$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa File: 14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa (raw, json) Hash identifier: VPUgD/UvGW19WKXZIQsSzsY8FlbT8FQ7goB519giq38= Subject key identifier: C0:B7:79:B4:44:B9:71:7E:13:1B:8C:91:B2:1F:44:60:BA:EE:F4:F2 Certificate issuer: /CN=0412f035-b376-4807-a8ac-e98680ab0e36 Certificate serial: 010D0C9F4328584B0746C19C44520C1B8E0E2900 Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 6142 IP address blocks: 74.85.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c1:9c:44:52:0c:1b:8e:0e:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=33791ebf-fa9f-4dd6-b7d3-cef6cdf8af31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ce:c3:3c:f3:2c:91:38:2c:42:cd:ff:db:98: 20:32:7f:4f:11:db:86:01:9c:58:ed:1f:00:11:fc: e6:b2:e7:73:0e:d3:0f:be:61:ae:bc:76:5f:31:17: 72:53:01:58:85:5c:b8:ff:3d:ab:aa:83:5b:10:f3: ca:99:53:eb:15:00:0d:5c:3c:4f:c7:7f:23:76:30: cb:cd:b2:27:fe:36:ec:54:f1:50:da:37:78:d7:95: 7e:3e:61:de:c1:f2:9a:4e:20:9c:5d:90:65:3b:b5: 9b:bd:4a:bb:8f:89:65:5f:a0:98:cb:6e:25:9f:e9: e9:00:b6:df:f5:41:5d:c1:cc:14:1e:9f:71:f0:cb: 89:71:f7:77:4d:89:4d:49:09:2a:94:79:73:c2:43: 16:e6:48:86:a8:f7:16:1f:45:5a:a7:c6:e3:a0:bd: 85:f3:a3:f4:f4:1b:15:a7:41:32:4f:9f:65:5d:50: 43:42:96:66:d6:1c:1d:3c:28:19:e6:9f:48:78:1d: 88:bd:35:48:28:ff:0e:c8:67:e2:08:c3:51:c2:bc: c6:93:77:ce:46:e3:6f:7b:b7:a9:e1:b5:da:08:e4: a9:fa:a9:b8:50:f2:18:1e:63:b8:ef:5e:b1:50:8a: d3:87:7a:6b:fe:04:5c:02:49:55:9e:cf:ce:ed:e2: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B7:79:B4:44:B9:71:7E:13:1B:8C:91:B2:1F:44:60:BA:EE:F4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl X509v3 Authority Key Identifier: keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer sbgp-ipAddrBlock: critical IPv4: 74.85.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fd:0d:33:8b:c8:50:f0:6d:f3:76:33:9e:38:01:d3:00:d5: fa:fd:61:d1:06:99:0e:8d:6f:a8:47:5c:e8:e7:df:31:aa:ee: df:20:0f:ad:84:df:c2:11:f8:f0:d9:7a:8f:59:8a:b8:05:1d: 2f:ce:2d:7c:fc:60:2d:f1:a3:e2:26:a0:e9:d2:d6:a7:24:75: 7c:2f:10:fe:62:f6:0a:2a:ec:e6:2e:6f:7e:e8:06:4f:f9:d0: 29:6e:45:8b:ca:4d:af:c1:7c:0b:57:78:5c:b8:06:fe:dd:ae: d9:77:26:32:81:50:9a:6e:31:fa:74:b1:bb:39:ed:3e:ce:9c: 14:e0:9e:bf:a8:e5:e0:bd:ac:14:d8:32:e9:09:e3:f5:d0:bd: a1:a2:0c:bf:a9:cb:30:fe:0e:46:2b:a8:83:c7:a3:22:e7:88: 9b:ef:85:ae:3e:08:2b:de:b5:c7:8a:b4:67:66:f8:0e:b4:95: 44:e8:44:d9:f8:fa:75:fa:9d:0e:e7:b3:cb:0b:43:5a:98:64: e7:ad:fc:79:43:c8:b5:43:55:22:21:ac:3e:87:0f:4e:db:cb: bc:76:69:c8:a3:04:db:a5:ca:31:9f:90:94:46:df:d4:17:c0: ad:dd:69:c9:3d:6d:f7:f3:93:60:a3:1c:ae:59:0d:8a:6c:c9: e9:da:b2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsGcRFIMG44OKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQxMmYwMzUtYjM3Ni00ODA3LWE4YWMtZTk4NjgwYWIw ZTM2MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzM3OTFlYmYtZmE5Zi00ZGQ2LWI3ZDMtY2VmNmNkZjhhZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic7DPPMskTgsQs3/25ggMn9PEduGAZxY7R8A EfzmsudzDtMPvmGuvHZfMRdyUwFYhVy4/z2rqoNbEPPKmVPrFQANXDxPx38jdjDL zbIn/jbsVPFQ2jd415V+PmHewfKaTiCcXZBlO7WbvUq7j4llX6CYy24ln+npALbf 9UFdwcwUHp9x8MuJcfd3TYlNSQkqlHlzwkMW5kiGqPcWH0Vap8bjoL2F86P09BsV p0EyT59lXVBDQpZm1hwdPCgZ5p9IeB2IvTVIKP8OyGfiCMNRwrzGk3fORuNve7ep 4bXaCOSp+qm4UPIYHmO4716xUIrTh3pr/gRcAklVns/O7eJQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC3ebREuXF+ExuMkbIfRGC67vTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEy ZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2ODBhYjBlMzYvMTRlNzk5NDgtYzFhMS0z Nzc1LTg3OTktYWU4ZDI0YTNjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQxMmYwMzUtYjM3Ni00ODA3LWE4 YWMtZTk4NjgwYWIwZTM2LzA0MTJmMDM1LWIzNzYtNDgwNy1hOGFjLWU5ODY4MGFi MGUzNi5jcmwwHwYDVR0jBBgwFoAUiXGp/4PgRhbYPlvneCsT+IQp8HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDEyZjAzNS1iMzc2LTQ4MDctYThhYy1lOTg2 ODBhYjBlMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb9DTOLyFDwbfN2M544AdMA1fr9YdEGmQ6Nb6hHXOjn3zGq7t8gD62E 38IR+PDZeo9ZirgFHS/OLXz8YC3xo+ImoOnS1qckdXwvEP5i9goq7OYub37oBk/5 0CluRYvKTa/BfAtXeFy4Bv7drtl3JjKBUJpuMfp0sbs57T7OnBTgnr+o5eC9rBTY MukJ4/XQvaGiDL+pyzD+DkYrqIPHoyLniJvvha4+CCvetceKtGdm+A60lUToRNn4 +nX6nQ7ns8sLQ1qYZOet/HlDyLVDVSIhrD6HD07by7x2acijBNulyjGfkJRG39QX wK3dack9bffzk2CjHK5ZDYpsyenaskE= -----END CERTIFICATE-----Generated at Sat Oct 11 03:43:58 2025 by rpki-client