$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: hyf59oGkXfGP0LLF9DzDiLLq57lxTLYR2TxyUayhFUw= Subject key identifier: 97:14:CB:38:1C:6E:EB:37:6C:AA:DC:4E:2A:DE:96:B1:A9:F3:6B:DA Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3E47D4107DE82FA6903FB980 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d4:10:7d:e8:2f:a6:90:3f:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=28249f79-3d43-49c5-8ead-6b8cecbedf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:a7:53:84:67:13:4b:9e:25:42:96:26:55: 31:c5:95:7e:db:11:67:1a:d4:03:4c:32:21:59:60: 0a:63:de:35:aa:d9:cb:a8:ad:1d:34:4f:21:fb:01: c4:68:60:29:b4:f8:97:a0:0f:b9:59:90:de:9c:0f: 67:7e:7d:6a:4e:9b:fb:85:8a:81:8a:bf:8d:b1:83: a8:cc:30:46:19:1e:cf:72:03:64:e4:f9:dc:67:43: 52:be:3c:71:49:3e:79:e8:db:fb:96:a3:55:87:ac: ea:3e:ef:eb:10:d5:60:c3:3d:5f:89:3c:42:54:cb: 7b:aa:b0:45:16:45:db:1d:1f:f8:88:52:c3:a5:47: fc:6d:c1:9a:d8:e7:7a:cd:48:1e:5a:61:0a:19:4d: e8:b5:89:75:84:f2:f7:5b:33:dd:de:7a:5e:27:b1: 65:54:e8:36:c5:5b:c8:a9:f2:01:9e:86:31:b5:96: b8:f5:2e:fe:65:47:b6:ea:ec:55:8b:78:7e:9b:77: a9:a4:57:0f:53:03:b5:ee:ed:db:03:78:8d:90:bc: 7b:05:93:da:11:bf:81:2a:56:5e:55:70:8e:eb:99: 89:6c:d6:d6:2d:1c:f3:4e:ed:4b:e3:80:f5:b0:c8: 36:fa:40:7a:cf:b4:b9:db:3d:90:15:b3:c1:82:98: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:14:CB:38:1C:6E:EB:37:6C:AA:DC:4E:2A:DE:96:B1:A9:F3:6B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:08:9b:8e:fd:28:f3:c4:16:e5:c2:7d:87:25:50:d6:29:8f: 2e:82:73:e8:3f:d8:91:ef:78:2d:99:e9:e3:35:31:6d:8b:64: b3:01:33:6b:62:06:c5:67:5f:17:fd:34:e9:86:d5:86:1e:61: ee:82:9d:c0:bd:91:fe:2e:3c:04:c0:bf:a3:22:5f:56:8d:85: 43:e9:1a:f9:13:ad:73:e9:bd:e5:08:a5:42:30:25:e3:92:06: ae:68:1e:72:18:89:90:7c:b3:31:73:ab:5a:ed:e4:3b:42:43: 0b:40:0d:39:82:29:8c:26:1e:bb:92:15:70:a0:b6:fc:d9:3b: 81:0a:1c:68:bf:10:83:dd:b6:23:e2:b5:a6:c5:14:0a:da:b4: 7c:24:17:2e:95:c9:06:f9:a6:8d:ea:91:2b:f6:4f:2f:a1:da: 52:fa:c2:31:f7:ee:6e:50:42:fa:08:13:e1:20:01:87:a5:de: b1:15:ab:18:dd:f2:66:fd:23:63:89:d0:ce:93:a3:24:87:cf: 9e:14:b6:57:13:7b:ae:fe:36:a4:80:2c:ba:37:3a:3b:f9:88: bc:64:1c:6c:95:30:2e:52:95:67:7d:07:bf:d3:d6:81:c3:3a: 78:ea:a4:9e:9a:57:1d:a7:fe:42:03:77:f5:bc:05:7d:34:be: 4f:f5:64:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9QQfegvppA/uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjgyNDlmNzktM2Q0My00OWM1LThlYWQtNmI4Y2VjYmVkZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3KnU4RnE0ueJUKWJlUxxZV+2xFnGtQDTDIh WWAKY941qtnLqK0dNE8h+wHEaGAptPiXoA+5WZDenA9nfn1qTpv7hYqBir+NsYOo zDBGGR7PcgNk5PncZ0NSvjxxST556Nv7lqNVh6zqPu/rENVgwz1fiTxCVMt7qrBF FkXbHR/4iFLDpUf8bcGa2Od6zUgeWmEKGU3otYl1hPL3WzPd3npeJ7FlVOg2xVvI qfIBnoYxtZa49S7+ZUe26uxVi3h+m3eppFcPUwO17u3bA3iNkLx7BZPaEb+BKlZe VXCO65mJbNbWLRzzTu1L44D1sMg2+kB6z7S52z2QFbPBgpjVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcUyzgcbus3bKrcTirelrGp82vaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUIm479KPPEFuXCfYclUNYpjy6Cc+g/2JHveC2Z6eM1MW2LZLMBM2ti BsVnXxf9NOmG1YYeYe6CncC9kf4uPATAv6MiX1aNhUPpGvkTrXPpveUIpUIwJeOS Bq5oHnIYiZB8szFzq1rt5DtCQwtADTmCKYwmHruSFXCgtvzZO4EKHGi/EIPdtiPi tabFFAratHwkFy6VyQb5po3qkSv2Ty+h2lL6wjH37m5QQvoIE+EgAYel3rEVqxjd 8mb9I2OJ0M6ToySHz54UtlcTe67+NqSALLo3Ojv5iLxkHGyVMC5SlWd9B7/T1oHD OnjqpJ6aVx2n/kIDd/W8BX00vk/1ZDg= -----END CERTIFICATE-----Generated at Sun Sep 27 06:21:04 2026 by rpki-client