$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa File: 7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa (raw, json) Hash identifier: TnwcCnp8A8gSBFT33hiqBLHPdm4ADU7mBXu7LnDubmE= Subject key identifier: 65:C8:D0:1E:6B:DC:77:34:D3:47:ED:8C:BE:2F:33:B1:08:8A:24:20 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76CEF3964FB6981306A080 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 74.85.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ce:f3:96:4f:b6:98:13:06:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=78b3a9f9-685a-44ca-83bf-be396d1dc4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:1b:34:91:b8:e5:9b:45:e5:5c:5f:9e:ef: 9f:59:0c:09:96:53:36:4b:68:ce:f6:5e:6c:d7:9d: e8:5a:cd:04:88:0e:2d:0d:39:b3:0a:ca:90:89:9d: 27:c4:b8:6d:fc:0c:04:c6:fe:64:26:b9:50:35:55: 71:05:e6:2a:11:e4:41:81:ab:eb:cf:89:97:41:a9: fa:62:5f:f4:f3:46:5d:7d:6d:24:58:58:2d:0b:c3: 2c:99:39:13:7e:74:a5:33:c2:ed:77:bb:8c:9d:55: 63:a5:97:75:e1:7d:61:5c:d3:88:3b:fd:11:72:2d: 0f:c9:83:a9:5e:44:69:7d:1b:e7:cf:3f:f9:e8:cd: d8:f8:27:dc:cf:0c:03:ae:4a:ed:7a:5c:59:8c:d6: c3:01:6a:b8:0f:ef:58:b1:01:40:f7:b9:c8:7c:87: 52:97:2d:35:89:86:41:00:29:33:52:ef:c6:0a:99: ae:b8:24:a9:8c:cb:e3:b3:83:38:29:b3:d1:e9:41: fa:c2:18:9f:58:b0:a6:69:c3:99:b0:03:b4:37:89: 92:bc:f4:6a:3f:85:72:69:c4:ff:c5:bd:ec:67:21: db:4f:24:58:ac:06:7b:fa:6b:ae:9d:08:a3:d8:3b: 9d:eb:d3:74:f3:b0:30:19:cc:02:87:d9:94:3e:c2: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C8:D0:1E:6B:DC:77:34:D3:47:ED:8C:BE:2F:33:B1:08:8A:24:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:3a:60:e5:17:4f:81:03:05:26:0f:fa:49:d9:f0:6e:42: bc:9b:53:fd:6f:b5:30:b5:92:97:36:ed:3b:c5:a7:cb:44:d3: 26:02:1e:86:7b:7a:b4:21:1b:4c:52:ce:cf:86:08:12:65:93: 7e:59:47:c8:f1:2d:b7:c9:0e:75:c5:5f:91:8f:d5:b6:01:20: 44:94:4c:fe:26:fd:ba:f9:a2:cf:ad:49:d5:24:17:aa:b1:2b: ff:36:6a:fe:20:f2:83:1c:bd:55:70:74:c9:57:79:b3:82:3f: 98:89:60:77:bd:79:df:d6:e0:9b:dc:6e:02:50:06:7e:df:2f: 93:b2:89:f1:70:24:75:dd:f2:38:17:42:5a:30:a2:c3:af:cd: f0:51:0f:1d:6f:4b:06:3e:41:ee:86:3b:33:94:de:26:d8:72: 9b:ef:f9:51:f5:37:64:31:63:22:f4:99:11:47:59:64:db:4c: 55:13:1f:85:9f:ee:52:15:eb:79:d4:16:75:9a:91:9f:0f:0d: a0:9c:d4:84:f5:b5:99:8c:d0:5b:52:33:12:80:84:83:eb:50: 57:bb:de:3d:4d:5c:31:01:64:85:28:8f:d1:04:15:8d:b7:c4: 4f:99:16:db:bd:09:6e:a1:f8:b6:68:22:6b:64:65:b2:c6:a5: b6:f0:a7:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds7zlk+2mBMGoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzhiM2E5ZjktNjg1YS00NGNhLTgzYmYtYmUzOTZkMWRjNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyobNJG45ZtF5Vxfnu+fWQwJllM2S2jO9l5s 153oWs0EiA4tDTmzCsqQiZ0nxLht/AwExv5kJrlQNVVxBeYqEeRBgavrz4mXQan6 Yl/080ZdfW0kWFgtC8MsmTkTfnSlM8Ltd7uMnVVjpZd14X1hXNOIO/0Rci0PyYOp XkRpfRvnzz/56M3Y+CfczwwDrkrtelxZjNbDAWq4D+9YsQFA97nIfIdSly01iYZB ACkzUu/GCpmuuCSpjMvjs4M4KbPR6UH6whifWLCmacOZsAO0N4mSvPRqP4VyacT/ xb3sZyHbTyRYrAZ7+muunQij2Dud69N087AwGcwCh9mUPsIqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXI0B5r3Hc000ftjL4vM7EIiiQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4NWViNWUtMmNmMi0z MWUxLThiMWUtMTQ1YThjZDZhZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOfOmDlF0+BAwUmD/pJ2fBuQrybU/1vtTC1kpc27TvFp8tE0yYCHoZ7 erQhG0xSzs+GCBJlk35ZR8jxLbfJDnXFX5GP1bYBIESUTP4m/br5os+tSdUkF6qx K/82av4g8oMcvVVwdMlXebOCP5iJYHe9ed/W4JvcbgJQBn7fL5OyifFwJHXd8jgX QlowosOvzfBRDx1vSwY+Qe6GOzOU3ibYcpvv+VH1N2QxYyL0mRFHWWTbTFUTH4Wf 7lIV63nUFnWakZ8PDaCc1IT1tZmM0FtSMxKAhIPrUFe73j1NXDEBZIUoj9EEFY23 xE+ZFtu9CW6h+LZoImtkZbLGpbbwp5Y= -----END CERTIFICATE-----Generated at Sat Sep 6 23:52:03 2025 by rpki-client