$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa File: 498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa (raw, json) Hash identifier: h0gEgguhSvaJGr0u5Gby1bLC18SWBk8DVLA6wxYyPps= Subject key identifier: 32:C1:99:81:DC:17:1A:D3:9E:92:DF:BA:1F:09:16:AA:EC:F0:CA:1F Certificate issuer: /CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Certificate serial: 010D0C9F4328584DE346AB1C7E9864D909E43180 Authority key identifier: 73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa Signing time: Tue 19 May 2026 17:52:27 +0000 ROA not before: Tue 19 May 2026 17:52:27 +0000 ROA not after: Mon 17 Aug 2026 17:52:27 +0000 asID: 18849 IP address blocks: 74.85.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e3:46:ab:1c:7e:98:64:d9:09:e4:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Validity Not Before: May 19 17:52:27 2026 GMT Not After : Aug 17 17:52:27 2026 GMT Subject: CN=8106e741-9a3b-4cdd-9bb2-875f431a7bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:79:c5:a0:6d:c5:6e:e2:45:fe:d8:aa:e0: 41:3e:00:94:52:46:03:71:13:ca:d0:29:3b:a5:65: ac:38:71:a9:4b:bf:32:9e:58:8e:08:8f:f4:ed:f0: 1a:bb:d6:ad:c1:b9:f6:75:fc:f1:5b:a0:d2:ce:58: 06:ac:94:c8:1b:94:17:81:cc:34:b9:50:13:07:2e: 72:2c:bd:32:58:be:52:88:4b:f6:14:fa:80:c1:8e: 1f:11:90:77:34:03:0d:6f:39:9c:9a:c5:b6:42:9c: 85:9f:49:08:a8:a8:6e:12:87:a8:93:46:c0:ac:7e: 94:19:6f:01:83:12:37:73:1b:89:02:93:2a:8a:53: 75:be:70:e9:15:73:74:86:11:8f:b6:48:82:52:e9: b7:14:59:47:ab:38:5c:c9:19:05:f3:b3:35:85:79: d8:3b:95:dd:42:d1:65:00:c6:09:1e:49:4f:e2:ea: 0d:2b:6e:92:13:20:38:b4:d7:32:76:ab:34:10:95: c6:32:b8:f4:7c:8a:6d:ca:f4:0f:67:4a:b5:08:2d: 68:5a:a6:f3:3d:80:57:db:0d:87:75:7a:b7:6f:cb: 0b:36:7c:ee:4f:61:6d:e7:ff:1f:8b:b1:22:e5:2d: ef:b1:62:37:2c:45:68:f1:63:ea:15:e9:f0:d4:d2: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:99:81:DC:17:1A:D3:9E:92:DF:BA:1F:09:16:AA:EC:F0:CA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.crl X509v3 Authority Key Identifier: keyid:73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer sbgp-ipAddrBlock: critical IPv4: 74.85.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f1:ce:92:cb:92:d2:ca:0e:8f:cf:0f:ac:a3:f2:f6:3e:af: 44:c9:73:c8:b1:52:de:97:c1:cb:8d:ff:36:be:d9:32:68:00: 4f:af:5b:3a:98:4c:3c:0b:42:ce:c2:03:07:f2:f4:9b:4e:1d: 90:3d:31:44:85:e6:82:3a:52:7b:13:d7:d1:92:b8:96:3d:98: 00:6b:32:48:90:86:0f:0a:4d:35:40:35:71:f5:b0:60:8f:bb: 26:08:be:d0:ae:9a:8f:65:b1:f1:26:f6:3a:3b:d9:45:a9:5d: 61:c1:6f:35:ee:6b:87:13:62:5e:20:2f:e2:bc:8a:9c:59:3b: b6:7a:e8:99:99:8d:8f:d4:e6:ee:88:a9:ff:b6:28:c9:38:19: 96:73:73:c9:e7:35:6a:6b:96:5a:e4:07:1f:e6:68:90:04:96: 41:31:f3:55:59:63:32:ed:fb:ea:09:0e:01:14:8d:f6:a7:1c: 07:c5:4c:b6:df:ad:39:97:f3:66:0d:8f:20:0b:8f:b6:58:30: 18:58:9f:e7:a3:b6:5d:1e:c0:67:38:a5:b3:37:e6:85:12:f9: 0b:c4:a9:f4:47:b2:3c:07:e2:3c:24:5f:8f:a5:ce:4e:80:5e: 87:35:7c:e3:9f:e3:6d:9b:97:8e:4c:80:e8:18:fb:ef:09:2e: f3:50:89:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3jRqscfphk2QnkMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA1YTk4OGQtN2I3NS00ZWMwLTg0ZmMtNWNkMmY1ZWMy YzIwMB4XDTI2MDUxOTE3NTIyN1oXDTI2MDgxNzE3NTIyN1owLzEtMCsGA1UEAxMk ODEwNmU3NDEtOWEzYi00Y2RkLTliYjItODc1ZjQzMWE3YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrp5xaBtxW7iRf7YquBBPgCUUkYDcRPK0Ck7 pWWsOHGpS78ynliOCI/07fAau9atwbn2dfzxW6DSzlgGrJTIG5QXgcw0uVATBy5y LL0yWL5SiEv2FPqAwY4fEZB3NAMNbzmcmsW2QpyFn0kIqKhuEoeok0bArH6UGW8B gxI3cxuJApMqilN1vnDpFXN0hhGPtkiCUum3FFlHqzhcyRkF87M1hXnYO5XdQtFl AMYJHklP4uoNK26SEyA4tNcydqs0EJXGMrj0fIptyvQPZ0q1CC1oWqbzPYBX2w2H dXq3b8sLNnzuT2Ft5/8fi7Ei5S3vsWI3LEVo8WPqFenw1NK4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLBmYHcFxrTnpLfuh8JFqrs8MofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMDVh OTg4ZC03Yjc1LTRlYzAtODRmYy01Y2QyZjVlYzJjMjAvNDk4YmYwMWYtOGY4YS0z OTgwLWJlZTYtYTExNDBjNDBmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzA1YTk4OGQtN2I3NS00ZWMwLTg0 ZmMtNWNkMmY1ZWMyYzIwLzMwNWE5ODhkLTdiNzUtNGVjMC04NGZjLTVjZDJmNWVj MmMyMC5jcmwwHwYDVR0jBBgwFoAUc1MUOZG20CRvZ7KLhL6/pCOQfkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zMDVhOTg4ZC03Yjc1LTRlYzAtODRmYy01Y2Qy ZjVlYzJjMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfxzpLLktLKDo/PD6yj8vY+r0TJc8ixUt6XwcuN/za+2TJoAE+vWzqY TDwLQs7CAwfy9JtOHZA9MUSF5oI6UnsT19GSuJY9mABrMkiQhg8KTTVANXH1sGCP uyYIvtCumo9lsfEm9jo72UWpXWHBbzXua4cTYl4gL+K8ipxZO7Z66JmZjY/U5u6I qf+2KMk4GZZzc8nnNWprllrkBx/maJAElkEx81VZYzLt++oJDgEUjfanHAfFTLbf rTmX82YNjyALj7ZYMBhYn+ejtl0ewGc4pbM35oUS+QvEqfRHsjwH4jwkX4+lzk6A Xoc1fOOf422bl45MgOgY++8JLvNQiTw= -----END CERTIFICATE-----Generated at Sat Jun 6 10:47:55 2026 by rpki-client