$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa File: 0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa (raw, json) Hash identifier: LLpkkgBjiYDDLqZ2+LdjroJRUN+YbvJqs5vVxOCLs1s= Subject key identifier: 25:58:70:4D:9D:F0:A1:BE:00:C9:98:82:53:E4:FF:96:55:69:CC:5D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09129558F7718B99198E0600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397240 IP address blocks: 204.74.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:95:58:f7:71:8b:99:19:8e:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4ffc1187-3f32-45b2-bac7-a3a16500741f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:c8:ba:73:98:42:10:50:c5:09:50:ad:a8: 95:43:6c:62:4d:ae:af:91:7d:ec:ac:be:91:f2:81: da:1e:45:d8:48:78:f6:63:86:47:a9:df:fd:a6:78: 3b:c6:cc:02:49:ff:ca:9b:40:c4:6d:95:02:92:9b: 67:16:fa:2f:fd:49:9a:da:69:86:c3:a2:10:aa:e3: e9:25:15:af:e3:48:16:44:ca:c9:84:8d:b2:60:3d: 4b:6a:6d:93:1f:a3:a5:ed:8d:7e:ce:db:f6:57:93: 11:ea:a5:21:84:db:a7:b0:d0:9f:1b:d1:25:ef:a8: 10:f5:89:d4:a8:fd:e4:3b:53:0a:49:21:53:60:67: 39:7a:0e:dd:f3:11:e2:40:28:d6:13:a3:e1:01:1a: 9d:f9:62:92:e2:69:4e:4a:0d:27:36:dc:33:12:3b: 6a:a3:31:f0:03:38:7f:02:38:9d:47:f0:dc:66:99: a1:bf:8a:c9:97:21:30:fe:84:86:26:43:f9:ea:b5: 71:03:ff:40:33:cc:5a:f1:85:a9:64:50:5b:9e:d0: 4f:4a:49:48:ba:6a:d9:fa:bd:0e:8e:0b:2e:6e:5d: d5:86:4c:fe:3e:53:1d:45:82:52:5f:dd:d1:e5:05: e7:a9:86:2b:89:3b:33:ce:ad:5d:6f:d1:aa:9c:75: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:70:4D:9D:F0:A1:BE:00:C9:98:82:53:E4:FF:96:55:69:CC:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0443cf44-fc76-34d8-adb5-87b5242a9a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2c:54:cc:23:27:1f:6e:6e:33:3f:e1:71:4d:6d:25:5b:0a: 28:b3:df:e2:20:b7:e4:7b:d8:03:1c:d7:82:f2:b5:ce:d2:d0: 9e:d9:a9:2c:99:25:cb:98:ca:08:8e:10:99:5b:18:01:c2:fe: 59:47:48:b0:e2:91:b5:44:9c:f5:2b:e3:98:99:af:98:86:75: 03:3b:f9:ce:14:b9:9f:07:6e:55:1c:6f:2c:e2:f4:40:2a:59: cd:38:6b:30:f0:91:c4:82:83:86:1a:67:75:a7:a1:48:40:b3: a4:0e:33:4d:dc:fd:01:b4:3a:47:39:46:e7:3c:c1:57:50:f3: d1:0b:fd:1a:40:d7:f6:94:dc:c3:75:52:a9:a7:e9:7d:80:06: 60:05:ea:32:24:68:81:b0:c4:c1:7a:1f:a3:ef:1a:24:f1:21: a8:9f:60:eb:0d:55:2b:f1:13:89:95:34:e1:d8:5a:57:9e:c3: ec:c7:23:15:64:ef:13:28:fb:a6:ad:be:4f:88:e5:14:74:c7: 0e:bb:4e:10:75:9d:85:6e:2b:74:aa:d5:a9:38:a8:79:e1:0f: e4:c4:1d:a4:21:ac:df:35:0e:36:e5:49:8b:25:3a:c3:c2:01: 80:be:64:16:c3:9e:0d:ec:78:fc:01:a4:0a:d1:ef:22:16:af: 3b:17:36:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpVY93GLmRmOBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGZmYzExODctM2YzMi00NWIyLWJhYzctYTNhMTY1MDA3NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RHIunOYQhBQxQlQraiVQ2xiTa6vkX3srL6R 8oHaHkXYSHj2Y4ZHqd/9png7xswCSf/Km0DEbZUCkptnFvov/Uma2mmGw6IQquPp JRWv40gWRMrJhI2yYD1Lam2TH6Ol7Y1+ztv2V5MR6qUhhNunsNCfG9El76gQ9YnU qP3kO1MKSSFTYGc5eg7d8xHiQCjWE6PhARqd+WKS4mlOSg0nNtwzEjtqozHwAzh/ AjidR/DcZpmhv4rJlyEw/oSGJkP56rVxA/9AM8xa8YWpZFBbntBPSklIumrZ+r0O jgsubl3Vhkz+PlMdRYJSX93R5QXnqYYriTszzq1db9GqnHUUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVYcE2d8KG+AMmYglPk/5ZVacxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDQ0M2NmNDQtZmM3Ni0z NGQ4LWFkYjUtODdiNTI0MmE5YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYsVMwjJx9ubjM/4XFNbSVbCiiz3+Igt+R72AMc14Lytc7S0J7ZqSyZ JcuYygiOEJlbGAHC/llHSLDikbVEnPUr45iZr5iGdQM7+c4UuZ8HblUcbyzi9EAq Wc04azDwkcSCg4YaZ3WnoUhAs6QOM03c/QG0Okc5Ruc8wVdQ89EL/RpA1/aU3MN1 Uqmn6X2ABmAF6jIkaIGwxMF6H6PvGiTxIaifYOsNVSvxE4mVNOHYWleew+zHIxVk 7xMo+6atvk+I5RR0xw67ThB1nYVuK3Sq1ak4qHnhD+TEHaQhrN81DjblSYslOsPC AYC+ZBbDng3sePwBpArR7yIWrzsXNgY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:12 2026 by rpki-client