$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3912e388-c170-3209-92b1-78dd868f1f7a.roa File: 3912e388-c170-3209-92b1-78dd868f1f7a.roa (raw, json) Hash identifier: qpyTCd/Jvyda3PqN1jJNR83wTBDn3yZY3TYuFK1uzcY= Subject key identifier: 77:20:C0:6A:30:3E:A0:BD:8C:FE:ED:0A:00:EE:63:4E:37:D9:12:7F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA23360BE00D5F6C0F39F80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3912e388-c170-3209-92b1-78dd868f1f7a.roa Signing time: Sun 19 Jul 2026 18:24:18 +0000 ROA not before: Sun 19 Jul 2026 18:24:18 +0000 ROA not after: Sat 17 Oct 2026 18:24:18 +0000 asID: 26407 IP address blocks: 74.85.90.0/23 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:33:60:be:00:d5:f6:c0:f3:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:18 2026 GMT Not After : Oct 17 18:24:18 2026 GMT Subject: CN=cedb4371-654a-49e9-9991-e7527173480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:a3:5d:a4:5a:be:5b:4e:12:d2:cb:c8:ba: 40:4a:6a:60:cd:e1:ff:21:45:93:0a:51:4c:96:1f: 52:7b:78:f2:f5:8f:4b:86:86:b2:ab:fc:f7:16:a1: 92:5d:4d:d5:bf:85:9c:fb:bc:e4:3d:36:41:fe:ec: e8:22:6f:d6:64:3a:59:68:a7:e6:67:e4:88:4c:eb: 3c:9b:2e:c5:b7:e9:7a:65:2a:a3:65:ef:0c:c6:cc: 90:3a:70:70:42:1a:02:2b:01:10:a1:53:e1:dd:99: c2:54:53:13:73:f2:db:9b:e9:eb:52:9b:04:d3:6e: fc:28:56:6c:d2:4b:39:aa:3e:d1:f6:29:c1:47:b4: fe:46:2f:ef:2c:2b:3b:2b:83:c3:b6:00:23:b1:93: d0:92:ae:b5:db:39:16:fc:bc:e9:78:f2:80:63:e9: 30:b8:59:82:a8:20:57:36:ed:62:17:59:0e:dc:92: 9d:c0:2c:d6:f3:a5:31:4c:6f:58:70:07:8a:26:ef: 7a:2a:9f:45:88:06:ad:28:46:33:89:07:98:99:ed: 08:77:f2:93:e5:31:95:d3:73:2c:90:e7:3a:dd:76: 3f:75:13:c0:1f:f6:67:d6:c3:c8:15:63:0a:fd:b1: 76:78:d0:c6:ca:28:64:3d:cf:82:1c:10:c6:2e:48: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:C0:6A:30:3E:A0:BD:8C:FE:ED:0A:00:EE:63:4E:37:D9:12:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3912e388-c170-3209-92b1-78dd868f1f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4e:3f:56:de:ce:94:54:06:fa:14:a6:c5:27:e6:7b:4b:49: 13:ad:8b:28:21:02:3f:40:55:d4:34:b9:18:4e:75:f0:75:8e: 2c:32:dd:95:8d:a7:c8:1e:bf:09:4d:30:c6:37:2e:d8:26:79: 41:e0:ce:8a:5c:dd:37:e7:aa:62:5a:0d:27:90:71:cf:23:68: 6a:69:47:f7:90:16:6e:81:5f:45:f3:fc:d9:48:f2:f6:be:69: c1:b2:e6:1a:34:cd:d1:47:15:d9:f8:b7:fc:ac:c8:be:c2:61: fe:7e:aa:4f:c5:f2:60:4e:38:27:0a:87:33:fb:c5:e9:c1:80: ea:b0:1a:4e:38:36:80:f0:15:c6:0d:4f:f4:18:fb:4b:d9:ae: 2c:f4:b3:79:51:73:61:33:84:e8:ce:05:27:17:df:30:8a:13: 36:ee:60:b0:de:ed:53:c2:15:0d:8b:ab:e0:4f:d4:8d:29:b0: 86:54:e3:37:1c:8f:63:1e:e3:91:30:0a:67:69:23:61:f5:ac: b9:a9:7a:d0:26:88:fb:82:8c:96:61:22:46:91:10:b6:2b:f0: 85:fb:c9:8b:40:f3:98:66:a4:65:8e:72:39:6d:df:2b:b0:ab: c3:ab:dd:f0:91:86:75:13:c4:5a:1d:c2:b6:57:a2:aa:24:e9: 07:93:ee:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojNgvgDV9sDzn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxOFoXDTI2MTAxNzE4MjQxOFowLzEtMCsGA1UEAxMk Y2VkYjQzNzEtNjU0YS00OWU5LTk5OTEtZTc1MjcxNzM0ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg6jXaRavltOEtLLyLpASmpgzeH/IUWTClFM lh9Se3jy9Y9Lhoayq/z3FqGSXU3Vv4Wc+7zkPTZB/uzoIm/WZDpZaKfmZ+SITOs8 my7Ft+l6ZSqjZe8MxsyQOnBwQhoCKwEQoVPh3ZnCVFMTc/Lbm+nrUpsE0278KFZs 0ks5qj7R9inBR7T+Ri/vLCs7K4PDtgAjsZPQkq612zkW/LzpePKAY+kwuFmCqCBX Nu1iF1kO3JKdwCzW86UxTG9YcAeKJu96Kp9FiAatKEYziQeYme0Id/KT5TGV03Ms kOc63XY/dRPAH/Zn1sPIFWMK/bF2eNDGyihkPc+CHBDGLkgRQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcgwGowPqC9jP7tCgDuY0432RJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzkxMmUzODgtYzE3MC0z MjA5LTkyYjEtNzhkZDg2OGYxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1OP1bezpRUBvoUpsUn5ntLSROtiyghAj9AVdQ0uRhOdfB1jiwy3ZWN p8gevwlNMMY3LtgmeUHgzopc3TfnqmJaDSeQcc8jaGppR/eQFm6BX0Xz/NlI8va+ acGy5ho0zdFHFdn4t/ysyL7CYf5+qk/F8mBOOCcKhzP7xenBgOqwGk44NoDwFcYN T/QY+0vZriz0s3lRc2EzhOjOBScX3zCKEzbuYLDe7VPCFQ2Lq+BP1I0psIZU4zcc j2Me45EwCmdpI2H1rLmpetAmiPuCjJZhIkaRELYr8IX7yYtA85hmpGWOcjlt3yuw q8Or3fCRhnUTxFodwrZXoqok6QeT7sM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:29 2026 by rpki-client