client