$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: sCtDqCS0mFgX8c+PiTNkAsKSGTS6ccI8ZbzGchnV8mg= Subject key identifier: 58:38:9E:16:CE:E3:3E:19:A0:2A:E6:74:7F:84:8F:9D:4F:47:F8:8B Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBBA03F69235A509ADC7FA734 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:3f:69:23:5a:50:9a:dc:7f:a7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=c173a04a-6738-4a8c-9f23-e31239fc6663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:80:cb:dd:f0:e7:68:f3:cf:b6:04:93:29: c7:77:d4:99:34:c0:ab:38:b6:02:ea:c5:2c:a9:df: a0:8e:94:61:06:35:84:3e:01:d2:2a:cc:10:61:e5: bb:fc:9b:09:06:92:31:97:e2:3e:ff:a3:cc:98:07: 02:3d:11:51:66:93:e2:ed:f8:48:72:c9:24:01:53: d4:49:54:b9:05:85:ff:af:f6:e7:3e:13:10:11:c7: 02:bd:78:6a:a8:a1:5d:35:02:d4:10:a5:80:31:1f: a2:d4:f1:e6:f5:ff:0b:be:e7:1c:a7:24:82:93:17: 69:38:74:42:ec:02:a3:3b:b4:f4:63:7a:f5:6c:c2: f3:ae:66:d5:e5:07:e6:b3:cd:e4:5e:ee:c1:ea:66: 4b:fa:10:61:3f:dd:24:68:e3:bc:9e:3f:ce:d5:3d: 00:78:89:53:95:ea:82:08:97:11:97:29:b8:80:bb: fa:b1:e4:ab:e0:33:8a:12:e4:18:3a:86:6f:6f:0c: 8c:22:17:be:29:68:a9:09:3d:97:c5:dd:44:fd:cd: f4:21:a3:39:26:ef:43:a2:f4:af:eb:30:50:05:9e: de:b6:25:1f:50:a8:ab:a0:aa:34:41:79:64:a0:08: d7:3a:3c:31:e5:c4:8b:27:f6:b7:23:f9:ff:32:68: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:38:9E:16:CE:E3:3E:19:A0:2A:E6:74:7F:84:8F:9D:4F:47:F8:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:02:9b:91:ad:e9:62:b4:6b:75:9e:b7:47:37:5a:f3:bf:22: 5f:1a:7e:01:83:c6:72:ee:43:96:ad:e7:3c:3d:d2:80:23:b8: 37:cc:92:0d:a7:2d:76:dd:8b:26:d1:5b:e0:a7:92:8a:aa:b2: 39:f1:27:4e:c0:8f:ec:78:b3:d8:4d:5a:ba:12:50:f5:0c:cc: a2:a4:18:25:b5:46:6c:60:18:79:b4:c8:a5:e1:ea:2c:d0:68: 6b:c8:f8:de:b9:1f:be:a7:83:fd:0a:8d:1a:b8:14:20:61:d2: 31:51:37:6a:96:3c:50:aa:42:32:8c:2c:07:5c:0f:ac:87:40: 12:96:f5:d0:5b:2e:5c:91:7f:d3:92:d8:85:ec:8d:34:d8:2a: f7:a7:af:d3:9b:5c:84:da:2f:94:90:25:5b:7c:52:0e:2b:96: 52:fa:64:e8:c9:11:51:8b:43:85:49:56:e6:e0:e8:2d:6d:29: 33:03:18:06:20:71:0c:4b:e2:8a:b7:13:03:d3:d4:23:81:44: e6:c6:9d:88:a0:d4:f9:37:96:24:ea:73:9c:1f:d9:f8:98:02: 0c:9a:d6:4d:bf:aa:ba:35:72:05:4a:fe:1c:d5:c8:3b:7d:c9: 41:88:d4:2b:e2:7a:54:9f:e9:fb:88:e7:e4:1e:f3:a1:09:49: ec:fe:78:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oD9pI1pQmtx/pzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YzE3M2EwNGEtNjczOC00YThjLTlmMjMtZTMxMjM5ZmM2NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNuAy93w52jzz7YEkynHd9SZNMCrOLYC6sUs qd+gjpRhBjWEPgHSKswQYeW7/JsJBpIxl+I+/6PMmAcCPRFRZpPi7fhIcskkAVPU SVS5BYX/r/bnPhMQEccCvXhqqKFdNQLUEKWAMR+i1PHm9f8LvuccpySCkxdpOHRC 7AKjO7T0Y3r1bMLzrmbV5Qfms83kXu7B6mZL+hBhP90kaOO8nj/O1T0AeIlTleqC CJcRlym4gLv6seSr4DOKEuQYOoZvbwyMIhe+KWipCT2Xxd1E/c30IaM5Ju9DovSv 6zBQBZ7etiUfUKiroKo0QXlkoAjXOjwx5cSLJ/a3I/n/MmhkdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg4nhbO4z4ZoCrmdH+Ej51PR/iLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwCm5Gt6WK0a3Wet0c3WvO/Il8afgGDxnLuQ5at5zw90oAjuDfMkg2n LXbdiybRW+CnkoqqsjnxJ07Aj+x4s9hNWroSUPUMzKKkGCW1RmxgGHm0yKXh6izQ aGvI+N65H76ng/0KjRq4FCBh0jFRN2qWPFCqQjKMLAdcD6yHQBKW9dBbLlyRf9OS 2IXsjTTYKvenr9ObXITaL5SQJVt8Ug4rllL6ZOjJEVGLQ4VJVubg6C1tKTMDGAYg cQxL4oq3EwPT1COBRObGnYig1Pk3liTqc5wf2fiYAgya1k2/qro1cgVK/hzVyDt9 yUGI1CvielSf6fuI5+Qe86EJSez+eC8= -----END CERTIFICATE-----Generated at Wed May 13 13:14:55 2026 by rpki-client