$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa File: 9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa (raw, json) Hash identifier: F3PMYNRX+Y3pw7kQuCH/czk1FN3yqDv4Kyx2o6Wqdcs= Subject key identifier: 80:2C:05:B9:CB:76:60:3A:70:95:3C:70:37:C0:01:68:A2:9E:0C:7E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584AFEE6A9A7E17538C82DA67F80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 26407 IP address blocks: 74.85.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a9:a7:e1:75:38:c8:2d:a6:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=1fbec388-16d1-4ed8-9fc0-5727697051c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:7f:82:f3:26:97:30:cc:03:84:35:2f:d8: a3:74:b5:93:c5:c2:c8:7a:fb:e6:42:b2:d7:91:77: 99:02:05:bd:c5:87:56:91:3c:ad:79:bd:35:f5:4d: be:96:88:47:d1:2a:73:e2:72:c8:2f:ac:f9:f3:fe: 59:89:9f:98:75:6c:11:ad:a7:f4:52:c4:31:97:b4: c1:4b:cc:49:28:74:0f:7e:7e:f6:c7:58:b9:e5:30: a7:18:57:a1:70:a3:af:5f:4d:78:5b:90:b5:13:31: 1c:ae:d8:7b:58:d9:a3:f9:09:42:6c:7c:5b:cc:ee: 36:fb:35:a2:49:b1:a6:d2:63:6d:86:d9:3e:65:c0: 43:0c:1f:10:6e:9e:f7:bc:d6:4d:c2:6f:e0:ae:6b: eb:af:cb:bb:1e:1c:5e:65:cc:e6:04:b9:03:49:c9: 74:66:40:d7:0e:27:d4:1c:87:35:9f:90:55:78:31: 2f:df:da:77:66:f3:98:5f:a0:af:e7:fa:73:46:22: 33:91:fe:f7:a2:8d:10:e5:88:ba:19:a7:a8:52:b9: cf:21:d3:76:03:ab:0c:50:51:24:aa:98:1e:a2:81: ed:b4:2c:d3:9e:9c:1f:d4:0a:06:28:8c:88:42:f6: 19:48:9b:3f:7f:67:73:5d:89:9f:08:67:d3:03:cf: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2C:05:B9:CB:76:60:3A:70:95:3C:70:37:C0:01:68:A2:9E:0C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:91:b6:e9:5e:c2:2b:e5:3b:ae:5b:cd:c9:bf:60:cc:14:57: 72:d2:f7:2f:11:c9:e6:f8:0a:a2:d3:41:c2:0e:02:79:8a:09: 6a:b4:cf:98:06:c8:df:06:e7:ed:6c:63:27:2d:48:6a:09:db: 69:51:07:df:11:a4:97:d9:ea:d2:6f:2d:50:69:29:e4:6d:c6: 18:c0:2c:0c:1d:a2:7d:73:27:57:ed:3b:fa:6a:cd:ec:1e:91: 93:cf:b4:33:69:53:bd:09:bb:b3:5b:62:ce:ff:b5:f6:47:72: e7:8c:24:d6:c6:18:35:7d:82:de:34:62:5f:98:dc:94:71:24: 7c:61:32:80:48:b4:e5:a8:5b:92:69:d7:97:4c:2e:eb:a0:2d: 59:3a:92:f7:cd:47:c2:11:26:51:11:49:60:8f:7c:c3:e0:64: a4:fc:fb:96:44:2a:22:3c:c0:df:61:ca:0b:a0:be:36:d1:6f: 3b:30:34:7b:46:8d:0e:22:08:54:c3:a8:de:0b:ad:c1:2c:00: f6:28:a2:f2:3b:fd:b1:87:49:2b:f0:1b:48:ea:e0:e0:92:20: d5:dd:de:51:64:d3:53:97:03:f1:db:02:f3:7d:68:fb:12:11: 7f:a1:42:57:27:d1:17:5b:c9:18:b4:5c:e2:50:54:49:e9:18: 7d:65:80:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qmn4XU4yC2mf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MWZiZWMzODgtMTZkMS00ZWQ4LTlmYzAtNTcyNzY5NzA1MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRl/gvMmlzDMA4Q1L9ijdLWTxcLIevvmQrLX kXeZAgW9xYdWkTyteb019U2+lohH0Spz4nLIL6z58/5ZiZ+YdWwRraf0UsQxl7TB S8xJKHQPfn72x1i55TCnGFehcKOvX014W5C1EzEcrth7WNmj+QlCbHxbzO42+zWi SbGm0mNthtk+ZcBDDB8Qbp73vNZNwm/grmvrr8u7HhxeZczmBLkDScl0ZkDXDifU HIc1n5BVeDEv39p3ZvOYX6Cv5/pzRiIzkf73oo0Q5Yi6GaeoUrnPIdN2A6sMUFEk qpgeooHttCzTnpwf1AoGKIyIQvYZSJs/f2dzXYmfCGfTA88OFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAsBbnLdmA6cJU8cDfAAWiingx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOWRmYTFjYmMtZjIyOC0z YTE4LWE4YzYtMmI4YTcxNTMxMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCRtulewivlO65bzcm/YMwUV3LS9y8Ryeb4CqLTQcIOAnmKCWq0z5gG yN8G5+1sYyctSGoJ22lRB98RpJfZ6tJvLVBpKeRtxhjALAwdon1zJ1ftO/pqzewe kZPPtDNpU70Ju7NbYs7/tfZHcueMJNbGGDV9gt40Yl+Y3JRxJHxhMoBItOWoW5Jp 15dMLuugLVk6kvfNR8IRJlERSWCPfMPgZKT8+5ZEKiI8wN9hygugvjbRbzswNHtG jQ4iCFTDqN4LrcEsAPYoovI7/bGHSSvwG0jq4OCSINXd3lFk01OXA/HbAvN9aPsS EX+hQlcn0RdbyRi0XOJQVEnpGH1lgBY= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:47 2025 by rpki-client