$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa File: 505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json) Hash identifier: 9BTJl1HTIGxb6NcuympXxMWeXiN6HVbXVKZZODzTKno= Subject key identifier: FA:0B:54:97:B5:4C:C4:28:E7:75:56:66:5D:CC:7F:B7:BD:37:BB:D1 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584F4976045BE733BFD7AF81A580 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30144 IP address blocks: 208.85.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:04:5b:e7:33:bf:d7:af:81:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd5afb6b-3476-4391-ab8a-df435203d6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:52:73:5a:98:60:36:bc:fb:8d:e7:a8:6f: 9d:db:11:6a:8c:fa:b6:e0:77:51:79:ae:db:2e:e9: 55:30:b3:ef:40:87:70:ed:8f:e0:7e:9c:e5:3d:cb: 29:66:fd:0a:48:ec:45:b9:57:88:76:6a:ec:18:9d: 79:29:32:aa:92:8e:75:f0:61:cd:0f:a6:86:b9:df: 5d:68:c8:84:fc:75:95:68:f3:c2:17:a0:80:e8:93: f5:99:b1:4d:e9:09:1c:00:01:11:66:3c:b0:fe:ac: 63:de:49:38:0e:9d:8e:6e:27:c5:4e:3b:cb:a1:31: d0:05:cb:d5:7d:d9:77:2a:20:22:4f:f4:d8:da:a1: 2c:ef:75:d1:b0:c8:61:0d:51:4f:ae:df:76:19:f5: 4d:35:a5:12:90:fd:83:67:3d:2a:3e:aa:6c:77:fd: 22:bf:77:57:72:48:06:27:72:98:ba:2b:61:18:36: 3e:89:a4:0b:e0:4a:cb:3a:e1:be:b3:03:d9:8a:06: 29:40:26:50:f3:5c:e6:ed:4c:5e:34:f7:7c:3c:73: 23:60:ad:a9:9e:de:92:c8:7f:2d:4a:4d:32:7c:6b: e3:f0:da:f2:7d:59:88:61:14:fb:56:fd:08:0a:c0: df:f2:5a:36:1a:49:28:60:52:e8:23:6a:b3:ec:9c: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0B:54:97:B5:4C:C4:28:E7:75:56:66:5D:CC:7F:B7:BD:37:BB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv4: 208.85.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ce:d4:05:d5:41:4f:ac:84:e4:af:8b:24:ec:c1:1c:63:dc: c0:c5:b1:b5:9a:8c:58:6e:8a:ab:c7:e2:e0:58:76:06:86:8f: ab:c7:35:f8:8e:10:59:6b:f4:21:9b:8d:1c:69:52:7a:30:31: 5b:57:e8:c7:74:7e:3e:b7:60:b7:de:1c:64:9a:54:f7:2e:c4: 53:11:02:09:fd:63:06:a5:f9:64:2b:88:5f:1b:7f:8b:18:b7: 72:84:6d:70:68:6f:73:f2:dd:60:78:b4:32:b0:e1:ab:3b:e4: 08:97:a6:99:76:6d:07:e4:b9:25:e0:3a:34:e9:2a:dc:1a:dc: 41:b6:57:0b:a9:d2:b6:0f:38:13:0c:fa:e9:ad:c6:90:41:ff: a9:09:9e:ac:98:a1:c8:a9:c7:11:92:75:c2:80:76:2b:c6:e2: 69:bf:df:91:e8:92:d1:24:3a:33:a6:c8:91:e1:f1:c1:a7:ce: b3:c5:e3:bd:37:e4:12:63:76:73:e3:a9:ef:ef:69:83:af:aa: 54:cf:86:b3:48:37:20:1e:5b:f1:77:24:8d:c4:ac:d6:81:7f: 72:0d:34:1e:ef:68:12:07:ac:df:d3:31:51:f8:ad:2f:47:fb: d2:88:bc:f5:6a:13:92:2f:f8:7f:e5:7b:2c:17:c3:74:b3:4a: a7:46:8d:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgRb5zO/16+BpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ1YWZiNmItMzQ3Ni00MzkxLWFiOGEtZGY0MzUyMDNkNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xxSc1qYYDa8+43nqG+d2xFqjPq24HdRea7b LulVMLPvQIdw7Y/gfpzlPcspZv0KSOxFuVeIdmrsGJ15KTKqko518GHND6aGud9d aMiE/HWVaPPCF6CA6JP1mbFN6QkcAAERZjyw/qxj3kk4Dp2ObifFTjvLoTHQBcvV fdl3KiAiT/TY2qEs73XRsMhhDVFPrt92GfVNNaUSkP2DZz0qPqpsd/0iv3dXckgG J3KYuithGDY+iaQL4ErLOuG+swPZigYpQCZQ81zm7UxeNPd8PHMjYK2pnt6SyH8t Sk0yfGvj8NryfVmIYRT7Vv0ICsDf8lo2GkkoYFLoI2qz7JxLOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoLVJe1TMQo53VWZl3Mf7e9N7vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/O1AXVQU+shOSviyTswRxj3MDFsbWajFhuiqvH4uBYdgaGj6vHNfiO EFlr9CGbjRxpUnowMVtX6Md0fj63YLfeHGSaVPcuxFMRAgn9Ywal+WQriF8bf4sY t3KEbXBob3Py3WB4tDKw4as75AiXppl2bQfkuSXgOjTpKtwa3EG2Vwup0rYPOBMM +umtxpBB/6kJnqyYocipxxGSdcKAdivG4mm/35HoktEkOjOmyJHh8cGnzrPF4703 5BJjdnPjqe/vaYOvqlTPhrNINyAeW/F3JI3ErNaBf3INNB7vaBIHrN/TMVH4rS9H +9KIvPVqE5Iv+H/leywXw3SzSqdGjeY= -----END CERTIFICATE-----Generated at Fri Sep 25 16:17:02 2026 by rpki-client