$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa File: 9850d129-378e-38bd-a615-acb2a6e4e18b.roa (raw, json) Hash identifier: ufHrj71EIYQWNOO6kfzpUIWy83CWV1vxcFkHk6gC4RM= Subject key identifier: D6:A4:2A:F4:5D:90:F0:3A:71:74:76:F4:2D:98:06:34:10:F9:FB:B4 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBA3AEB908D69CF7FAB22B800 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 19795 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:eb:90:8d:69:cf:7f:ab:22:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=664c9512-f2da-4b36-ac0c-0784f005bbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:63:18:94:c9:2d:18:df:71:2d:14:35:da: f2:f4:69:1a:80:ac:a6:27:a1:92:37:5f:7b:74:86: 65:fc:26:04:a1:3c:48:1a:4b:a2:f7:19:5d:f8:60: 68:0c:92:da:45:d6:26:e2:ae:79:6c:88:92:af:52: 6a:08:75:e2:6b:ab:6d:d0:db:57:11:30:5c:3e:5f: ea:80:2f:29:90:29:23:42:8a:0c:07:8e:09:c9:77: 07:d4:b2:0e:5b:3c:df:31:cd:40:1b:e2:d0:5e:e3: 87:07:9c:44:c2:59:69:9b:2c:cf:76:d8:7d:46:cf: 80:58:f7:6b:7b:88:29:fa:95:cb:77:54:68:8c:8f: 2d:d3:dd:cc:16:ae:0b:47:a6:b0:63:6d:6c:32:b7: 5f:91:d0:ee:d0:84:f6:97:68:b6:67:28:ae:06:96: 69:81:d8:24:84:a3:71:01:be:87:0b:79:b3:ea:bf: 9b:fe:14:15:9f:e5:8c:5f:ae:7c:d8:95:20:7d:e1: b1:c4:ed:17:2c:eb:a4:8d:c5:0f:ce:27:82:b9:82: 41:f9:67:be:60:7b:4c:c1:f0:4c:77:34:83:40:ea: b5:50:55:d9:e0:ae:aa:dd:d2:78:f5:24:af:ff:90: 66:f8:b3:88:e5:1a:88:68:56:31:39:09:fc:0f:d6: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:2A:F4:5D:90:F0:3A:71:74:76:F4:2D:98:06:34:10:F9:FB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bd:c4:af:e5:bb:1c:88:de:e1:57:24:ae:19:23:d9:65:e4: 98:b9:f4:f0:55:23:7f:06:26:7f:9a:02:c2:e5:b0:61:9a:06: 06:e0:63:04:6d:27:ae:85:9d:8e:cb:35:e6:fa:a7:d0:9e:c4: 2d:d3:62:64:d6:2b:58:20:64:68:b8:07:96:f1:7c:8f:40:3d: 2e:37:64:49:6a:10:5e:be:b8:cc:d5:c5:c9:52:25:da:83:7c: 4b:3e:8a:c7:a5:03:39:51:3e:52:c3:e3:27:b0:15:8d:0b:17: 97:2f:f5:0c:30:d4:7b:a1:66:7d:f1:e8:83:ba:73:60:12:1d: 77:3a:9b:0f:86:36:43:a0:9e:52:8f:98:b7:b0:8f:9a:26:f4: 79:fa:8e:8b:5f:df:a0:58:8b:2c:39:08:cb:6f:5e:d3:73:dd: c1:31:59:a0:f8:f5:78:03:e3:d0:8b:cc:8a:1a:87:43:5e:65: 50:26:5a:be:e8:2b:8d:94:db:05:1a:2a:13:b2:eb:e4:06:60: f1:7d:fa:53:d7:c3:f8:e1:55:a9:0d:20:92:f5:dc:7f:3d:3f: 74:06:54:3f:27:c3:8c:dd:a5:b5:55:da:a2:b3:10:c2:a5:64: b9:c4:ee:86:c9:4e:f5:21:3c:1f:84:3b:e5:29:74:9f:93:af: 57:3b:14:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuuQjWnPf6siuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NjY0Yzk1MTItZjJkYS00YjM2LWFjMGMtMDc4NGYwMDViYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcRjGJTJLRjfcS0UNdry9GkagKymJ6GSN197 dIZl/CYEoTxIGkui9xld+GBoDJLaRdYm4q55bIiSr1JqCHXia6tt0NtXETBcPl/q gC8pkCkjQooMB44JyXcH1LIOWzzfMc1AG+LQXuOHB5xEwllpmyzPdth9Rs+AWPdr e4gp+pXLd1RojI8t093MFq4LR6awY21sMrdfkdDu0IT2l2i2ZyiuBpZpgdgkhKNx Ab6HC3mz6r+b/hQVn+WMX6582JUgfeGxxO0XLOukjcUPzieCuYJB+We+YHtMwfBM dzSDQOq1UFXZ4K6q3dJ49SSv/5Bm+LOI5RqIaFYxOQn8D9Z6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNakKvRdkPA6cXR29C2YBjQQ+fu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTg1MGQxMjktMzc4ZS0z OGJkLWE2MTUtYWNiMmE2ZTRlMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS9xK/luxyI3uFXJK4ZI9ll5Ji59PBVI38GJn+aAsLlsGGaBgbgYwRt J66FnY7LNeb6p9CexC3TYmTWK1ggZGi4B5bxfI9APS43ZElqEF6+uMzVxclSJdqD fEs+iselAzlRPlLD4yewFY0LF5cv9Qww1HuhZn3x6IO6c2ASHXc6mw+GNkOgnlKP mLewj5om9Hn6jotf36BYiyw5CMtvXtNz3cExWaD49XgD49CLzIoah0NeZVAmWr7o K42U2wUaKhOy6+QGYPF9+lPXw/jhVakNIJL13H89P3QGVD8nw4zdpbVV2qKzEMKl ZLnE7obJTvUhPB+EO+UpdJ+Tr1c7FE8= -----END CERTIFICATE-----Generated at Wed May 13 11:34:28 2026 by rpki-client