$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa File: 498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa (raw, json) Hash identifier: nS9ZcPi8saEE0oBEGgFrY4O6WyMQJydNF0Bc/ATDoxA= Subject key identifier: 0A:D9:63:ED:6F:37:07:18:F2:97:ED:6A:45:5E:36:1A:84:BA:CF:CB Certificate issuer: /CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Certificate serial: 010D0C9F4328584F4988FD7A8E40AEA15CC32D40 Authority key identifier: 73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18849 IP address blocks: 74.85.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:fd:7a:8e:40:ae:a1:5c:c3:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=62c1c5fa-e528-4f43-b431-bc28eebb4a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:77:7a:cd:70:c0:80:61:00:ad:ba:39:1d: 75:bd:e7:89:5a:21:1e:b7:d7:e8:58:f5:15:fa:2b: 54:84:ab:66:c7:95:5c:04:7d:c5:14:ab:c5:99:8b: c2:04:bc:52:1d:3c:73:f6:37:9b:74:00:a2:cc:f0: be:d2:aa:1a:fc:2b:8c:45:cc:86:65:90:6f:57:61: 68:56:f4:67:c3:46:05:98:60:f8:5d:03:fe:03:a4: b7:2f:41:a0:e4:34:f4:d7:bf:7a:77:22:e9:50:ae: 3a:51:8e:2b:c8:a7:9e:ab:d7:ce:60:c1:f3:be:d7: 5a:e9:8c:23:fd:2e:b9:75:08:63:90:50:b3:ad:5c: a0:85:89:bf:2e:44:59:df:a7:af:59:6c:38:a5:54: ae:5b:11:19:c0:a1:aa:42:6a:21:ce:67:d5:bd:2c: aa:8e:3c:03:b6:e8:49:6f:8c:dd:5e:45:cd:47:fd: a9:41:94:36:16:60:4a:2b:15:e7:13:cc:f4:8a:50: d9:17:ba:79:a1:b6:6d:81:0f:76:35:cf:fb:cd:7e: ce:e9:b7:cd:9e:e7:0c:3d:5c:63:5b:02:51:b8:8a: 29:91:63:3c:6f:ba:ae:34:1a:3e:a2:75:fb:57:79: fe:37:36:83:96:3f:ce:65:50:f7:83:43:eb:cd:98: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D9:63:ED:6F:37:07:18:F2:97:ED:6A:45:5E:36:1A:84:BA:CF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.crl X509v3 Authority Key Identifier: keyid:73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer sbgp-ipAddrBlock: critical IPv4: 74.85.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:68:9e:b7:b2:6f:8f:b7:ad:c4:01:8e:b9:2a:7a:82:99:0b: 67:27:7f:1e:15:08:14:c4:c9:a4:c8:95:88:20:5c:ca:f2:ea: 82:af:eb:06:cb:ef:f5:b0:aa:fb:5d:62:36:b8:4e:c7:aa:b1: 1b:34:ac:7d:6b:73:37:0b:df:be:fb:63:0c:d1:8f:fc:46:99: 3f:52:42:05:06:f6:dc:1e:a4:4f:eb:e4:69:c1:49:3c:c1:61: 50:e6:0b:66:01:9d:8c:37:fa:78:07:0c:4b:ed:7a:85:8b:44: 5b:38:6f:55:c9:2a:71:95:4e:1e:81:2f:34:41:da:a5:f6:df: f5:42:da:4e:7f:f5:0c:f4:0a:66:cf:66:47:58:a7:7c:c3:8c: 03:3f:28:56:3c:12:94:0e:c7:71:d4:17:00:58:8c:a5:20:f5: ca:44:57:46:b6:fb:92:65:3a:bb:a0:ff:50:67:c0:4d:82:21: 3b:3f:38:41:c5:67:87:f4:9e:71:87:55:f2:a7:6a:65:a0:8a: 3a:2b:c3:51:a7:c5:da:98:73:0d:01:7c:d0:96:00:16:9b:e9: 52:08:be:54:22:ee:f6:37:3c:01:b6:92:ad:3d:78:67:33:d1: 99:54:ea:15:85:df:52:b9:b6:b5:2b:d0:a2:a3:a7:9b:d2:d0: 8d:cb:7c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiP16jkCuoVzDLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA1YTk4OGQtN2I3NS00ZWMwLTg0ZmMtNWNkMmY1ZWMy YzIwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjJjMWM1ZmEtZTUyOC00ZjQzLWI0MzEtYmMyOGVlYmI0YTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyh3es1wwIBhAK26OR11veeJWiEet9foWPUV +itUhKtmx5VcBH3FFKvFmYvCBLxSHTxz9jebdACizPC+0qoa/CuMRcyGZZBvV2Fo VvRnw0YFmGD4XQP+A6S3L0Gg5DT01796dyLpUK46UY4ryKeeq9fOYMHzvtda6Ywj /S65dQhjkFCzrVyghYm/LkRZ36evWWw4pVSuWxEZwKGqQmohzmfVvSyqjjwDtuhJ b4zdXkXNR/2pQZQ2FmBKKxXnE8z0ilDZF7p5obZtgQ92Nc/7zX7O6bfNnucMPVxj WwJRuIopkWM8b7quNBo+onX7V3n+NzaDlj/OZVD3g0PrzZhvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArZY+1vNwcY8pftakVeNhqEus/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMDVh OTg4ZC03Yjc1LTRlYzAtODRmYy01Y2QyZjVlYzJjMjAvNDk4YmYwMWYtOGY4YS0z OTgwLWJlZTYtYTExNDBjNDBmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzA1YTk4OGQtN2I3NS00ZWMwLTg0 ZmMtNWNkMmY1ZWMyYzIwLzMwNWE5ODhkLTdiNzUtNGVjMC04NGZjLTVjZDJmNWVj MmMyMC5jcmwwHwYDVR0jBBgwFoAUc1MUOZG20CRvZ7KLhL6/pCOQfkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zMDVhOTg4ZC03Yjc1LTRlYzAtODRmYy01Y2Qy ZjVlYzJjMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVonreyb4+3rcQBjrkqeoKZC2cnfx4VCBTEyaTIlYggXMry6oKv6wbL 7/WwqvtdYja4TseqsRs0rH1rczcL3777YwzRj/xGmT9SQgUG9twepE/r5GnBSTzB YVDmC2YBnYw3+ngHDEvteoWLRFs4b1XJKnGVTh6BLzRB2qX23/VC2k5/9Qz0CmbP ZkdYp3zDjAM/KFY8EpQOx3HUFwBYjKUg9cpEV0a2+5JlOrug/1BnwE2CITs/OEHF Z4f0nnGHVfKnamWgijorw1GnxdqYcw0BfNCWABab6VIIvlQi7vY3PAG2kq09eGcz 0ZlU6hWF31K5trUr0KKjp5vS0I3LfNs= -----END CERTIFICATE-----Generated at Sat Sep 26 07:57:27 2026 by rpki-client