$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa File: 5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa (raw, json) Hash identifier: 3OrF29skdf8Aw+/jD7UNcNGzsdpVLIlk4jZv6a8x+LE= Subject key identifier: A5:15:11:B4:52:ED:47:9D:BF:49:AC:A4:8E:D1:6A:D4:B9:82:DE:D2 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBBA0446772F94B55AD8B0900 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 16509 IP address blocks: 208.95.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:44:67:72:f9:4b:55:ad:8b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=a86db502-70d3-4e92-b67f-cfc887774019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:41:f6:f5:56:3a:cb:08:52:8c:5a:c7:80: 36:41:41:de:1b:17:e0:5a:80:12:f8:4a:7a:85:a2: 9c:da:9c:f6:bc:c8:f6:c2:6b:21:bb:4d:69:0d:e9: 0d:11:62:73:32:87:68:0a:f6:73:49:ec:1c:2b:66: 1d:05:a7:a3:b6:bb:0e:b1:dc:4c:7a:f9:64:6f:16: 42:d6:c8:c9:c0:e1:d5:57:16:90:3a:88:f4:dc:bd: a1:85:f4:19:3a:3c:9f:bb:6e:4e:e7:2a:35:0d:1c: cf:1e:3a:ca:12:f0:07:db:8e:13:33:7d:c8:27:81: d4:c3:7e:15:cc:3f:51:67:10:86:53:00:02:bf:21: 44:ea:19:e8:4d:54:0b:a2:50:51:d7:1e:1f:42:4b: ea:a0:34:f1:42:e3:ae:f0:f2:be:4f:69:23:b1:cf: 3a:da:c5:ac:43:76:9a:e5:e6:76:c8:ba:5e:20:a3: 44:8a:4b:07:72:c0:a0:51:42:3f:34:4b:b3:8a:3b: 3c:de:0a:16:56:2a:a7:da:c3:88:3b:61:2c:fa:3e: 82:51:28:75:bf:89:f7:4a:f9:a2:7c:cd:58:e4:ac: 2a:2a:73:07:64:13:d6:0a:16:cd:b4:ba:f2:63:1b: ba:ea:a3:79:99:20:fc:32:9d:d2:ef:46:6d:12:8d: 43:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:15:11:B4:52:ED:47:9D:BF:49:AC:A4:8E:D1:6A:D4:B9:82:DE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9f:46:47:09:12:39:ee:69:15:d0:28:f2:2c:d1:66:a0:bf: cc:54:7d:0e:58:46:fe:84:f6:39:6d:a5:4f:59:d1:8c:2c:ea: 11:6f:88:9e:8f:f0:c8:34:d7:9a:c6:0a:ac:d9:2a:28:ad:dd: 55:0d:57:67:d0:2b:0c:d2:7f:d3:9a:77:f3:d4:fe:00:4f:3c: f3:56:2a:5c:c5:cb:37:90:8b:e9:2a:9f:47:3f:08:d0:b7:c3: 0b:2a:95:c1:68:72:87:49:a3:77:97:f4:10:b9:69:bb:3c:54: 2a:ac:5f:77:1e:84:66:fc:0a:58:7d:16:a5:80:ab:10:0e:b3: 3a:ca:3d:3b:73:3a:34:7c:73:80:bc:0e:0a:f2:63:1e:6c:52: fe:3c:88:b2:79:db:61:18:a5:98:d3:17:f9:cf:9d:7d:3f:83: 8d:92:e5:d3:40:51:eb:25:22:12:2d:95:14:52:58:e3:d0:24: 75:8a:f1:74:ad:89:60:2e:c0:e4:fe:4f:00:0c:59:1e:8c:f2: 37:54:06:d1:51:25:53:ab:0d:5a:1f:dc:ac:af:b1:92:73:ff: 9b:3b:98:bf:2e:d9:b3:9e:33:82:d0:aa:ee:88:24:3c:4c:ef: 3c:c0:98:f2:df:3a:70:74:32:e4:06:1b:50:9e:4f:50:bf:e3: 8f:ca:d4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oERncvlLVa2LCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YTg2ZGI1MDItNzBkMy00ZTkyLWI2N2YtY2ZjODg3Nzc0MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWVB9vVWOssIUoxax4A2QUHeGxfgWoAS+Ep6 haKc2pz2vMj2wmshu01pDekNEWJzModoCvZzSewcK2YdBaejtrsOsdxMevlkbxZC 1sjJwOHVVxaQOoj03L2hhfQZOjyfu25O5yo1DRzPHjrKEvAH244TM33IJ4HUw34V zD9RZxCGUwACvyFE6hnoTVQLolBR1x4fQkvqoDTxQuOu8PK+T2kjsc862sWsQ3aa 5eZ2yLpeIKNEiksHcsCgUUI/NEuzijs83goWViqn2sOIO2Es+j6CUSh1v4n3Svmi fM1Y5KwqKnMHZBPWChbNtLryYxu66qN5mSD8Mp3S70ZtEo1DkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUVEbRS7Uedv0mspI7RatS5gt7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWMwYjllZjgtYWI5Ny0z NzM0LWFlZWYtMjA1N2Y4NGI2MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHefRkcJEjnuaRXQKPIs0Wagv8xUfQ5YRv6E9jltpU9Z0Yws6hFviJ6P 8Mg015rGCqzZKiit3VUNV2fQKwzSf9Oad/PU/gBPPPNWKlzFyzeQi+kqn0c/CNC3 wwsqlcFocodJo3eX9BC5abs8VCqsX3cehGb8Clh9FqWAqxAOszrKPTtzOjR8c4C8 DgryYx5sUv48iLJ522EYpZjTF/nPnX0/g42S5dNAUeslIhItlRRSWOPQJHWK8XSt iWAuwOT+TwAMWR6M8jdUBtFRJVOrDVof3KyvsZJz/5s7mL8u2bOeM4LQqu6IJDxM 7zzAmPLfOnB0MuQGG1CeT1C/44/K1F4= -----END CERTIFICATE-----Generated at Wed May 13 19:04:14 2026 by rpki-client