$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa File: 505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json) Hash identifier: ibK6cgfv1AVWmr3Qt1IKCCraWjuCZIHXfsR5tbZrSuE= Subject key identifier: C6:4D:0B:36:17:06:83:52:83:C7:B3:34:B0:34:D5:DF:29:CF:DE:66 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584D0EA7BD4678CE5084793E9500 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 30144 IP address blocks: 208.85.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:bd:46:78:ce:50:84:79:3e:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=eaa68ee9-3f31-46cc-abb8-5fec3255e862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f6:7e:95:5d:57:e5:c7:7d:ce:0c:51:c6:2f: ff:2a:7b:6e:37:4f:c1:e4:19:06:5e:3c:7e:20:93: fa:8e:86:47:88:61:84:39:93:f3:7c:d0:fe:b9:b0: c0:a5:67:a7:01:f3:35:78:ee:87:f8:80:16:07:02: 9a:08:73:03:61:6b:78:7d:51:95:21:1f:95:79:2b: 6b:84:9d:70:f8:5c:2d:61:5a:fd:75:d4:e4:7d:05: 2e:ae:90:c5:08:c3:6f:1d:e9:7e:2f:b2:3e:af:c9: 0b:ef:e2:96:59:c7:41:29:a4:cd:e7:f2:6d:71:82: c9:32:c8:e8:44:32:83:2d:26:a7:58:de:d4:e0:53: ab:56:12:f3:d1:53:f7:f5:4b:b2:c7:1e:86:ff:e9: 09:2e:83:3b:cf:04:08:38:86:4b:06:54:b5:19:71: 81:a7:a6:69:83:fe:99:f1:a8:0b:70:2f:7c:75:cc: a2:5b:6a:28:08:86:6b:fc:57:8a:0c:2b:fe:d5:b6: fd:b8:b7:4e:72:fa:73:e4:a5:e7:0c:31:1f:85:ee: 2f:8e:c4:e9:1d:04:dd:9d:8a:b8:ab:58:f7:5e:e9: 28:1f:70:45:0f:68:cb:46:c4:f5:d8:c6:e5:62:3d: b0:0e:9e:60:5c:0d:54:2d:48:03:89:89:aa:a6:84: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:0B:36:17:06:83:52:83:C7:B3:34:B0:34:D5:DF:29:CF:DE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv4: 208.85.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0e:d2:9c:fd:d2:f3:af:96:3a:11:a7:83:13:8b:38:34:bc: 8c:89:84:75:a8:cb:75:0d:93:8d:20:7b:87:56:4c:85:ae:b5: 88:3a:3e:fc:17:a4:11:ee:11:02:0c:17:61:09:9b:34:7a:e9: bb:d8:d9:22:a0:f8:f7:b6:ba:63:39:c2:49:4e:bb:0b:e2:07: d0:b6:5d:3d:29:60:36:06:18:d4:68:e5:45:e1:19:9b:fa:79: 95:48:3a:16:b9:89:4d:6d:94:3f:7c:a8:04:2c:e6:78:a4:b4: 37:77:54:6d:9f:68:6e:8c:a2:b7:ed:aa:ad:54:a4:ee:ea:93: b1:1f:5e:61:cc:98:85:23:65:d1:22:65:49:a4:8f:13:0f:21: 03:e0:16:ea:29:bb:ab:92:31:91:02:c4:ab:cf:9f:59:fb:2b: 97:b0:10:c4:88:84:b7:98:47:b3:10:d0:ee:3b:1f:b3:2c:1b: e4:10:7d:3a:a9:29:2e:80:43:d0:5d:7d:89:8c:63:1e:3d:2c: 62:1a:bb:00:e9:f9:15:8d:fa:97:ed:e0:a1:8c:6c:20:eb:49: 17:98:7c:1d:0b:8f:2d:62:ed:75:5b:9c:b1:13:c0:6c:a3:39: 1d:46:08:09:1b:47:7e:65:c6:8a:b0:5c:86:ad:59:a1:28:e2: 70:c9:70:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op71GeM5QhHk+lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZWFhNjhlZTktM2YzMS00NmNjLWFiYjgtNWZlYzMyNTVlODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvZ+lV1X5cd9zgxRxi//KntuN0/B5BkGXjx+ IJP6joZHiGGEOZPzfND+ubDApWenAfM1eO6H+IAWBwKaCHMDYWt4fVGVIR+VeStr hJ1w+FwtYVr9ddTkfQUurpDFCMNvHel+L7I+r8kL7+KWWcdBKaTN5/JtcYLJMsjo RDKDLSanWN7U4FOrVhLz0VP39Uuyxx6G/+kJLoM7zwQIOIZLBlS1GXGBp6Zpg/6Z 8agLcC98dcyiW2ooCIZr/FeKDCv+1bb9uLdOcvpz5KXnDDEfhe4vjsTpHQTdnYq4 q1j3XukoH3BFD2jLRsT12MblYj2wDp5gXA1ULUgDiYmqpoQMVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZNCzYXBoNSg8ezNLA01d8pz95mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIO0pz90vOvljoRp4MTizg0vIyJhHWoy3UNk40ge4dWTIWutYg6PvwX pBHuEQIMF2EJmzR66bvY2SKg+Pe2umM5wklOuwviB9C2XT0pYDYGGNRo5UXhGZv6 eZVIOha5iU1tlD98qAQs5niktDd3VG2faG6Morftqq1UpO7qk7EfXmHMmIUjZdEi ZUmkjxMPIQPgFuopu6uSMZECxKvPn1n7K5ewEMSIhLeYR7MQ0O47H7MsG+QQfTqp KS6AQ9BdfYmMYx49LGIauwDp+RWN+pft4KGMbCDrSReYfB0Ljy1i7XVbnLETwGyj OR1GCAkbR35lxoqwXIatWaEo4nDJcIQ= -----END CERTIFICATE-----Generated at Sat Mar 28 14:58:12 2026 by rpki-client