$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa File: 55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa (raw, json) Hash identifier: XnN4NZrzUAbdJolOvsXJ3cPwUUP7tebiyGbKNfi3Qts= Subject key identifier: BA:7C:2B:65:B7:88:E5:77:3B:23:09:D7:11:81:60:72:4F:78:9E:68 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DB4A57A64CF1F57E6A8CE8480 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 208.95.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:7a:64:cf:1f:57:e6:a8:ce:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=de3b6f2d-f4fc-4006-9cda-6cb44f8fa522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:2a:86:27:8b:b2:8e:48:5e:03:24:c8:ed: 07:59:13:39:4d:11:de:d2:be:fe:0f:3b:93:0c:86: c8:0e:de:53:24:86:fe:f6:10:4d:86:40:92:74:6c: 48:8e:ea:14:9a:a2:ec:0f:bf:2e:e0:0b:12:2d:6d: dc:55:3b:da:73:fa:3f:a7:a3:65:f9:ed:43:36:9a: 75:c2:45:87:69:50:a2:de:c9:cf:4c:ed:36:fb:d9: a0:8e:50:8f:a0:60:01:04:ea:65:ea:f0:0b:2f:ea: 4d:19:91:4f:2b:74:32:3f:8d:64:83:18:3d:28:f1: 0c:4d:f9:81:2d:fd:e0:13:a4:f1:3b:b4:e9:ea:eb: 27:fe:6a:bb:b7:1f:d8:45:a7:42:60:fd:d4:8d:a3: ab:96:89:5a:b9:6c:64:25:8b:cd:83:d0:d4:9c:25: e9:cd:3e:ef:0e:4f:60:12:c2:4f:95:04:2c:a1:78: a2:ea:0a:b2:8c:ce:eb:6f:4d:96:f2:79:75:5e:3d: a6:4e:b3:4c:51:80:b3:38:5d:67:3b:44:83:1b:96: aa:d7:dd:81:59:02:23:f5:ea:08:69:53:04:0b:9a: f3:b3:e3:b9:81:34:ad:5b:9d:9c:63:50:0d:1e:d5: 2f:80:1c:76:39:04:cc:28:d7:7c:65:5d:51:0c:da: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7C:2B:65:B7:88:E5:77:3B:23:09:D7:11:81:60:72:4F:78:9E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/55cebe45-5dc5-3dc6-99aa-6ab761008e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b8:fc:0c:bc:13:55:7d:79:61:af:1b:23:c8:4d:d5:9f:20: 08:c8:6c:2c:bb:5c:1c:b3:cf:1e:5b:25:1c:ce:ff:ee:f9:16: 32:f0:b9:ef:37:81:ec:19:ab:b3:1b:5e:3c:ed:db:4a:2c:45: b4:da:1a:39:82:ee:66:50:89:b0:d4:86:27:d4:4a:71:a6:94: ab:54:e2:99:ac:4f:3a:82:dd:40:cf:ba:8b:1d:ce:76:2e:30: a9:1e:f2:dc:54:5e:8f:dd:1e:35:59:0d:2d:6d:54:b3:06:10: ec:40:9f:82:80:d7:34:92:43:82:df:61:6e:bb:d9:d6:a9:a4: 66:25:2f:80:50:0d:be:7c:4d:8f:81:32:c7:89:13:df:0f:21: 9c:b3:69:d8:92:ac:f6:49:e9:55:23:06:06:39:42:71:66:57: d0:17:f3:2b:4b:3f:4b:90:9e:2c:6f:d9:40:92:b4:52:f9:11: 45:45:d4:0f:5c:b9:21:e6:cf:5f:e4:73:ec:43:e9:65:fc:be: 1f:4d:a9:31:4d:e9:fc:37:02:f1:91:f5:e6:7d:b8:48:6c:c1: 50:77:40:4f:bd:8b:14:af:89:bd:47:2d:d8:39:dc:ed:38:de: 8a:4d:92:71:6f:83:47:50:27:2a:4c:81:f2:6c:12:f2:f9:45: 8d:11:13:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXpkzx9X5qjOhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZGUzYjZmMmQtZjRmYy00MDA2LTljZGEtNmNiNDRmOGZhNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsisqhieLso5IXgMkyO0HWRM5TRHe0r7+DzuT DIbIDt5TJIb+9hBNhkCSdGxIjuoUmqLsD78u4AsSLW3cVTvac/o/p6Nl+e1DNpp1 wkWHaVCi3snPTO02+9mgjlCPoGABBOpl6vALL+pNGZFPK3QyP41kgxg9KPEMTfmB Lf3gE6TxO7Tp6usn/mq7tx/YRadCYP3UjaOrlolauWxkJYvNg9DUnCXpzT7vDk9g EsJPlQQsoXii6gqyjM7rb02W8nl1Xj2mTrNMUYCzOF1nO0SDG5aq192BWQIj9eoI aVMEC5rzs+O5gTStW52cY1ANHtUvgBx2OQTMKNd8ZV1RDNrceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp8K2W3iOV3OyMJ1xGBYHJPeJ5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNTVjZWJlNDUtNWRjNS0z ZGM2LTk5YWEtNmFiNzYxMDA4ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC4/Ay8E1V9eWGvGyPITdWfIAjIbCy7XByzzx5bJRzO/+75FjLwue83 gewZq7MbXjzt20osRbTaGjmC7mZQibDUhifUSnGmlKtU4pmsTzqC3UDPuosdznYu MKke8txUXo/dHjVZDS1tVLMGEOxAn4KA1zSSQ4LfYW672dappGYlL4BQDb58TY+B MseJE98PIZyzadiSrPZJ6VUjBgY5QnFmV9AX8ytLP0uQnixv2UCStFL5EUVF1A9c uSHmz1/kc+xD6WX8vh9NqTFN6fw3AvGR9eZ9uEhswVB3QE+9ixSvib1HLdg53O04 3opNknFvg0dQJypMgfJsEvL5RY0RE7c= -----END CERTIFICATE-----Generated at Sun May 3 15:32:29 2026 by rpki-client