$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa File: ca7435da-c073-32a7-95f4-50726ece35b1.roa (raw, json) Hash identifier: U/uWBfpzDOXde5SoYpmKPoGttk2g6II/P8VhWwVO49Q= Subject key identifier: AC:FF:27:38:57:61:FC:8F:18:0D:A2:A7:B2:B1:3B:6C:C2:08:71:42 Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Certificate serial: 010D0C9F4328584F63F81609CD4BBFD421A38880 Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 19704 IP address blocks: 74.85.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:16:09:cd:4b:bf:d4:21:a3:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=347896b9-f3b7-4250-890d-c3a1fce12402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:c6:5b:89:9c:25:9f:0e:39:cb:94:de:11: bc:77:7f:e7:5d:b9:35:00:21:e5:c7:07:ae:c3:97: ab:31:18:39:ca:20:a0:29:7e:e8:7d:02:4c:0f:86: 78:28:7b:6c:65:0b:9e:fd:e3:85:07:16:93:45:99: 2f:a3:c1:41:e0:fe:3f:dc:1f:b0:f7:05:34:8b:83: c0:40:59:2e:6d:fd:96:25:95:93:3a:0b:93:41:d5: 8d:02:2c:33:d7:4c:63:2f:8d:0f:e0:0f:85:f3:22: 0b:c3:2d:e2:dc:d4:05:00:ee:2f:83:8b:25:3d:35: af:18:6d:3a:84:01:f4:2b:44:b7:ac:ff:b8:07:58: 64:38:72:b1:2e:33:0a:21:cd:75:37:9c:32:6d:04: c6:22:7d:61:99:e5:e6:c6:71:70:97:95:6c:06:8b: 3a:b0:6e:f9:fb:57:af:fa:fa:63:db:3f:d8:6c:df: 64:78:cb:66:ea:be:9a:51:ba:f1:ee:69:a5:66:da: eb:13:e2:b0:ce:63:c9:fc:4c:eb:3e:a8:4e:13:38: 64:e4:bd:01:35:97:16:02:04:3e:c3:94:b1:b7:46: 5c:4c:92:4a:27:14:f4:fb:b2:f1:47:a5:bf:3a:e8: fd:5e:5e:87:63:1a:eb:2a:67:2a:08:c9:1a:81:c8: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FF:27:38:57:61:FC:8F:18:0D:A2:A7:B2:B1:3B:6C:C2:08:71:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl X509v3 Authority Key Identifier: keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer sbgp-ipAddrBlock: critical IPv4: 74.85.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f0:1f:5d:ed:ec:50:78:b9:bf:b1:90:d0:35:5d:26:ac:2a: f9:46:35:e6:8d:81:9f:55:b0:89:7c:30:0b:3a:ae:a9:33:90: a6:ef:b6:35:e7:dc:28:43:da:37:82:6a:00:de:7e:4f:93:59: a9:77:a7:da:88:a5:db:08:5d:ab:33:38:8c:b1:aa:10:16:f7: 09:48:d6:28:fe:d3:dc:4a:a0:8f:34:65:9e:a0:91:5d:0a:0d: 04:bf:8f:c4:7e:3c:6a:14:05:38:8d:e7:19:79:53:e2:a2:7b: d9:62:d4:6c:c6:85:2e:2f:e7:c3:be:4b:9f:ec:69:9c:c4:a7: b1:77:5d:78:4e:d4:eb:64:2b:e9:2c:ec:14:22:97:ea:f2:74: d5:04:2f:a0:e9:cf:52:9d:70:b3:e2:4d:a4:d8:81:e0:e4:df: b9:88:5b:3f:62:7d:6a:e7:10:44:4a:43:25:80:9a:39:af:7e: 97:22:04:3a:4f:21:c3:d4:dc:7d:de:38:6b:a3:09:a7:5f:4a: de:b2:cc:60:ad:94:bf:24:0b:54:66:fd:c4:30:26:2a:48:fa: 46:e5:1c:61:ad:47:f9:7a:99:84:42:7b:29:50:72:65:9b:1b: d8:70:fe:57:6c:99:a4:19:03:a5:7c:a9:54:5f:5c:6d:4d:36: 51:81:f3:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BYJzUu/1CGjiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRmZTcyZDMtYzdmNy00YzkzLWE5ZjAtYTU3MzQxYjI1 OTBiMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MzQ3ODk2YjktZjNiNy00MjUwLTg5MGQtYzNhMWZjZTEyNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXPGW4mcJZ8OOcuU3hG8d3/nXbk1ACHlxweu w5erMRg5yiCgKX7ofQJMD4Z4KHtsZQue/eOFBxaTRZkvo8FB4P4/3B+w9wU0i4PA QFkubf2WJZWTOguTQdWNAiwz10xjL40P4A+F8yILwy3i3NQFAO4vg4slPTWvGG06 hAH0K0S3rP+4B1hkOHKxLjMKIc11N5wybQTGIn1hmeXmxnFwl5VsBos6sG75+1ev +vpj2z/YbN9keMtm6r6aUbrx7mmlZtrrE+KwzmPJ/EzrPqhOEzhk5L0BNZcWAgQ+ w5Sxt0ZcTJJKJxT0+7LxR6W/Ouj9Xl6HYxrrKmcqCMkagci8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz/JzhXYfyPGA2ip7KxO2zCCHFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZl NzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFiMjU5MGIvY2E3NDM1ZGEtYzA3My0z MmE3LTk1ZjQtNTA3MjZlY2UzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRmZTcyZDMtYzdmNy00YzkzLWE5 ZjAtYTU3MzQxYjI1OTBiLzc0ZmU3MmQzLWM3ZjctNGM5My1hOWYwLWE1NzM0MWIy NTkwYi5jcmwwHwYDVR0jBBgwFoAUvpvwQ+HnqqEBnAX000Kk3J9+yFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTcz NDFiMjU5MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLwH13t7FB4ub+xkNA1XSasKvlGNeaNgZ9VsIl8MAs6rqkzkKbvtjXn 3ChD2jeCagDefk+TWal3p9qIpdsIXaszOIyxqhAW9wlI1ij+09xKoI80ZZ6gkV0K DQS/j8R+PGoUBTiN5xl5U+Kie9li1GzGhS4v58O+S5/saZzEp7F3XXhO1OtkK+ks 7BQil+rydNUEL6Dpz1KdcLPiTaTYgeDk37mIWz9ifWrnEERKQyWAmjmvfpciBDpP IcPU3H3eOGujCadfSt6yzGCtlL8kC1Rm/cQwJipI+kblHGGtR/l6mYRCeylQcmWb G9hw/ldsmaQZA6V8qVRfXG1NNlGB85I= -----END CERTIFICATE-----Generated at Mon Oct 12 00:31:19 2026 by rpki-client