$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa File: 498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa (raw, json) Hash identifier: W8Eg08owBqMdDV8unhgMVm2HBDFRGiGupnBdTJONIco= Subject key identifier: 19:B8:29:F3:6C:15:29:B6:AB:E9:17:B4:FD:D5:54:CD:79:D3:3C:52 Certificate issuer: /CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Certificate serial: 010D0C9F4328584EA7906E0C2A97143680D06080 Authority key identifier: 73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 18849 IP address blocks: 74.85.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:6e:0c:2a:97:14:36:80:d0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=40130325-3ce1-4087-a55b-1cd700671db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:9a:ad:c7:23:88:86:68:99:2f:15:2b:52: 13:53:11:6b:ec:5c:05:d8:24:93:58:58:b2:ca:84: 1a:2b:50:35:57:f6:48:4c:81:81:33:f0:0a:a9:8d: 36:3c:1d:4b:b4:04:ed:25:ca:36:e5:24:1b:c7:39: 0c:21:14:1b:21:61:da:b6:0d:d0:39:ba:61:54:78: d6:2f:4e:f7:71:a5:6c:93:70:69:29:f2:ff:47:ae: ff:e3:6d:48:bd:e3:df:fb:b8:25:fa:02:f1:78:81: 1a:24:aa:86:a4:12:d2:4e:43:4d:08:4b:2c:e9:69: f8:be:8b:7a:db:87:41:5c:67:5c:49:8a:4f:d7:a9: 90:0b:3e:c0:e8:b9:9e:e4:ae:be:41:9d:44:8e:c2: aa:d8:e7:d2:d5:53:0e:bd:50:67:15:2b:60:24:a9: 02:7c:91:c8:62:b4:fb:d2:3c:c4:ae:6a:6f:13:91: bd:6a:c8:e9:ad:03:55:97:0e:30:63:67:e4:56:45: 01:8a:22:18:42:b4:ed:86:f9:df:c9:87:01:ef:ad: 12:12:10:0e:6f:e4:db:09:84:b8:4b:1a:d9:e6:63: 10:fd:56:b6:36:52:c7:28:9a:44:9d:b9:53:fa:1e: 7f:8b:66:d9:78:31:50:8f:54:d2:86:90:ea:ed:83: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B8:29:F3:6C:15:29:B6:AB:E9:17:B4:FD:D5:54:CD:79:D3:3C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/498bf01f-8f8a-3980-bee6-a1140c40f6a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.crl X509v3 Authority Key Identifier: keyid:73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer sbgp-ipAddrBlock: critical IPv4: 74.85.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:91:3e:32:76:64:6f:3d:1a:8d:f7:bf:13:e7:88:6e:37:3b: 8c:18:2a:a4:52:35:45:10:8c:d3:2f:f4:04:c0:9d:22:b2:08: f1:cc:60:74:c1:8e:eb:54:b5:d6:91:96:fc:94:58:54:72:71: 8f:55:b2:58:7c:2d:cd:bd:d9:37:25:4c:85:b8:5d:e7:eb:bd: 9f:1d:25:2c:32:9c:ff:0d:9d:ab:f6:e5:35:e5:24:0f:7f:4f: 48:b4:62:fc:99:55:43:8e:ea:15:ca:92:41:6d:05:c5:a3:d0: 70:37:5e:26:38:7c:b3:c4:f1:85:ab:b4:2f:b1:e2:c7:8c:43: e2:1e:93:56:cd:ee:c2:05:e6:90:7e:55:4e:5d:ca:af:37:13: 5d:8d:8e:dc:ef:21:78:79:0b:82:84:15:47:f8:67:8c:a1:98: 6d:da:7d:88:43:37:0d:fa:69:11:cd:76:ac:9b:2b:2d:6d:aa: 5b:4e:bd:47:9e:4f:d2:f0:dd:05:60:6d:18:ad:c7:ea:47:b2: e2:64:ec:7c:8a:6e:14:5b:d0:94:43:4c:25:c2:2e:36:a1:09: bb:58:1f:35:83:dc:eb:0c:6a:5f:65:d6:f4:43:bd:ff:ba:63: d3:68:61:18:0f:5e:39:c9:40:a1:b0:1c:5d:fc:cc:41:2b:2b: a0:e3:53:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkG4MKpcUNoDQYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA1YTk4OGQtN2I3NS00ZWMwLTg0ZmMtNWNkMmY1ZWMy YzIwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDAxMzAzMjUtM2NlMS00MDg3LWE1NWItMWNkNzAwNjcxZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0marccjiIZomS8VK1ITUxFr7FwF2CSTWFiy yoQaK1A1V/ZITIGBM/AKqY02PB1LtATtJco25SQbxzkMIRQbIWHatg3QObphVHjW L073caVsk3BpKfL/R67/421IvePf+7gl+gLxeIEaJKqGpBLSTkNNCEss6Wn4vot6 24dBXGdcSYpP16mQCz7A6Lme5K6+QZ1EjsKq2OfS1VMOvVBnFStgJKkCfJHIYrT7 0jzErmpvE5G9asjprQNVlw4wY2fkVkUBiiIYQrTthvnfyYcB760SEhAOb+TbCYS4 SxrZ5mMQ/Va2NlLHKJpEnblT+h5/i2bZeDFQj1TShpDq7YNu5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm4KfNsFSm2q+kXtP3VVM150zxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zMDVh OTg4ZC03Yjc1LTRlYzAtODRmYy01Y2QyZjVlYzJjMjAvNDk4YmYwMWYtOGY4YS0z OTgwLWJlZTYtYTExNDBjNDBmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzA1YTk4OGQtN2I3NS00ZWMwLTg0 ZmMtNWNkMmY1ZWMyYzIwLzMwNWE5ODhkLTdiNzUtNGVjMC04NGZjLTVjZDJmNWVj MmMyMC5jcmwwHwYDVR0jBBgwFoAUc1MUOZG20CRvZ7KLhL6/pCOQfkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zMDVhOTg4ZC03Yjc1LTRlYzAtODRmYy01Y2Qy ZjVlYzJjMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqRPjJ2ZG89Go33vxPniG43O4wYKqRSNUUQjNMv9ATAnSKyCPHMYHTB jutUtdaRlvyUWFRycY9Vslh8Lc292TclTIW4XefrvZ8dJSwynP8Nnav25TXlJA9/ T0i0YvyZVUOO6hXKkkFtBcWj0HA3XiY4fLPE8YWrtC+x4seMQ+Iek1bN7sIF5pB+ VU5dyq83E12NjtzvIXh5C4KEFUf4Z4yhmG3afYhDNw36aRHNdqybKy1tqltOvUee T9Lw3QVgbRitx+pHsuJk7HyKbhRb0JRDTCXCLjahCbtYHzWD3OsMal9l1vRDvf+6 Y9NoYRgPXjnJQKGwHF38zEErK6DjUy0= -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:22 2026 by rpki-client