$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa File: 505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json) Hash identifier: oavaz1ijMI7ysLm+Hii8X0bF7MjHXOu8FFcDoBOi1cg= Subject key identifier: 26:27:89:50:B2:5E:3B:7D:F9:27:6B:EC:F1:44:48:0A:B9:28:6D:85 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584B4E7714CBCC47DA7098DED380 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 30144 IP address blocks: 208.85.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:14:cb:cc:47:da:70:98:de:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=7faae095-8635-42b1-b92a-9d3e77195b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:5b:ea:5f:61:9f:95:3a:82:4c:a1:fa:5a: f4:d8:6f:f3:b6:e1:28:3c:37:20:12:dc:5b:ca:d2: 2f:32:0a:8b:86:dd:55:4d:b3:00:0a:69:18:0f:a7: e2:6c:2b:cb:20:2d:f3:72:8b:82:40:84:46:9c:76: b9:2a:2b:ba:af:73:90:37:86:30:e2:5b:4f:53:75: 0e:47:fe:3b:1d:2c:80:fe:59:4f:be:c9:79:65:98: 36:d2:50:20:d7:99:39:a7:9f:c7:c5:cc:1d:af:fe: 2e:18:d9:ca:a0:e2:9a:8d:f2:1e:ff:7d:1d:27:00: fb:90:9b:72:cf:75:ce:d3:65:23:69:bf:21:58:0f: db:b5:fd:b6:9d:6e:3f:06:cc:85:01:1c:54:65:a6: 42:69:88:63:43:2c:b0:7f:6a:d7:8e:15:e4:28:ff: 00:ec:d3:3e:d2:e4:55:2e:7f:c4:df:43:81:d5:10: e9:a9:20:dd:72:3e:90:7b:aa:d3:6f:92:dd:78:4a: f9:8e:a2:ba:e9:ac:52:6e:6e:27:65:5e:3c:84:d7: 04:db:2a:b8:4c:87:cf:3c:4a:51:79:b6:b6:78:94: fd:a1:8b:d3:11:10:f4:8f:dd:29:eb:1c:43:72:a2: 8e:d9:15:18:1e:bd:67:43:28:9c:aa:94:3e:5a:83: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:27:89:50:B2:5E:3B:7D:F9:27:6B:EC:F1:44:48:0A:B9:28:6D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv4: 208.85.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e7:d0:ae:f2:d7:51:2f:48:9b:19:73:60:cd:6d:61:74:34: a7:71:86:28:17:d8:06:a0:52:3b:bd:b4:9e:51:5f:e0:52:05: 69:47:18:af:1c:ad:94:8a:6b:24:c6:bd:ee:63:9d:cf:f9:25: 74:09:a0:1b:45:8a:56:41:18:ec:5a:ea:72:ac:90:97:df:be: fd:1b:05:20:9e:3e:b3:c5:1f:99:e4:f8:75:96:19:b5:dc:0f: 4a:45:74:3c:0a:0b:ce:f2:f5:3f:9a:79:b0:1d:1b:84:1c:69: da:d1:28:98:3f:5c:1e:10:be:78:0b:04:6d:03:5a:77:c0:b0: b3:7b:69:11:ad:81:39:9e:0d:db:bc:27:33:c0:49:36:7b:bc: 1d:ba:d8:76:91:06:a1:88:17:58:ba:1b:cf:18:37:b9:d8:e2: 41:e9:b1:76:3d:bc:1a:d2:59:31:ca:e2:b1:8a:80:07:e0:fa: 90:d2:66:e6:39:cf:6f:05:1c:4a:db:4e:4a:26:72:33:86:4c: c4:01:32:57:11:69:18:2a:1c:af:3d:46:05:1b:96:0c:e9:1a: 09:f0:d9:80:df:d3:a6:62:32:19:e6:ea:e9:e6:21:9a:47:27: 46:b0:71:f9:8b:aa:b4:6d:8d:8e:a1:9f:3d:d5:b0:cb:23:be: 58:08:7f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxTLzEfacJje04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk N2ZhYWUwOTUtODYzNS00MmIxLWI5MmEtOWQzZTc3MTk1YjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9db6l9hn5U6gkyh+lr02G/ztuEoPDcgEtxb ytIvMgqLht1VTbMACmkYD6fibCvLIC3zcouCQIRGnHa5Kiu6r3OQN4Yw4ltPU3UO R/47HSyA/llPvsl5ZZg20lAg15k5p5/Hxcwdr/4uGNnKoOKajfIe/30dJwD7kJty z3XO02Ujab8hWA/btf22nW4/BsyFARxUZaZCaYhjQyywf2rXjhXkKP8A7NM+0uRV Ln/E30OB1RDpqSDdcj6Qe6rTb5LdeEr5jqK66axSbm4nZV48hNcE2yq4TIfPPEpR eba2eJT9oYvTERD0j90p6xxDcqKO2RUYHr1nQyicqpQ+WoNP/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYniVCyXjt9+Sdr7PFESAq5KG2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXn0K7y11EvSJsZc2DNbWF0NKdxhigX2AagUju9tJ5RX+BSBWlHGK8c rZSKayTGve5jnc/5JXQJoBtFilZBGOxa6nKskJffvv0bBSCePrPFH5nk+HWWGbXc D0pFdDwKC87y9T+aebAdG4QcadrRKJg/XB4QvngLBG0DWnfAsLN7aRGtgTmeDdu8 JzPASTZ7vB262HaRBqGIF1i6G88YN7nY4kHpsXY9vBrSWTHK4rGKgAfg+pDSZuY5 z28FHErbTkomcjOGTMQBMlcRaRgqHK89RgUblgzpGgnw2YDf06ZiMhnm6unmIZpH J0awcfmLqrRtjY6hnz3VsMsjvlgIf5w= -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:11 2025 by rpki-client