$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa File: 7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa (raw, json) Hash identifier: HIMxnHnPjY3wcViHBVBYkbhTljvjHOUH9hkyKft54vI= Subject key identifier: 6E:07:67:66:22:80:0C:6F:F3:78:14:E8:14:00:97:97:4E:48:D0:41 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAFBC21621B2C9310143E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 74.85.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:fb:c2:16:21:b2:c9:31:01:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=a17179ae-27ac-45b4-a53a-c0b54651cc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:f6:06:55:b8:e9:0d:aa:57:b6:79:f8:21: ae:13:d4:ab:c5:1e:29:d3:69:ff:6d:1f:2d:55:f1: f9:9e:63:3b:73:08:1f:6b:15:46:c6:b0:00:0c:13: 4b:5f:59:e8:fa:32:10:92:d0:a8:13:61:7a:c2:f2: 55:88:cd:3e:a0:44:a6:75:b8:01:4e:da:34:3a:ad: 9e:36:3c:6d:99:d2:2a:2a:ec:b2:c2:e0:3b:27:58: 9a:23:70:9c:6c:81:21:f1:94:7f:18:d7:62:a3:37: 0b:90:1a:6c:5b:ba:b3:b1:f5:5f:aa:11:57:4c:bb: 75:14:e2:ea:ec:a8:9f:bb:af:d5:f6:86:51:b4:ff: d7:f1:00:ba:34:d0:3f:11:ee:d9:ce:6e:9d:f4:58: 0d:70:ed:e2:09:98:3a:0d:cb:1f:3c:e3:13:a6:97: 19:f0:6a:6a:fa:3e:d4:a7:71:20:91:a7:55:ce:3b: 36:e6:88:c6:db:5d:e0:84:52:63:eb:35:7f:2a:b2: 2f:4c:7d:65:f5:f9:e6:ea:e5:3d:8a:0c:45:3f:c2: 29:9e:98:dd:61:af:e8:f6:c9:96:d3:b5:2b:c1:ff: 93:4e:af:7b:d6:84:51:71:0f:89:75:dc:a7:b4:ab: 09:d1:4b:a7:d1:9b:84:78:e1:d0:44:59:7c:27:3d: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:67:66:22:80:0C:6F:F3:78:14:E8:14:00:97:97:4E:48:D0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b5:34:14:15:cb:2a:69:73:39:60:e6:6e:1b:7e:b3:a1:54: c6:7f:44:7a:95:01:f2:5b:b1:2c:f3:9a:34:66:ad:c8:5e:dd: ec:61:02:b4:64:bf:ce:4a:15:85:bd:2f:cf:38:b4:8d:e4:25: ab:f5:39:26:85:5b:e1:be:08:4b:45:ac:3c:30:bb:d3:82:8d: 48:27:32:09:7b:d2:d2:ea:50:8a:4f:b2:cc:63:af:e5:e0:eb: 26:8b:a9:be:f7:e8:e1:d2:9b:1b:50:d7:9a:ae:04:fb:50:28: 4d:68:c5:75:a9:fd:97:69:ed:23:d4:8c:80:13:cb:6b:4e:4d: 2f:98:cd:e0:c5:7d:9e:a4:f1:ac:8a:7f:3d:9f:88:79:c9:e5: b7:c1:25:c9:91:47:f4:67:ea:6c:38:ff:f4:d7:8e:a6:6f:7a: d8:5a:cc:0e:6c:ab:6c:2e:4e:18:39:b6:9b:85:22:31:12:86: d8:06:12:1e:bb:5d:ba:f1:4d:5e:1b:53:cf:65:18:97:87:2b: ba:56:8b:93:b1:b1:ca:37:01:d5:a8:6b:ad:a2:c6:a5:06:1e: 64:c1:60:ea:cc:08:ae:82:20:e6:49:85:96:d8:73:e6:ed:1f: 21:e0:b8:0d:ee:17:53:58:94:e1:51:07:f4:93:91:c5:76:de: 8d:3e:b1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvvCFiGyyTEBQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk YTE3MTc5YWUtMjdhYy00NWI0LWE1M2EtYzBiNTQ2NTFjYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpv2BlW46Q2qV7Z5+CGuE9SrxR4p02n/bR8t VfH5nmM7cwgfaxVGxrAADBNLX1no+jIQktCoE2F6wvJViM0+oESmdbgBTto0Oq2e NjxtmdIqKuyywuA7J1iaI3CcbIEh8ZR/GNdiozcLkBpsW7qzsfVfqhFXTLt1FOLq 7Kifu6/V9oZRtP/X8QC6NNA/Ee7Zzm6d9FgNcO3iCZg6DcsfPOMTppcZ8Gpq+j7U p3EgkadVzjs25ojG213ghFJj6zV/KrIvTH1l9fnm6uU9igxFP8IpnpjdYa/o9smW 07Urwf+TTq971oRRcQ+JddyntKsJ0Uun0ZuEeOHQRFl8Jz3H3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4HZ2YigAxv83gU6BQAl5dOSNBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4NWViNWUtMmNmMi0z MWUxLThiMWUtMTQ1YThjZDZhZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG1NBQVyyppczlg5m4bfrOhVMZ/RHqVAfJbsSzzmjRmrche3exhArRk v85KFYW9L884tI3kJav1OSaFW+G+CEtFrDwwu9OCjUgnMgl70tLqUIpPssxjr+Xg 6yaLqb736OHSmxtQ15quBPtQKE1oxXWp/Zdp7SPUjIATy2tOTS+YzeDFfZ6k8ayK fz2fiHnJ5bfBJcmRR/Rn6mw4//TXjqZvethazA5sq2wuThg5tpuFIjEShtgGEh67 XbrxTV4bU89lGJeHK7pWi5Oxsco3AdWoa62ixqUGHmTBYOrMCK6CIOZJhZbYc+bt HyHguA3uF1NYlOFRB/STkcV23o0+sdk= -----END CERTIFICATE-----Generated at Sun Jun 29 10:46:38 2025 by rpki-client