$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa File: 84c7cebd-5039-388c-bb84-61029b80011b.roa (raw, json) Hash identifier: n9j3hXAfmDaWoS3Xq8JcGqNEwHmtM853Pa043qzCs88= Subject key identifier: A5:EA:AC:50:1C:6A:5C:F5:5B:66:63:A9:2C:40:86:30:F7:E2:CB:27 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE2892B5CAE2970E7519800 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:89:2b:5c:ae:29:70:e7:51:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=a87eeb9c-b994-4163-bb8e-25bbefa62595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:27:23:44:77:b1:3c:a5:d5:b3:df:23:7e: 0b:e9:f0:30:eb:ba:0e:87:7b:f2:2f:ce:c9:9a:12: 42:e2:1f:bb:c6:50:1e:56:30:f7:f6:08:a4:75:9f: 29:89:c5:b0:7d:ca:d0:c4:e4:af:11:3b:3f:07:c9: 60:6f:8a:8d:60:de:c7:51:81:ea:ed:1f:fc:37:f9: fa:a0:54:d7:01:a7:ce:e9:2a:52:3b:86:92:5e:1d: 89:e3:d0:0a:8e:d7:d9:1b:8e:2c:99:21:3c:02:16: 0f:7a:73:65:20:ff:06:ee:ab:a2:a7:58:e7:41:f0: 39:af:67:88:2b:a2:0e:f7:ec:b5:a6:11:02:71:9f: 7a:9c:5e:19:53:19:27:e4:5d:46:e0:38:bd:30:aa: c8:ac:04:5f:6a:b2:0e:c0:28:0e:c9:47:b6:ac:49: c9:a3:ad:7d:eb:0d:d1:31:f5:7a:d8:62:7a:a5:fb: ba:03:6a:e9:ac:42:46:b8:91:03:a9:50:80:f5:a7: b8:d6:d9:50:85:36:fd:b3:b1:7b:b4:69:eb:8a:d6: 1f:91:5b:ee:44:ee:8c:85:d9:5b:04:d6:18:36:67: 14:cb:8c:97:8f:3d:50:4f:3f:c7:b2:d1:d6:28:0b: 6f:b1:46:59:c0:e5:e8:bb:88:3e:e2:09:6e:b3:8d: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:AC:50:1C:6A:5C:F5:5B:66:63:A9:2C:40:86:30:F7:E2:CB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8f:91:e1:c1:cb:29:5a:c3:b3:84:c3:4c:27:95:b5:d0:c4: 3d:0f:7b:8c:0e:1c:2a:2a:4c:90:ef:06:3d:f6:0c:6e:65:8f: 02:78:f9:c7:a3:f5:5e:a1:66:9c:fe:c1:16:1e:08:cb:0e:4e: 11:3e:0e:3a:5c:b5:ab:58:9e:af:ec:8a:7b:df:eb:0d:71:42: 46:50:69:44:23:4b:1e:d3:22:8c:b3:6d:4f:9f:29:95:6e:77: fe:47:58:05:b5:57:1a:fa:c0:06:1e:8a:ae:e8:71:c0:a5:5b: 05:c9:74:3f:70:d5:f4:69:00:20:51:46:17:27:55:86:cc:38: 2c:3a:63:3b:cc:ac:e4:b5:35:03:1c:f8:15:bb:16:67:0f:71: fb:a5:5d:3e:2d:01:43:be:08:6d:4e:b9:c5:c5:31:8e:f0:b5: 1f:ef:eb:12:85:d3:fb:a2:6f:06:31:48:90:fb:8e:fd:8a:9f: 16:61:9d:19:4d:3c:18:ce:4a:9a:86:5e:95:6b:5a:5b:a3:e2: 6b:74:f3:ef:1c:4f:77:e8:b8:7c:ae:d6:4f:48:8b:b0:f9:dd: 6f:6f:97:3c:14:7a:7e:dd:7f:4c:8b:96:64:09:8a:a1:df:80: c4:87:c7:6b:7f:ad:30:ac:b3:0c:4b:3b:9d:b1:f3:c8:fb:dc: 51:dd:76:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884okrXK4pcOdRmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YTg3ZWViOWMtYjk5NC00MTYzLWJiOGUtMjViYmVmYTYyNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvInI0R3sTyl1bPfI34L6fAw67oOh3vyL87J mhJC4h+7xlAeVjD39gikdZ8picWwfcrQxOSvETs/B8lgb4qNYN7HUYHq7R/8N/n6 oFTXAafO6SpSO4aSXh2J49AKjtfZG44smSE8AhYPenNlIP8G7quip1jnQfA5r2eI K6IO9+y1phECcZ96nF4ZUxkn5F1G4Di9MKrIrARfarIOwCgOyUe2rEnJo6196w3R MfV62GJ6pfu6A2rprEJGuJEDqVCA9ae41tlQhTb9s7F7tGnritYfkVvuRO6Mhdlb BNYYNmcUy4yXjz1QTz/HstHWKAtvsUZZwOXou4g+4glus41UpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXqrFAcalz1W2ZjqSxAhjD34ssnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODRjN2NlYmQtNTAzOS0z ODhjLWJiODQtNjEwMjliODAwMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+PkeHByylaw7OEw0wnlbXQxD0Pe4wOHCoqTJDvBj32DG5ljwJ4+cej 9V6hZpz+wRYeCMsOThE+DjpctatYnq/sinvf6w1xQkZQaUQjSx7TIoyzbU+fKZVu d/5HWAW1Vxr6wAYeiq7occClWwXJdD9w1fRpACBRRhcnVYbMOCw6YzvMrOS1NQMc +BW7FmcPcfulXT4tAUO+CG1OucXFMY7wtR/v6xKF0/uibwYxSJD7jv2KnxZhnRlN PBjOSpqGXpVrWluj4mt08+8cT3fouHyu1k9Ii7D53W9vlzwUen7df0yLlmQJiqHf gMSHx2t/rTCsswxLO52x88j73FHddlA= -----END CERTIFICATE-----Generated at Sun Sep 27 03:10:07 2026 by rpki-client