$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa File: ca7435da-c073-32a7-95f4-50726ece35b1.roa (raw, json) Hash identifier: PQ/N9DnTnkYEUgCLC9x3vgz/HwDo6Rho36HS5RQtfDQ= Subject key identifier: 41:2F:DA:8E:88:29:34:89:4B:99:42:5E:83:1C:6A:46:28:45:44:C5 Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Certificate serial: 010D0C9F4328584A9FFB98E8FD000EF00881EE80 Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 19704 IP address blocks: 74.85.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:98:e8:fd:00:0e:f0:08:81:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=8a17011c-5b9a-4dff-9895-ace336531eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:13:b9:42:13:76:6f:e3:7e:9c:7d:00:75: 3c:02:6a:d5:75:b0:de:f6:c3:81:bc:88:df:13:58: 57:b4:84:d0:73:da:ae:41:c0:f5:8b:71:4a:d6:12: 1e:18:74:63:fe:95:d3:0f:66:62:6f:5b:1c:9b:5e: 84:e5:55:3c:3a:be:17:d1:74:02:54:0e:26:ca:90: 01:5b:90:dd:ca:d8:95:99:63:f6:d7:2b:bc:ee:63: 15:c6:0f:9d:2b:96:ed:c2:7d:fd:df:48:68:20:b6: fd:54:a5:85:d2:3c:30:b0:87:65:64:78:0e:fe:86: ca:71:06:62:f9:39:91:8b:1f:80:f4:4e:13:f7:e6: b9:f3:bf:8c:b1:82:e2:8e:d9:65:6b:d4:71:5b:b9: dd:16:64:e4:6e:1c:56:ac:94:d9:aa:4e:17:e2:73: 4d:4a:bd:69:db:e5:54:54:bf:36:0e:76:c0:95:9e: 93:93:d7:ef:ef:6d:a8:3f:53:15:da:ed:94:16:3e: df:6b:f1:7d:97:65:54:6c:4a:ef:51:27:83:73:36: 71:b1:4d:af:c2:bf:06:cf:64:d1:01:c6:06:9f:fd: c4:b8:bf:22:a2:0b:b4:84:4b:30:d3:19:56:ab:a3: a3:f4:cc:6b:74:d1:c0:b8:10:39:27:1a:5e:0e:2c: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2F:DA:8E:88:29:34:89:4B:99:42:5E:83:1C:6A:46:28:45:44:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ca7435da-c073-32a7-95f4-50726ece35b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl X509v3 Authority Key Identifier: keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer sbgp-ipAddrBlock: critical IPv4: 74.85.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:79:72:8b:26:5f:bd:95:54:04:7b:4e:7b:75:f4:45:24:14: 06:d1:f4:17:5e:3e:7f:33:9b:f5:68:f1:75:b5:95:a4:11:5e: 39:3b:56:7e:a7:bc:f3:a4:7f:62:5e:81:c0:97:6a:4d:f6:3e: 25:cf:ed:05:64:8b:b0:d8:b8:35:b8:6a:62:a0:b1:f1:0d:27: a9:fa:58:34:85:78:d0:e9:69:b1:82:02:a5:03:df:f1:6c:88: f0:a9:0a:e0:7c:9a:a1:b8:ae:b1:77:c7:81:b3:9f:da:63:11: 7b:57:c4:7c:de:5e:1d:5d:50:18:9e:78:ec:d8:5a:54:41:21: 20:c1:83:e1:ab:ba:78:a8:a2:8f:a0:ea:ba:26:15:dd:7e:40: 5f:8f:8a:b1:de:ac:b2:20:61:8f:53:79:68:9d:ad:80:09:f0: a4:8f:e6:1b:d1:f9:0b:5f:b4:1d:c4:8c:54:1a:6c:c2:23:9e: fb:ea:dd:a5:ac:8a:7b:43:0d:66:18:2d:5d:14:b1:f6:08:2f: 37:fa:c3:29:27:0d:5c:ac:ca:83:38:73:41:78:49:18:6b:00: cb:7b:3c:d5:cf:3e:bc:e4:49:3a:47:d8:bf:2c:4c:1f:b9:ae: 66:68:2d:fe:a5:07:c1:35:fe:84:94:10:6d:8a:93:de:70:cb: e7:6d:23:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5jo/QAO8AiB7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRmZTcyZDMtYzdmNy00YzkzLWE5ZjAtYTU3MzQxYjI1 OTBiMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk OGExNzAxMWMtNWI5YS00ZGZmLTk4OTUtYWNlMzM2NTMxZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiMTuUITdm/jfpx9AHU8AmrVdbDe9sOBvIjf E1hXtITQc9quQcD1i3FK1hIeGHRj/pXTD2Zib1scm16E5VU8Or4X0XQCVA4mypAB W5DdytiVmWP21yu87mMVxg+dK5btwn3930hoILb9VKWF0jwwsIdlZHgO/obKcQZi +TmRix+A9E4T9+a587+MsYLijtlla9RxW7ndFmTkbhxWrJTZqk4X4nNNSr1p2+VU VL82DnbAlZ6Tk9fv722oP1MV2u2UFj7fa/F9l2VUbErvUSeDczZxsU2vwr8Gz2TR AcYGn/3EuL8iogu0hEsw0xlWq6Oj9MxrdNHAuBA5JxpeDixhAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEv2o6IKTSJS5lCXoMcakYoRUTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZl NzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFiMjU5MGIvY2E3NDM1ZGEtYzA3My0z MmE3LTk1ZjQtNTA3MjZlY2UzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRmZTcyZDMtYzdmNy00YzkzLWE5 ZjAtYTU3MzQxYjI1OTBiLzc0ZmU3MmQzLWM3ZjctNGM5My1hOWYwLWE1NzM0MWIy NTkwYi5jcmwwHwYDVR0jBBgwFoAUvpvwQ+HnqqEBnAX000Kk3J9+yFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTcz NDFiMjU5MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp5cosmX72VVAR7Tnt19EUkFAbR9BdePn8zm/Vo8XW1laQRXjk7Vn6n vPOkf2JegcCXak32PiXP7QVki7DYuDW4amKgsfENJ6n6WDSFeNDpabGCAqUD3/Fs iPCpCuB8mqG4rrF3x4Gzn9pjEXtXxHzeXh1dUBieeOzYWlRBISDBg+Gruniooo+g 6romFd1+QF+PirHerLIgYY9TeWidrYAJ8KSP5hvR+QtftB3EjFQabMIjnvvq3aWs intDDWYYLV0UsfYILzf6wyknDVysyoM4c0F4SRhrAMt7PNXPPrzkSTpH2L8sTB+5 rmZoLf6lB8E1/oSUEG2Kk95wy+dtI7w= -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:18 2025 by rpki-client