$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d2fdc9ea-cd4a-39ad-aae1-a4fec75bab53.roa File: d2fdc9ea-cd4a-39ad-aae1-a4fec75bab53.roa (raw, json) Hash identifier: sXIcogCJc9zQVEACpUtvaWAfFrfRc5n+KeBLHz5sJbI= Subject key identifier: E5:E8:34:F9:86:A6:0A:9A:C9:B8:07:F7:3E:7B:30:B6:F0:3D:C7:D2 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD25BE3B0B15E0E514BDDA680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d2fdc9ea-cd4a-39ad-aae1-a4fec75bab53.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 54858 IP address blocks: 74.85.64.0/19 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:e3:b0:b1:5e:0e:51:4b:dd:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=a1460ce0-f556-4082-be2e-11665269b556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:c4:32:0b:a5:6e:b1:f4:e9:fa:8a:25:f1: 73:1d:00:d0:c6:d6:ab:b7:c9:f3:9b:49:76:d6:88: b6:85:32:9a:05:e5:ff:bb:f7:71:f7:dd:9f:f2:f2: 22:9f:2d:c1:a7:13:46:75:41:f6:e2:a0:21:f9:ae: 92:ef:49:3f:b9:e4:62:b2:23:ad:f3:1a:0d:c8:00: d9:02:ca:d0:69:5d:02:46:dd:ff:d3:19:66:03:ac: c7:5a:92:4e:5d:fd:8c:f9:c1:d3:ae:d5:b1:7b:4b: 5e:91:6c:fe:5b:88:02:99:8b:f7:b0:41:80:ed:1f: 25:ba:6b:83:14:29:e3:0b:b5:20:d8:10:ff:d1:fd: f7:85:f2:93:6c:c4:c1:23:77:36:ac:3f:1e:03:74: e5:41:bc:1d:08:46:55:50:63:09:45:68:34:08:70: 83:43:e9:6f:c4:8f:c4:54:de:c6:7e:d9:be:85:4d: 2a:d0:a8:11:4f:cf:70:9d:a4:7c:7f:87:c8:86:fb: a8:39:bf:6f:78:20:b2:66:3e:f1:f8:9a:0f:75:e9: 72:85:1d:0c:31:c1:9f:cc:72:9f:96:3b:b1:27:2a: e6:5b:e1:07:2f:ac:2c:a3:2d:de:f6:67:19:c3:ea: 04:1d:e0:1f:b4:77:9b:81:2b:57:c5:05:7e:e8:23: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E8:34:F9:86:A6:0A:9A:C9:B8:07:F7:3E:7B:30:B6:F0:3D:C7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d2fdc9ea-cd4a-39ad-aae1-a4fec75bab53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:45:75:87:25:04:4d:a2:06:ab:e8:21:48:91:60:81:d8:72: 70:55:01:18:6b:3b:ad:f7:8c:e2:45:96:52:83:3b:27:00:ae: e5:5f:f3:7f:0e:df:22:4b:5e:72:87:c9:ec:4a:2a:6d:2e:d0: 5c:fd:06:72:f4:41:71:84:1f:ca:fb:fa:53:fb:1f:c6:b8:4a: fa:e8:bf:2c:35:e7:43:43:ca:40:11:5c:50:36:bb:0b:17:ef: af:cd:32:ba:0c:da:1d:81:f8:1b:a0:21:ab:79:1b:cd:43:2a: 69:28:5b:63:4a:7d:5b:70:5a:a1:e8:f8:66:9b:2b:16:7e:35: df:86:af:29:34:fd:51:93:0f:f2:fe:7f:53:21:48:47:37:0e: 01:19:97:ff:b5:e2:f2:2b:8e:b9:5a:35:1c:96:b3:a6:6a:bc: 7c:fa:16:0c:51:d4:83:2b:6a:f0:23:6b:82:13:35:97:a7:4a: 4b:84:df:e7:08:2c:96:f1:94:a8:16:21:b9:79:8c:48:b1:af: 8b:b2:19:a5:46:1b:b8:48:1b:fa:c6:c3:22:1e:64:0f:04:62: bc:76:11:fc:69:f6:20:02:17:b6:d8:95:6c:8d:fe:df:da:41: a8:79:ed:ac:ff:b0:1e:f8:e5:3b:8d:c1:c1:86:65:69:b7:71: 2d:e5:cc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW+OwsV4OUUvdpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk YTE0NjBjZTAtZjU1Ni00MDgyLWJlMmUtMTE2NjUyNjliNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqATEMgulbrH06fqKJfFzHQDQxtart8nzm0l2 1oi2hTKaBeX/u/dx992f8vIiny3BpxNGdUH24qAh+a6S70k/ueRisiOt8xoNyADZ AsrQaV0CRt3/0xlmA6zHWpJOXf2M+cHTrtWxe0tekWz+W4gCmYv3sEGA7R8lumuD FCnjC7Ug2BD/0f33hfKTbMTBI3c2rD8eA3TlQbwdCEZVUGMJRWg0CHCDQ+lvxI/E VN7Gftm+hU0q0KgRT89wnaR8f4fIhvuoOb9veCCyZj7x+JoPdelyhR0MMcGfzHKf ljuxJyrmW+EHL6wsoy3e9mcZw+oEHeAftHebgStXxQV+6CPY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXoNPmGpgqaybgH9z57MLbwPcfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDJmZGM5ZWEtY2Q0YS0z OWFkLWFhZTEtYTRmZWM3NWJhYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdFdYclBE2iBqvoIUiRYIHYcnBVARhrO633jOJFllKDOycAruVf838O 3yJLXnKHyexKKm0u0Fz9BnL0QXGEH8r7+lP7H8a4Svrovyw150NDykARXFA2uwsX 76/NMroM2h2B+BugIat5G81DKmkoW2NKfVtwWqHo+GabKxZ+Nd+Gryk0/VGTD/L+ f1MhSEc3DgEZl/+14vIrjrlaNRyWs6ZqvHz6FgxR1IMravAja4ITNZenSkuE3+cI LJbxlKgWIbl5jEixr4uyGaVGG7hIG/rGwyIeZA8EYrx2Efxp9iACF7bYlWyN/t/a Qah57az/sB745TuNwcGGZWm3cS3lzHI= -----END CERTIFICATE-----Generated at Sun Nov 15 14:43:10 2026 by rpki-client