$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa File: 505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json) Hash identifier: EDqRqXs4HgpdI942Y9iA92utxTxFpIVzOyEGJNaJ+M0= Subject key identifier: 2C:B8:37:CF:9C:5B:56:C1:50:AB:33:78:B2:EC:7C:33:9F:3B:83:BC Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584DEF45E16866D7E14E78759400 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 30144 IP address blocks: 208.85.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:e1:68:66:d7:e1:4e:78:75:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=081a0eb9-e81c-405c-83dc-1eb85c67185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:11:46:50:a5:8a:82:e0:19:e4:63:28:1c: 46:14:14:ac:ad:47:05:a4:7c:4f:3c:16:9c:60:73: 7e:83:80:20:c9:17:e8:6a:f7:5f:b9:c9:9c:d8:bc: 5c:4f:50:a3:ca:6f:bb:cd:28:f5:be:a5:bd:b4:36: f4:c0:3d:83:0f:ea:db:c8:99:66:a0:2f:da:6a:88: 21:b6:b3:bb:7a:7a:b2:c7:1a:f1:84:97:18:21:11: b9:39:3d:49:11:60:4c:2a:71:52:76:3b:65:33:b0: c8:30:36:4b:ab:28:25:ee:b1:c1:22:d2:5a:75:15: e2:c7:30:e7:50:8d:05:9d:7a:98:3c:c6:59:42:16: a6:bb:2f:31:ed:a2:33:41:e5:75:3e:78:37:46:c7: da:d1:14:66:a4:94:43:dc:5e:c8:c2:95:16:b8:c7: 92:00:7c:54:c3:d8:5a:19:2a:a6:7c:50:e0:07:5a: 52:07:cb:bc:97:6a:1f:9f:4d:aa:e5:52:e0:c8:24: 49:f5:0a:89:36:54:8a:fc:4e:fe:f1:16:b2:e8:a2: 6e:0c:cf:03:ef:52:a4:83:ae:84:35:2f:54:77:48: 57:65:e6:fc:67:3f:88:94:6d:35:7e:21:21:55:d4: 8d:08:62:c1:cc:b4:56:8b:64:a3:55:f3:64:ee:cb: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B8:37:CF:9C:5B:56:C1:50:AB:33:78:B2:EC:7C:33:9F:3B:83:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv4: 208.85.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:74:97:11:eb:dd:1e:a3:29:4e:cc:b0:a0:6c:d5:25:18:e9: 73:2e:23:94:e2:7c:49:29:3e:1b:71:2b:a6:7f:90:8d:c1:f0: 6f:c3:61:20:e9:6d:42:ed:2d:51:7e:d0:4a:0d:8c:8f:cf:93: 5a:74:7e:a6:65:c1:f2:e4:c5:14:45:53:92:20:e6:46:2c:3f: 79:18:01:22:69:51:0f:98:f4:91:6b:9a:4f:5f:6a:a3:9f:ee: c8:4a:da:4e:28:10:8e:32:27:d4:b6:d7:c9:02:c6:e4:5e:0c: 5f:5a:00:54:f2:ac:ab:3a:df:02:a5:84:20:5a:5f:1c:80:46: e2:59:bc:3a:fd:59:fa:5b:ae:c5:f5:2e:c9:84:0c:06:b7:48: 51:5a:39:88:4b:53:54:eb:ee:b4:df:8e:ed:a1:bf:03:fb:50: bb:48:78:ae:f6:b6:50:1e:22:56:4e:46:32:bd:7c:07:84:93: b5:00:3a:8a:ff:fb:75:6a:4b:eb:b3:16:3a:14:c5:fb:cb:4a: 5e:56:b9:e0:e4:59:1a:92:3c:f8:9a:85:e3:04:ae:52:0d:fc: 43:ce:8c:e4:88:de:eb:18:db:db:40:b0:37:21:5d:88:76:67: b6:04:be:15:55:bd:58:83:1d:27:00:12:78:45:62:7f:dd:39: 46:3f:d2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vReFoZtfhTnh1lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk MDgxYTBlYjktZTgxYy00MDVjLTgzZGMtMWViODVjNjcxODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQYRRlClioLgGeRjKBxGFBSsrUcFpHxPPBac YHN+g4AgyRfoavdfucmc2LxcT1Cjym+7zSj1vqW9tDb0wD2DD+rbyJlmoC/aaogh trO7enqyxxrxhJcYIRG5OT1JEWBMKnFSdjtlM7DIMDZLqygl7rHBItJadRXixzDn UI0FnXqYPMZZQhamuy8x7aIzQeV1Png3Rsfa0RRmpJRD3F7IwpUWuMeSAHxUw9ha GSqmfFDgB1pSB8u8l2ofn02q5VLgyCRJ9QqJNlSK/E7+8Ray6KJuDM8D71Kkg66E NS9Ud0hXZeb8Zz+IlG01fiEhVdSNCGLBzLRWi2SjVfNk7ssFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy4N8+cW1bBUKszeLLsfDOfO4O8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl0lxHr3R6jKU7MsKBs1SUY6XMuI5TifEkpPhtxK6Z/kI3B8G/DYSDp bULtLVF+0EoNjI/Pk1p0fqZlwfLkxRRFU5Ig5kYsP3kYASJpUQ+Y9JFrmk9faqOf 7shK2k4oEI4yJ9S218kCxuReDF9aAFTyrKs63wKlhCBaXxyARuJZvDr9WfpbrsX1 LsmEDAa3SFFaOYhLU1Tr7rTfju2hvwP7ULtIeK72tlAeIlZORjK9fAeEk7UAOor/ +3VqS+uzFjoUxfvLSl5WueDkWRqSPPiaheMErlIN/EPOjOSI3usY29tAsDchXYh2 Z7YEvhVVvViDHScAEnhFYn/dOUY/0ss= -----END CERTIFICATE-----Generated at Sun May 24 06:43:41 2026 by rpki-client