$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa File: db08c46a-c530-3729-8f45-1e034d3c907b.roa (raw, json) Hash identifier: Ws5DAFMv0CRdfERBmcQEAWphj7mkaDs4CJmOSInHvBE= Subject key identifier: DA:F5:AE:4D:4E:6C:E2:05:67:65:85:2E:4C:DC:8B:FA:97:06:1C:7A Certificate issuer: /CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Certificate serial: 010D0C9F4328584F7E7DB4CCC7A36C4A333FC800 Authority key identifier: 06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 18559 IP address blocks: 198.54.221.0/24 maxlen: 24 2602:f52d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b4:cc:c7:a3:6c:4a:33:3f:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=68c2ce67-770d-469d-a3e7-2180848d88c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:8d:87:23:cc:0e:26:e2:94:d9:77:bb:ef: 26:ae:ce:0d:fe:59:af:1b:8f:9b:2d:52:e9:7e:66: 05:46:60:41:c8:6e:fa:9b:f5:87:74:48:50:9d:89: 18:f2:b5:5f:af:39:7c:d7:25:02:0e:74:b3:fb:1b: 5c:ba:26:cc:04:77:8d:7a:13:d1:48:d8:9b:a7:ee: 7c:e6:ce:1d:82:8f:22:9e:86:2d:65:84:a0:bf:04: 15:f0:a1:e4:ee:33:40:c1:0e:ce:8e:f8:d1:f7:f6: 08:4c:22:9a:18:82:e0:e4:ea:5a:b2:eb:dd:e0:e0: ea:15:d1:02:4e:09:e4:95:6a:18:11:7f:88:29:29: 73:f2:25:80:9c:c2:fd:63:2a:dc:f6:75:35:1d:86: f6:b2:2f:09:fb:ab:33:fd:d5:34:12:bd:e6:6a:4b: 0f:98:fc:91:34:ab:38:ec:a0:58:17:74:01:1a:fd: c6:8d:5d:b5:f8:52:ae:2a:5e:76:e1:03:02:c8:b8: 24:16:36:fd:d8:8d:73:bf:86:f3:1e:8c:1b:57:04: 0f:72:32:3a:e4:89:3b:8c:16:bb:32:42:ab:42:32: 5f:5c:dd:6a:ca:9f:00:8f:ce:08:08:c2:87:5f:21: a4:56:a7:46:a6:99:3c:db:7e:d4:fc:8a:05:3c:86: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F5:AE:4D:4E:6C:E2:05:67:65:85:2E:4C:DC:8B:FA:97:06:1C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/db08c46a-c530-3729-8f45-1e034d3c907b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl X509v3 Authority Key Identifier: keyid:06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer sbgp-ipAddrBlock: critical IPv4: 198.54.221.0/24 IPv6: 2602:f52d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a2:ad:1b:e4:25:5a:7b:9d:8a:50:9c:ae:0a:ca:6a:5c:12: be:50:92:14:31:e7:98:7f:3b:98:5f:e7:46:ef:7b:3d:fd:6c: 56:3a:15:7a:a2:f4:62:5d:18:76:d7:1c:d5:23:37:22:84:a9: 67:69:e9:70:8e:36:11:9a:4d:fa:fe:b0:87:84:9d:9f:57:f6: df:d8:b3:9f:9b:e3:19:80:90:2f:24:d9:64:37:cb:da:18:26: a5:a4:d4:b9:a8:2f:e3:7b:f9:34:b6:16:9b:68:08:64:d9:ef: 70:f6:8f:95:32:e3:51:fb:48:9d:73:f8:34:6f:45:70:19:f3: a1:43:32:ef:64:9d:ba:db:a3:66:ad:f7:c6:1b:14:19:c6:70: 0c:ee:44:64:db:94:01:57:83:e9:99:4f:89:3f:c5:3d:1d:b9: 8e:60:f5:16:ab:a8:28:f0:f0:f1:b0:34:98:12:1d:71:0c:7a: 19:ba:97:94:eb:ce:27:35:0f:53:23:6c:36:51:40:23:1b:46: 3e:54:50:6e:34:d7:89:21:aa:ac:ef:cb:3f:27:e6:ab:9f:67: 49:02:89:a6:23:12:34:d2:6a:e9:d2:bf:cb:f4:e8:36:bf:9b: 56:1a:71:25:80:df:ed:05:79:d3:9c:fd:31:d9:fa:f8:61:b3: 5d:4e:a1:d3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9+fbTMx6NsSjM/yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmOWMyNTAtZTUyZi00NDc5LTk5YTUtODgwYTNlMWI4 YzJhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NjhjMmNlNjctNzcwZC00NjlkLWEzZTctMjE4MDg0OGQ4OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjESNhyPMDibilNl3u+8mrs4N/lmvG4+bLVLp fmYFRmBByG76m/WHdEhQnYkY8rVfrzl81yUCDnSz+xtcuibMBHeNehPRSNibp+58 5s4dgo8inoYtZYSgvwQV8KHk7jNAwQ7OjvjR9/YITCKaGILg5Opasuvd4ODqFdEC TgnklWoYEX+IKSlz8iWAnML9Yyrc9nU1HYb2si8J+6sz/dU0Er3maksPmPyRNKs4 7KBYF3QBGv3GjV21+FKuKl524QMCyLgkFjb92I1zv4bzHowbVwQPcjI65Ik7jBa7 MkKrQjJfXN1qyp8Aj84ICMKHXyGkVqdGppk8237U/IoFPIb4JQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNr1rk1ObOIFZ2WFLkzci/qXBhx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5 YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBhM2UxYjhjMmEvZGIwOGM0NmEtYzUzMC0z NzI5LThmNDUtMWUwMzRkM2M5MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWFmOWMyNTAtZTUyZi00NDc5LTk5 YTUtODgwYTNlMWI4YzJhL2VhZjljMjUwLWU1MmYtNDQ3OS05OWE1LTg4MGEzZTFi OGMyYS5jcmwwHwYDVR0jBBgwFoAUBp6AkQVoEnVvqTOe9aocz8FhOLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBh M2UxYjhjMmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxjbdMA4E AgACMAgDBgAmAvUtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0oq0b5CVae52KUJyuCspqXBK+UJIUMeeY fzuYX+dG73s9/WxWOhV6ovRiXRh21xzVIzcihKlnaelwjjYRmk36/rCHhJ2fV/bf 2LOfm+MZgJAvJNlkN8vaGCalpNS5qC/je/k0thabaAhk2e9w9o+VMuNR+0idc/g0 b0VwGfOhQzLvZJ2626NmrffGGxQZxnAM7kRk25QBV4PpmU+JP8U9HbmOYPUWq6go 8PDxsDSYEh1xDHoZupeU684nNQ9TI2w2UUAjG0Y+VFBuNNeJIaqs78s/J+arn2dJ AommIxI00mrp0r/L9Og2v5tWGnElgN/tBXnTnP0x2fr4YbNdTqHT -----END CERTIFICATE-----Generated at Wed Oct 14 08:56:40 2026 by rpki-client