$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa File: 28c14568-3d6b-3afa-aaf3-35ef290a818e.roa (raw, json) Hash identifier: ERaTtrDOpPOvgqB0wcCOxHZZYuy59wujUK9CllSRlQY= Subject key identifier: E6:5C:C9:D0:35:5B:4A:E1:60:C3:84:B1:85:26:5E:5D:92:76:D0:C3 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC4590663104D8F967872140 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 74.85.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:90:66:31:04:d8:f9:67:87:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=db608d9c-a300-4386-a0e5-d5e278329850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:d7:65:fb:0a:b9:19:c3:2e:1c:9c:ec:1e: a7:9c:f6:6a:ea:d8:72:b6:40:46:2e:e6:c3:e4:5d: 43:51:2a:4c:60:ec:58:ca:ca:41:ff:f8:c5:c0:82: c2:e4:5f:b9:e0:1c:54:70:90:a9:e7:41:47:0e:e4: e4:4b:7b:22:b6:5c:99:28:fc:db:d9:66:c3:42:62: 19:d3:fd:eb:b5:24:20:7c:7c:84:08:71:02:8d:5a: ae:65:52:7f:bf:9e:75:7b:a5:95:12:93:20:7f:6f: a9:ac:49:00:c0:da:40:06:82:1e:f6:44:0c:3c:4a: 67:46:71:3a:c8:4f:3b:e4:2d:79:82:bb:bd:48:23: 16:81:3c:38:1e:68:95:79:ed:59:60:a0:fc:25:cd: 77:23:1d:cc:86:76:30:8b:6e:bc:08:57:aa:78:41: 1a:67:36:62:b5:cf:68:2a:88:28:ca:2d:c1:59:36: 8e:1f:2a:95:81:a8:8e:9c:19:52:86:12:22:e1:29: 2e:d4:be:6c:dc:79:ac:a4:7c:b0:37:0f:88:7a:d0: c5:79:d1:24:a5:4e:71:a0:03:66:02:b2:73:58:69: 2a:7d:bf:c4:69:1c:f1:5b:1b:7e:86:af:e4:34:54: a2:c5:80:0e:61:07:ab:14:89:9f:91:2e:4d:ca:90: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5C:C9:D0:35:5B:4A:E1:60:C3:84:B1:85:26:5E:5D:92:76:D0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b9:d1:62:34:5b:62:60:7c:8c:3c:1a:22:68:23:af:fe:8a: ec:44:9e:b7:4c:40:4b:23:1d:3b:a8:7a:23:cf:40:23:5a:28: 2f:81:bd:7f:ab:07:8d:b3:3d:00:fb:af:4e:16:be:9b:d4:64: bc:84:3e:75:77:db:32:9a:5f:60:6b:26:98:a0:db:5d:6e:da: d6:e5:66:91:f9:48:62:4a:06:55:82:fc:41:a1:14:6c:aa:98: a2:e5:4c:5f:5e:4c:c8:05:10:a7:7d:38:9e:10:79:47:5a:85: 34:77:2d:7c:c4:a1:a0:5d:18:d4:50:db:18:3a:05:d1:0b:48: 93:1d:0f:62:31:cf:56:a9:82:6e:bf:23:19:58:52:e0:4d:f8: 9e:0d:97:88:23:e4:db:39:29:00:4f:3f:0c:e5:aa:2b:3d:af: 9f:d4:bc:b0:a4:f4:9d:72:b5:13:cb:e5:50:59:40:3f:38:63: 15:0e:4f:27:ac:06:f8:7b:05:7a:b2:a8:66:c1:68:43:f5:83: 4e:1e:48:bf:ce:79:a9:4a:cd:7b:1c:e0:de:fd:5c:83:c1:f7: 86:81:d4:55:97:63:69:e4:7f:ab:57:9a:c6:cd:aa:66:a2:9b: 42:c6:a6:c9:e0:6b:c2:eb:7e:08:76:7a:de:13:31:4d:8a:d2: c9:e0:8c:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZBmMQTY+WeHIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZGI2MDhkOWMtYTMwMC00Mzg2LWEwZTUtZDVlMjc4MzI5ODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsLXZfsKuRnDLhyc7B6nnPZq6thytkBGLubD 5F1DUSpMYOxYyspB//jFwILC5F+54BxUcJCp50FHDuTkS3sitlyZKPzb2WbDQmIZ 0/3rtSQgfHyECHECjVquZVJ/v551e6WVEpMgf2+prEkAwNpABoIe9kQMPEpnRnE6 yE875C15gru9SCMWgTw4HmiVee1ZYKD8Jc13Ix3MhnYwi268CFeqeEEaZzZitc9o Kogoyi3BWTaOHyqVgaiOnBlShhIi4Sku1L5s3HmspHywNw+IetDFedEkpU5xoANm ArJzWGkqfb/EaRzxWxt+hq/kNFSixYAOYQerFImfkS5NypD2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZcydA1W0rhYMOEsYUmXl2SdtDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjhjMTQ1NjgtM2Q2Yi0z YWZhLWFhZjMtMzVlZjI5MGE4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm50WI0W2JgfIw8GiJoI6/+iuxEnrdMQEsjHTuoeiPPQCNaKC+BvX+r B42zPQD7r04WvpvUZLyEPnV32zKaX2BrJpig211u2tblZpH5SGJKBlWC/EGhFGyq mKLlTF9eTMgFEKd9OJ4QeUdahTR3LXzEoaBdGNRQ2xg6BdELSJMdD2Ixz1apgm6/ IxlYUuBN+J4Nl4gj5Ns5KQBPPwzlqis9r5/UvLCk9J1ytRPL5VBZQD84YxUOTyes Bvh7BXqyqGbBaEP1g04eSL/OealKzXsc4N79XIPB94aB1FWXY2nkf6tXmsbNqmai m0LGpsnga8Lrfgh2et4TMU2K0sngjIk= -----END CERTIFICATE-----Generated at Wed May 13 04:35:37 2026 by rpki-client